10 NHS employees suspended after Noah Woods' medical records data breach

Ten NHS employees have been removed from duty or suspended after they were found to have accessed the medical records of three-year-old Noah Woods without authorisation.

The personal data breach occurred after the child went missing on 15 September in Brantham, Suffolk, and was found dead the following day. Dr Martin Mansfield, deputy chief medical officer at East Suffolk and North Essex NHS Foundation Trust, confirmed in a statement that an urgent investigation had been launched and called any illicit access completely unacceptable. The NHS trust apologised unreservedly to the family, pledged disciplinary measures if required, and reported the breach to the Information Commissioner's Office (ICO).

The breaches were discovered through proactive audits prompted by the case's high-profile nature. The trust subsequently secured the digital files, making them impossible to locate, to prevent further unauthorised access. All employees were notified of the swift action and reminded of mandatory information governance protocols. The ICO confirmed it is making enquiries, noting that recurring unauthorised breaches into patient records are becoming a concerning pattern.

The announcement follows Sir Jim Mackey, the chief executive of NHS England, calling for stronger action to address data breaches. In a letter to every trust on Friday, Mackey warned of a "zero-telerance" approach and that suspected staff will be locked out of NHS systems. 

Training announcement: Freevacy provides comprehensive training for new and existing practitioners on the changes introduced by the DUA Act to the UK General Data Protection Regulation (GDPR), the Data Protection Act 2018 (DPA18), and the Privacy and Electronic Communications Regulations 2003 (PEC-Regulations). Our courses are always up to date and provide a forum for learning and discussing how to ensure your data protection processes remain compliant. Find out more.