Former hospital worker prosecuted for inappropriately accessing patient records

A former employee of a Milton Keynes hospital trust has been prosecuted for accessing patient records without authorisation.

Michelle Harrison of Milton Keynes, inappropriately accessed the records of 12 patients outside of her role as receptionist/general assistant in the Orthotics Department at Milton Keynes University Hospital NHS Foundation Trust between March 2016 and January 2017.

These included the patient records of her ex-partner and a woman who claimed that Ms Harrison had used the information to harass her and had complained to the Trust.

The Trust contacted the Information Commissioner’s Office (ICO) in March 2017 after they had received the complaint.

Harrison, pleaded guilty to unlawfully accessing personal data and unlawfully disclosing personal data in breach of s55 of the Data Protection Act 1998 at Milton Keynes Magistrates’ Court on Friday 20 April.  She was sentenced to offence 1 – £134, offence 2 – £166 and a victim surcharge of £30.

Mike Shaw, Head of Criminal Investigations at the ICO, said:”This abuse of a position of trust has caused significant distress to a number of people. The laws on data protection are there for a reason and people have the right to know their highly sensitive personal information will be treated with appropriate privacy and respect. The ICO will continue to take action against those who abuse their position and potentially jeopardise the important relationship of trust between patients and the NHS.”


The inaugural Data Protection World Forum (DPWF) will be held on November 20th & 21st 2018 at the ExCeL London which will provide a broader focus across the data protection and privacy space amidst the progressive tightening of global data protection laws.

Ahead of the end of year event, DPWF has launched a series of intensive workshops.

Further information on the DPWF and workshop details are available at: https://www.dataprotectionworldforum.com/