A woman at Royal Cornwall hospital in Truro reported a significant data breach after receiving an unexpected telephone call from a hospital worker who disclosed her cancer diagnosis days before she was scheduled to receive her test results from her medical consultant.
The employee who made the call was described by the patient as someone she knew only casually through sporting activities. The patient, Pippa Boardman from Lostwithiel in Cornwall, expressed distress over how the information was handled and stated that the disclosure violated her privacy and dignity. She noted that while the hospital eventually confirmed the diagnosis two days later through proper channels, the circumstances of the initial notification caused considerable trauma.
Boardman indicated that the hospital’s formal response was inadequate until media outlets became involved in the situation. She emphasized the severity of inappropriate access to sensitive health information, describing it as invasive and intrusive regardless of the outcome.
Royal Cornwall hospitals trust acknowledged the incident and stated that while the employee had authorized access to patient records for legitimate work purposes, contacting the patient directly to discuss her diagnosis fell outside the scope of their role. The trust confirmed it initiated an investigation immediately upon learning of the breach and took what it characterized as appropriate action, though specific employment details were not disclosed.
The hospital trust stated it has since reminded staff about confidentiality obligations and the requirement that patient records be accessed only for work-related reasons. The trust also announced it would review internal policies and procedures in alignment with updated NHS England guidance regarding unauthorized access to patient information. A formal apology was issued to Boardman.
Article Attribution | Read More at Article Source
Article summary produced by Claude AI