Cambridge University Hospitals (CUH) has initiated an investigation into the access of medical records belonging to a three-year-old boy who sustained serious injuries in a crocodile attack. The hospital is examining whether there were legitimate reasons for up to 40 members of staff to view the child's information. CUH has also referred the matter to the Information Commissioner's Office (ICO).
The incident occurred on June 18 when police were called to Johnsons of Old Hurst, a zoo near Huntingdon. The boy, from Cambridgeshire, was visiting the facility with his family and was attacked while inside the crocodile enclosure. Staff members at the zoo pulled the child from the enclosure. He was subsequently transported to Addenbrooke's Hospital in Cambridge, where his condition is now stable.
A 30-year-old man from Norfolk was arrested on suspicion of attempted murder in connection with the incident and has since been released on bail. The hospital stated that any staff found to have accessed patient records without valid clinical or operational reasons would face disciplinary action.
The zoo attack has prompted a separate inquiry into the data breach, highlighting concerns about patient privacy in the wake of a traumatic event. The ICO is the UK's independent body set up to uphold information rights in the public interest.