{
  "id": 19797852,
  "title": "Crackdown on UK medical record snooping after staff reported sneaking 300+ times this year",
  "url": "https://urgent.news/2026/11/13/crackdown-on-uk-medical-record-snooping-after-staff-reported-sneaking-19797852",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-11-13T11:02:00.000Z",
  "source": {
    "name": "The Register",
    "slug": "the-register",
    "url": "https://www.theregister.com/security/2026/11/13/crackdown-on-uk-medical-record-snooping-after-staff-reported-sneaking-300-times-this-year/5309421"
  },
  "original_language": "en",
  "account": "The UK's privacy watchdog, the Information Commissioner's Office (ICO), has issued a stern warning to healthcare executives following more than 300 reports of staff accessing medical records without proper authorization this year. The ICO has written to over 200 senior health leaders across the UK, emphasizing that unauthorized access to patient records puts patient privacy and public trust at risk. Reports of snooping included curiosity-driven inquiries, sharing private information with unauthorized individuals, and potential breaches still awaiting assessment.\n\nICO chief executive Paul Arnold urged health executives to personally confirm their organizations have adequate safeguards to prevent unauthorized access. Simply trusting staff to behave appropriately is insufficient; Arnold demanded details on access permissions, monitoring practices, and consequences for caught violators. Health bosses are expected to respond by November 27, with those failing to address gaps in safeguards given an additional three-month deadline to improve their systems.\n\nThe issue isn't solely about hacking; many authorized staff misuse access to view records of individuals unrelated to their care, such as neighbors, ex-partners, or public figures. While NHS England previously warned against such behavior and implemented guidance on access controls, the scope of the problem has been a persistent concern. In July, the UK government reported 1,445 cases of inappropriate access to patient records between 2019 and 2025, with potential criminal consequences under the Data Protection Act 2018.\n\nThe ICO has prosecuted 16 healthcare workers over the past decade for snooping, and Arnold emphasized that the regulator may take enforcement action against organizations with inadequate safeguards. With over 300 reports already filed this year, healthcare leaders have two weeks to demonstrate their commitment to protecting patient privacy.",
  "summary": "Watchdog wants assurances from 200 execs that employees aren't poking around patient files they have no business viewing",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}