NHS England mandates immediate suspension of staff suspected of unlawfully accessing patient records

NHS England has announced a policy requiring every NHS trust to impose immediate suspension and revoke access to NHS computer systems for any member of staff suspected of improperly or unlawfully accessing patient medical records without clinical justification.

The measure formalises what NHS England describes as a zero-tolerance approach to so-called 'snooping' — the accessing of patient records for reasons other than direct care or authorised administrative need. Improper access to patient records is a breach of the UK Data Protection Act 2018, the common law duty of confidentiality, and NHS information governance frameworks.

Whilst this story does not concern genetics or genomics directly, it is relevant context for readers of Genetic Current: genomic and genetic health records — including family-history data, variant classifications, and hereditary cancer risk information — are among the most sensitive categories of health information held by NHS systems. The policy underscores the information governance environment within which NHS genomic services operate.

The announcement was published via NHS England's official communications channel and is relevant to professionals across NHS settings, including those working within genomic medicine services.