Warnings about NHS details privacy just after ‘stalker’ health care provider shares woman’s data | NHS

The confidentiality of NHS medical documents has been thrown into doubt following a “stalker” clinic health practitioner accessed and shared highly delicate information about a girl who had started out courting her ex-boyfriend, in spite of not getting concerned in her treatment.

The sufferer was left in “fear, shock and horror” when she figured out that the doctor experienced used her hospital’s professional medical information procedure to glimpse at the woman’s GP data and study – and share – personal aspects, regarded only to a couple of men and women, about her and her little ones.

“I felt violated when I uncovered that this lady, who I did not know, experienced managed to access on a number of occasions details of my daily life that I had shared with my GP and only my spouse and children and extremely closest close friends. It was about anything sensitive involving myself and my children, about a loved ones tragedy,” the female stated.

The situation has prompted warnings that any physician in England could abuse their privileged entry to personal professional medical records for own alternatively than scientific good reasons.

Sam Smith, of the wellness facts privacy team MedConfidential, claimed: “This is an totally appalling circumstance. It is an personal dilemma that the health practitioner did this. But it’s a systemic difficulty that they could do it, and that flaws in the way the NHS’s facts administration methods operate meant that any medical doctor can do some thing like this to any affected individual.

“If you’re registered with the NHS in England, this could occur to you.”

The Guardian has picked out not to name either the sufferer or the physician, who is a guide at Addenbrooke’s medical center in Cambridge.

The woman was originally baffled how the medic had occur by pretty own details about her, her sister and her small children that the medical doctor experienced then relayed to her ex-boyfriend in the early levels of his new connection with the girl previous July.

“The health care provider mentioned that she experienced received it from buddies, or from folks in her choir or mothers and fathers at my children’s school. That still left my sister and I thinking if some of our shut buddies experienced betrayed us as we understood that only a few folks understood those people particulars. She experienced an harmful interest in us.”

The thriller was solved when at her ask for Addenbrooke’s gave the girl a thorough audit of all its staff who had accessed her health care information. It confirmed that the health care provider had accessed her healthcare data seven instances throughout August and September past year. On 3 events, the medic initially accessed Epic, Addenbrooke’s personal hospital medical records system.

She then clicked by means of to a unique records process termed GP Link, which contained specific notes of conversations her previous partner’s new girlfriend had had with her GP about the distressing influence of the tragedy and the well being of one particular of her children.

On just one event, the physician, whom the woman did not know and had by no means met, rang the target, questioned her title, gave her name and then hung up. The target assumed it was a deliberate ploy by the medic to display that she experienced received personalized details about her. “It’s regular to be jealous when your ex will get jointly with another person, but the doctor’s conduct was upsetting.”

Addenbrooke’s originally denied it was attainable for its workers to entry GP Join by means of Epic. Even so, in a assembly with the sufferer Dr John Firth, its deputy professional medical director, did accept that her whole GP data were obtainable. Michelle Ellerbeck, its head of facts governance, later on emailed the lady to thank her for exhibiting them that it could be completed, in case “this enquiry at any time arrives up again”.

Dr Nicola Byrne, the NHS countrywide data guardian for England, advises it how to hold patients’ data risk-free and use it adequately. She mentioned she was “concerned at the seriousness of the allegations” when the client wrote to her detailing the unjustified intrusion into her health-related heritage.

Byrne criticised the doctor’s conduct as “absolutely unacceptable” and sought to reassure people who may possibly be concerned by the incident by stressing that it was the initial time she had heard of a medic breaking the guidelines on the secure dealing with of a patient’s professional medical records in purchase to obtain information about them. Even so, she still left open the possibility that some others may be executing the identical.

“Breaches of confidentiality are absolutely unacceptable. All clinicians should really get their qualified responsibilities and obligations extremely seriously. And, provided that no case like [this] has at any time occur to my consideration prior to, I believe in that most do,” Byrne said.

skip earlier e-newsletter promotion