Healthcare Record Privacy Breaches

Healthcare record privacy breaches involve staff or other parties accessing, sharing, or attempting to sell highly sensitive patient information without authorization.

Cases include the attempted disclosure of Catherine, Princess of Wales’s records at the London Clinic, inappropriate access to the records of Southport attack victims, and a Somerset NHS worker’s access to as many as 200 patient files. The Information Commissioner’s Office and NHS organizations have responded through investigations, formal cautions, disciplinary measures, patient notification, audits, and guidance on monitoring and access controls. Together, these incidents illuminate the tension between legitimate clinical access, insider risk, patient trust, and regulatory accountability.