NHS Trust Sacks 15 Staff Over Nottingham Attack Victim Record Breaches

Nottingham University Hospitals (NUH) NHS Trust has dismissed a total of 15 staff members who inappropriately accessed the medical records of victims of the June 2023 Nottingham attacks. This figure represents an increase from the 11 staff dismissed in May.

The victims of the attacks were students Barnaby Webber and Grace O'Malley-Kumar, and grandfather Ian Coates. Valdo Calocane, who was diagnosed with paranoid schizophrenia in 2020, was found guilty of their murders.

Dr. Manjeet Shehmar, medical director at NUH, stated that there is "simply no excuse" for accessing patient records without a legitimate reason and expressed hope that the dismissals send a clear message that such actions will be investigated and met with consequences. She added, "To lose a loved one in the way that the families of Ian, Grace and Barnaby have is heartbreaking enough. I am so sorry that they have had this further compounded by the actions of these staff members."

In addition to the 15 dismissals, the trust has issued 15 final written warnings and two first written warnings. Two cases were found to have no grounds for action. The individuals against whom action has been taken include doctors, nurses, registered healthcare professionals, and other staff.

Independent regulators, including the Nursing and Midwifery Council, the General Medical Council, the Information Commissioner's Office, and Nottinghamshire Police, have been notified. NUH is also implementing a new system, currently undergoing testing, designed to protect patient records and alert the trust to potential breaches. A campaign titled "Your Responsibility, Your Actions, Their Privacy" has been launched to educate staff on data protection and the repercussions of violating privacy rules.

Investigations are ongoing, including into the inappropriate access of files belonging to surviving victims of the attacks: Wayne Birkett, Sharon Miller, and Marcin Gawronski.

NUH is not the only organization where staff have faced scrutiny for accessing records related to the attacks. In December, an investigation was opened into allegations of Ministry of Justice (MoJ) staff illegally accessing computer files connected to the Nottingham attacks. A public inquiry heard that court workers also accessed information about the case inappropriately in January. Amy Holmes, interim director general for the chief operating group of the MoJ, stated that details of the accessed information could not be disclosed due to an ongoing police investigation.

The inquiry also revealed that seven probation service officers were identified as having accessed information, with three found not to have a legitimate reason. However, the MoJ's data protection unit determined these breaches were not severe enough to warrant further action. Nottinghamshire Police also confirmed that staff viewed footage and images related to the attacks numerous times without a legitimate policing purpose. The force committed to an audit following a complaint by Barnaby Webber's mother.