Nottingham University Hospitals NHS Trust has dismissed 15 staff members for accessing the medical records of victims from the 2023 Nottingham attack. The trust confirmed that the terminations follow an investigation into unauthorized access to patient files belonging to those killed or injured by Valdo Calocane.
The victims included 19-year-old students Barnaby Webber and Grace O’Malley-Kumar, as well as 65-year-old caretaker Ian Coates. Calocane also attempted to kill three other people during the June 2023 incident. The trust stated that doctors, nurses, and other healthcare professionals were among those disciplined.
Disciplinary Actions and Warnings
In addition to the 15 dismissals, the trust issued 15 final written warnings and two first written warnings to other employees involved in the breach. The families of the victims were informed of these developments this week. This marks a significant escalation from May, when the trust announced the dismissal of 11 staff members for similar offenses.
Dr. Manjeet Shehmar, the medical director at the trust, emphasized that there is no justification for accessing patient records without a legitimate professional reason. He expressed regret that the families of Ian, Grace, and Barnaby had to endure this additional distress after losing their loved ones. The trust is implementing a new system designed to detect potential data breaches and is focusing on staff education regarding data protection.

National Crackdown on Data Snooping
The disciplinary actions at Nottingham come amid a broader effort by NHS England to tighten data security protocols. Sir Jim Mackey, the head of NHS England, announced last month that staff suspected of inappropriately accessing patient records will face immediate suspension and loss of system access. He warned that such snooping could result in criminal records and end careers.
Mackey wrote to all NHS trusts demanding the implementation of this stricter approach. This move follows several high-profile cases of data misuse in recent months. In May, it was revealed that dozens of staff at University Hospitals of Liverpool Group had viewed the records of victims from the 2024 Southport attack. Additionally, approximately 40 hospital staff members accessed the records of a three-year-old boy injured in a crocodile pit incident in Cambridgeshire.
Calocane was sentenced to an indefinite hospital order in January 2024 after admitting to manslaughter by diminished responsibility and attempted murder. The ongoing investigations and disciplinary measures highlight the trust’s commitment to protecting patient confidentiality and maintaining public trust in the healthcare system.
Source: The Guardian

