Investigation opened after 40 staff access records of toddler attacked by Crocodile

An urgent investigation is underway at Cambridge University Hospitals (CUH) after 40 staff members accessed the medical records of a three-year-old boy without proper authorisation. The toddler was admitted to Addenbrooke's Hospital with serious injuries following an incident at a zoo near Huntingdon, where a man was subsequently arrested on suspicion of attempted murder.

In response to the personal data breach, CUH referred itself to the Information Commissioner's Office (ICO), whilst the Department of Health and Social Care (DHSC) launched an investigation to prevent future occurrences. In addition, CUH issued a memo, warning staff and reminding them that unlawfully accessing personal data is a criminal offence that can result in prosecution. Management at CUH also disclosed that five employees had previously been dismissed in recent months for similar misconduct.

The ICO said that it is "assessing the situation," noting that unauthorised access to medical records is a widespread issue across healthcare. 

Training announcement: Freevacy provides comprehensive training for new and existing practitioners on the changes introduced by the DUA Act to the UK General Data Protection Regulation (GDPR), the Data Protection Act 2018 (DPA18), and the Privacy and Electronic Communications Regulations 2003 (PEC-Regulations). Our courses are always up to date and provide a forum for learning and discussing how to ensure your data protection processes remain compliant. Find out more.