Mackey threatens sacking or prison for snooping staff

Staff could face the sack or even time in prison if they access patient records without a legitimate reason, Sir Jim Mackey has warned.

In a letter to hospital and regional leaders today, the NHS England chief executive called on boards to put a “renewed focus” on educating staff and implementing a “tough approach” in response to staff who “breach patient trust in this way”.

HSJ revealed in June that multiple hospital staff had viewed medical records of Southport attack survivors without clinical reason in 2024 – resulting in allegations of a “cover up” and with no clear firm disciplinary action having been taken.

Also in June, Nottingham University Hospitals announced it was sacking 11 staff for snooping on records after three people were killed in a stabbing in 2023.

HSJ has revealed thousands of other similar concerns have been reported nationally, and that Cambridge University Hospitals has recently sacked staff.

Sir Jim’s letter said: “There can be no place in the NHS for those who misuse patient information. Patient trust in our handling of their most sensitive data cannot be taken for granted and it is therefore critical that we both educate staff and take a hard line when their access to records falls below the standards we expect.

“Anyone considering accessing records for personal reasons or out of curiosity should be in no doubt they could be putting their career at risk, and may face disciplinary action, dismissal, referral to the regulator or even time in prison.”

NHSE has also published staff guidance and launched a campaign to remind them “of the law and the potential impact” of snooping. The headline messaging warns: “Don’t let curiosity kill your career.”

Read full story (paywalled)

Source: HSJ, 8 July 2026