NHS England has introduced a tougher stance on unauthorised access to patient records, requiring NHS trusts to immediately suspend staff suspected of illegally viewing confidential medical information and revoke their access to NHS systems while investigations are carried out.
The move forms part of what NHS leaders are describing as a zero-tolerance approach to tackling so-called "snooping staff", following a number of high-profile incidents involving employees accessing sensitive patient information without a legitimate clinical or operational reason.
Under the new directive, all NHS trusts have been instructed to act without delay when there is suspicion that a member of staff has improperly accessed patient records. Staff under investigation will be suspended and have access to NHS computer systems removed until enquiries are completed.
Patient records contain highly sensitive personal information, making confidentiality a cornerstone of NHS care. NHS England says the strengthened measures are designed to safeguard patient trust and ensure that breaches are dealt with swiftly and consistently.
Healthcare organisations routinely monitor and audit system activity, creating detailed records of who accesses patient data and when. These audit trails enable information governance teams to identify unusual patterns of access and investigate potential misconduct.
The new approach places a greater emphasis on immediate intervention where concerns arise, reducing the risk of further unauthorised access during investigations.
Where investigations result in dismissal, NHS organisations have been instructed to refer registered healthcare professionals to their relevant regulatory bodies.
This means doctors, nurses and other regulated professionals found guilty of unlawfully accessing patient records could face not only the loss of their NHS employment but also professional sanctions that may prevent them from practising in the future.
Sir Jim Mackey, NHS Chief Executive, said:
“Patient records contain some of the most private information people will ever share.
“We have seen too many cases of people abusing that trust, and enough is enough.
“If someone is suspected of snooping, we cannot leave them in post with access to patients’ records while an investigation takes days or weeks.
“From now on, we will expect them to be suspended and have their access to NHS systems cut off immediately, while the facts are established.
“Anyone who thinks they can satisfy their curiosity by looking at a patient’s record should know this: they will be found out, they may lose their career, and could end up with a criminal record.”
The latest measures build on a series of initiatives already introduced by NHS England to combat unlawful access to patient information.
These include a national awareness campaign reminding NHS staff of their legal and professional responsibilities, alongside updated guidance for NHS organisations on preventing, monitoring, investigating and reporting inappropriate access to patient records.
Trusts are also being encouraged to strengthen their use of audits, monitoring tools and technical controls to detect suspicious activity and ensure compliance with data protection and confidentiality requirements.
As the NHS continues its digital transformation journey, leaders say maintaining public confidence in how personal health information is handled remains a critical priority.
Image credit: iStock
