NHS announces zero-tolerance policy for staff snooping on patient records

The Chief Executive of the NHS, Sir Jim Mackey, has announced a “zero-tolerance” approach to staff members who improperly or unlawfully access patient medical records. In a letter to hospital trusts, Mackey stated that staff suspected of snooping will face immediate suspension and the removal of their access to NHS systems.

The directive follows several high-profile incidents, including allegations that staff at Southmead Hospital accessed the records of Oliver McGowan, an 18-year-old who died in 2016. Mackey expressed disappointment and anger regarding widespread reports of unauthorized access, noting that such breaches damage public confidence and represent a failure to protect patient privacy.

While NHS organizations maintain individual electronic record systems with audit trails to track access, unauthorized viewing of sensitive data by staff—often to investigate acquaintances, relatives, or public figures—remains a significant issue. The Information Commissioner’s Office has also previously issued cautions in cases involving attempts to obtain and sell the medical records of high-profile individuals.