NHS staff suspected of patient record snooping face immediate suspension

NHS staff suspected of accessing patients’ medical records without a legitimate reason will face immediate suspension under a new zero-tolerance approach to unlawful access to sensitive information

NHS England has instructed trusts across the country to act immediately when an employee is suspected of improperly viewing patient records. Staff could have their access to NHS computer systems removed while an investigation is carried out.

This comes after several cases of employees accessing confidential patient information without a professional reason.

Immediate action over suspected breaches

Under the new approach, NHS organisations are expected to suspend staff who are suspected of snooping on patient records rather than allowing them to remain in their roles while investigations take place.

Their access to NHS systems will also be paused to prevent any further unauthorised access to confidential information.

NHS England chief executive Sir Jim Mackey has written to trusts across the country, calling for the measures to be introduced immediately.

The aim is to protect patients while investigations establish exactly what happened and whether confidential information was accessed unlawfully.

NHS systems can track suspicious activity

NHS organisations routinely monitor access to patient records. Computer systems create an audit trail showing which records have been accessed and when.

These records can help trusts identify unusual activity and investigate whether an employee had a legitimate reason to view particular information.

The NHS already uses regular audits and technical controls to help detect inappropriate access.

The latest measures are intended to strengthen these safeguards and make it more difficult for staff to access information simply out of curiosity.

Potential consequences for staff

The consequences of accessing patient records without permission could extend beyond suspension or dismissal.

If a registered healthcare professional is dismissed for improperly accessing records, their NHS trust may refer the case to the relevant professional regulator.

This could result in further regulatory action and, depending on the circumstances and outcome of an investigation, affect the individual’s ability to continue practising.

In some cases, unlawful access to personal information could also have criminal consequences.

Protecting patient confidentiality

Patient records contain highly sensitive personal and medical information, making confidentiality a fundamental responsibility for NHS staff.

The NHS has already launched a national campaign reminding employees about their responsibilities when handling patient information and the potential consequences of inappropriate access.

These changes show how the NHS is putting patient confidentiality first, as patient records should be accessed only when there is a genuine professional need.

NHS organisations will continue to use monitoring, audits and technical controls to identify suspected breaches and protect patients’ confidential information.