Help protect children from gaming harms.

Take our survey

Please or to access all these features

AIBU?

Share your dilemmas and get honest opinions from other Mumsnetters.

Another Data breach by NHS staff!

47 replies

Netcurtainnelly · Yesterday 11:23

Another data breach by NHS staff😕

https://news.sky.com/story/investigation-into-claims-nhs-staff-accessed-medical-records-of-schoolgirl-who-died-on-camping-trip-13570614

Why dont people learn, and stop being so bloody nosy. They are risking their jobs . Why? 🤔

OP posts:
randomchap · Yesterday 13:27

SuePer · Yesterday 13:22

'If I'm not involved in patient X's care, or admin, then I shouldn't access their record'

Yes obviously but surely that should read 'If I'm not involved in patient X's care, or admin, then I can't access their record'

Why are NHS IT systems so open to everyone in the organisation?!

They aren't open to everyone, but generally have levels of access. Admin staff who work across multiple specialties will have access to all those specialties. But only to the level for the information they may need.

For example, doctors have to be authorised to view the patient's GP record from the hospital. When they make that request it's recorded, alongside the reason for that access.

There are teams in most hospitals who's job is to manage and control the access.

JustAnotherWhinger · Yesterday 13:28

The issue is that even being caught accessing things you shouldn’t doesn’t always cost you your job, when it absolutely should.

i moved GP surgeries after the receptionist who shared details of my and my DD’s health with mutual friends was given “retraining”.

Shes since been moved from front desk to back office after doing it again.

The surgery clearly don’t deem it particularly serious that she’s blabbing people’s information around our village. I was lucky enough to move to another surgery as DH was already with them, people now can’t escape her as the other surgery is completely full.

Rinoachicken · Yesterday 13:29

SuePer · Yesterday 13:22

'If I'm not involved in patient X's care, or admin, then I shouldn't access their record'

Yes obviously but surely that should read 'If I'm not involved in patient X's care, or admin, then I can't access their record'

Why are NHS IT systems so open to everyone in the organisation?!

Why are NHS IT systems so open to everyone in the organisation?!

Because in emergency medical situations, you don’t want treatment decisions to be incorrect, dangerous or delayed by IT permission issues.

Because when you are under medical care, especially in hospital, you will be cared for by many staff over the course of your stay as they come on and off shift and as your needs change and you move between departments.

There are already some barriers in place - for example I work in mental health and when I was working directly with patients I had access to patient records - but only records of patients who were under my service, (for example, I would only have access to patients accessing the eating disorder service I worked in, not the records of patients under the psychosis team).

I later moved into a non-patient facing role and so I no longer have access to any patient records as it’s not necessary for my role.

kingarthurt · Yesterday 13:30

Catza · Yesterday 13:00

I don't understand this alleged data breach. Who accessed her records?
She was taken to a hospital where she was treated. Should they not have access to her records? Or was it the killer who accessed records? Zero clarity in the article as to who accessed what and where and how it contributed to her death.

Nosey bastards that work in the hospital who had no clinical need to access them. Nothing surprises me with that particular hospital. I’m quite local to this and the speculation has been rife right from the minute the police put out their first statement.

Rinoachicken · Yesterday 13:31

yetnothername · Yesterday 13:26

It's not strictly true that "The only staff who should be accessing her medical records are staff who are directly providing care to her and where it is necessary for that care for them to do so.".

Lots of admin staff need to access health records to complete their work without ever providing direct care.

You are correct, I worded that badly. I would include admin staff as providing services as part of that persons care, even though it is often indirectly rather than direct. It’s still part of that person’s care though.

Rinoachicken · Yesterday 13:36

@JustAnotherWhinger that’s sickening, I’m so sorry that happened.

In my opinion it should be gross misconduct and immediate dismissal.

You either have a legitimate clinical need or you don’t. If you don’t, there’s the door. It’s actually not complicated.

It’s a massive betrayal that does untold damage to the relationship and trust between health services and people who use them at a national level - everyone who uses the NHS is impacted when this happens.

Sack them.

Gettingbysomehow · Yesterday 13:48

Why on earth do people do this. We all have data protection training in the NHS and we all know what the consequences are.

Corianda · Yesterday 13:48

Surely they sell the info to the papers /social media

randomchap · Yesterday 13:53

Corianda · Yesterday 13:48

Surely they sell the info to the papers /social media

Unscrupulous reporters have been known to offer money to NHS staff to get info on patients.

pottylolly · Yesterday 14:04

I’m a nurse. Usually it’s because they’ve either been offered money by journalists for info, or are trying to ‘help’ family members by giving them updates.

Silverbirchleaf · Yesterday 14:06

yetnothername · Yesterday 13:26

It's not strictly true that "The only staff who should be accessing her medical records are staff who are directly providing care to her and where it is necessary for that care for them to do so.".

