NHS staff suspected of unlawfully accessing patient records to be immediately suspended

NHS staff suspected of unlawfully accessing patient records will be suspended immediately and have access to NHS systems cut off.

The move follows a series of cases involving staff viewing highly sensitive patient information they had no legitimate reason to see.

NHS England chief executive Sir Jim Mackey has written to every trust demanding that they implement the approach immediately to protect patients from further breaches.

Suspicious activity is identified through routine monitoring and audits of NHS systems. These record who has accessed patient information and when, allowing organisations to investigate unusual or unauthorised activity.

Trusts have also been told to refer cases to the relevant professional regulator when a registered healthcare professional is dismissed for unlawful access.

Doctors, nurses and other registered professionals could therefore lose their NHS job and face regulatory action that may prevent them from practising again.

Mackey said: “Patient records contain some of the most private information people will ever share.

“We have seen too many cases of people abusing that trust, and enough is enough.

“If someone is suspected of snooping, we cannot leave them in post with access to patients’ records while an investigation takes days or weeks.

“From now on, we will expect them to be suspended and have their access to NHS systems cut off immediately, while the facts are established.

“Anyone who thinks they can satisfy their curiosity by looking at a patient’s record should know this: they will be found out, they may lose their career, and could end up with a criminal record.”

The NHS has already taken a series of steps to tackle inappropriate access to patient records, including a national campaign reminding staff of their responsibilities and the serious consequences of unlawful access.

Guidance has also been issued to NHS organisations on preventing, monitoring, investigating and reporting unlawful access, including regular audits and technical controls to identify suspicious activity.