Teenager's Mother 'Deeply Hurt' by Alleged NHS Record Access

Paula McGowan, mother of 18-year-old Oliver McGowan who died in 2016, has expressed deep concern and hurt over allegations that NHS staff may have inappropriately accessed her son's medical records for years after his death. At least five staff members at Bristol Foundation NHS Trust are reported to have accessed Oliver's records without permission as recently as this year.

Three nursing staff are currently under formal investigation. A doctor who no longer works for the trust has self-referred to the General Medical Council, and another staff member's case is under separate review. The trust has stated it is "deeply sorry" for any distress caused and has voluntarily referred itself to the Information Commissioner's Office.

Oliver, who had a mild learning disability and epilepsy, died in 2016 at Southmead Hospital in Bristol. His family had previously warned against him being given a specific anti-psychotic medication that was administered. Following his death, McGowan requested information about his medical records and was informed that 38 individuals had accessed the data since his passing, with 637 items viewed and 67 printed.

While most of this access was deemed appropriate and related to complaints, legal proceedings, and the coroner's inquest, initial inquiries could not establish a legitimate reason for three nursing staff, not involved in his care, to view his records. McGowan was reportedly told that one nurse expressed a general interest in anti-psychotic drugs and the care of patients with learning disabilities as a reason for access.

The trust is also investigating 13 other cases involving former staff, including doctors, nurses, and clerical workers, to determine the legitimacy of their access. The trust has initiated a "thorough investigation," emphasizing that it would be "inappropriate to reach conclusions before those enquiries are complete." Prof Steve Hams, the trust's chief nursing and improvement officer, stated, "Every patient and family has the right to expect that their personal information will be treated with care, respect and confidentiality," adding that concerns about unauthorized access are taken "extremely seriously."

This incident follows a series of concerns regarding NHS staff accessing patient records without a legitimate professional reason. In July, Sir Jim Mackey, head of NHS England, issued a warning that staff could face dismissal or imprisonment for such actions. Recent high-profile cases include those related to the Nottingham and Southport attacks, and a child injured in a crocodile enclosure incident in Cambridgeshire. An investigation by the Health Services Journal found that approximately 214 NHS staff have lost their jobs and around 2,000 have been sanctioned for snooping on patient data over the last five years.

NHS medical records contain sensitive personal information, and healthcare professionals should only access confidential information when they have a legitimate work-related reason and the necessary authorization. IT systems maintain an audit trail to track who accessed patient records and when. NHS England has reiterated that any instance of staff accessing records without a valid reason is "wholly unacceptable, a disgraceful breach of patients' trust and against the law," with potential disciplinary action including job loss and criminal prosecution.