Lots of admin staff need to access health records to complete their work without ever providing direct care.

About to write the same.

(just saw your update)

Netcurtainnelly · Yesterday 14:15

pottylolly · Yesterday 14:04

I’m a nurse. Usually it’s because they’ve either been offered money by journalists for info, or are trying to ‘help’ family members by giving them updates.

Why do journalist want to know all the ins and outs of a death?
It will come out in time at the trial. Just wait.
Wonder how those fling it, would like it done to them?

OP posts:
Catza · Yesterday 14:36

Rinoachicken · Yesterday 13:23

The only staff who should be accessing her medical records are staff who are directly providing care to her and where it is necessary for that care for them to do so.

Anytime someone accesses a patient record that is digitally recorded.

In this instance a member or members of staff who were not involved in her care accessed her records out of nosiness (to find out her cause of death, her injuries etc).

It is an immediate sackable offense which is drummed into you throughout your training and employment. There have been a few high profile cases of it recently and there has been a push (within my Trust anyway) on reminding staff of the seriousness and the consequences.

Theres no suggestion it contributed to her death.

Theres no excuse for it, ever, and you can’t turn around in a NHS building, as a member of staff, without seeing the warnings due to the recent spate high profile cases. So no member of staff can claim they didn’t know.

I am well aware of that. I work for the NHS. I am just not seeing any information in the article about the details of the alleged data breach, that's all. So it is not clear when, why and by whom the records were accessed.

JustAnotherWhinger · Yesterday 14:41

Netcurtainnelly · Yesterday 14:15

Why do journalist want to know all the ins and outs of a death?
It will come out in time at the trial. Just wait.
Wonder how those fling it, would like it done to them?

Journalists always want to be first.

Just like the people desperate to be the first to post something on social media.

Sometimes the journalists also want the info to get people to speak to them exclusively. Someone I know who lost someone in the Clutha helicopter crash had the journalist approach her from the angle of “we’ve heard X was involved in drugs, would you like to talk to us about him as you knew him or should we just print the details as we understand him?” Dickheads.

Somersetbaker · Yesterday 16:12

randomchap · Yesterday 13:53

Unscrupulous reporters have been known to offer money to NHS staff to get info on patients.

In the same way they pay policemen to look up details on the PNC and hack (or pay somebody to hack) voicemails and emails. Do people remember that the "News of the World" hacked Milly Dowler's phone and deleted the voicemails, which meant her family thought she was still alive. A lot of journalists employed by the tabloids are scum.

Dancingsquirrels · Yesterday 16:43

Netcurtainnelly · Yesterday 14:15

Why do journalist want to know all the ins and outs of a death?
It will come out in time at the trial. Just wait.
Wonder how those fling it, would like it done to them?

Why do journalist want to know all the ins and outs of a death?

You're v naiive. Of course they want a scoop / first access to the story

Netcurtainnelly · Yesterday 16:52

Dancingsquirrels · Yesterday 16:43

Why do journalist want to know all the ins and outs of a death?

You're v naiive. Of course they want a scoop / first access to the story

They've got the story
She died.
How will come out at the trial.

People don't need to know upfront. It won't change anything or make any difference.

OP posts:
Dancingsquirrels · Yesterday 16:56

Netcurtainnelly · Yesterday 16:52

They've got the story
She died.
How will come out at the trial.

People don't need to know upfront. It won't change anything or make any difference.

Yes I realise all that. But you asked journalists want first dibs at the story

Netcurtainnelly · Yesterday 16:59

Dancingsquirrels · Yesterday 16:56

Yes I realise all that. But you asked journalists want first dibs at the story

Reply dosent make sense.

The whole story is scummy that's a fact,and how would staff like it if people did this to them?
No job, you can't your bills and rent/mortgage it dosent make sense to risk it all.
Hope they do get sacked.

OP posts:
Svelty · Yesterday 17:02

SuePer · Yesterday 13:08

I don't understand how anyone in the NHS can access private medical info. Surely it's not too hard to have records only accessible via certain passcodes or whatever.

That said obviously people should not snoop but fgs NHS tighten up your IT systems.

I expect it’s someone nosying when they had no reason to be looking. I don’t know why you would risk your job doing this. It’s made clear at training.

youalright · Yesterday 17:10

Netcurtainnelly · Yesterday 14:15

Why do journalist want to know all the ins and outs of a death?
It will come out in time at the trial. Just wait.
Wonder how those fling it, would like it done to them?

Do you understand what a journalist is?

nrp2 · Yesterday 17:34

WineCharm · Yesterday 12:00

More worried about Palantir access which we can't opt out of, never consented to, and have no idea where this data is going and for what purpose. It seems the NHS can do as they like with our info with no recourse. I've opted out of the NHS.

How would that work if your ever in a life threatening situation?

New posts on this thread. Refresh page