Cornwall Hospital Employee Told Patient She Had Cancer After Accessing Her Records

2.7 · 10d ago · WORLD

The Facts

  • Pippa Boardman, of Lostwithiel, Cornwall, was told she had cancer by a man who worked at the Royal Cornwall Hospital in Truro after he accessed her record, days before her consultant was due to give her test results. BBC only
  • Boardman said the man was someone she vaguely knew through a sport she plays, and that he phoned her at home. BBC only
  • Two days after the call, her consultant told her she had breast cancer. BBC only
  • Royal Cornwall Hospitals Trust said the employee had legitimate access to her records for work but that contacting her was outside his role. BBC only
  • The trust said it was 'truly sorry', that appropriate action was taken after an immediate investigation, and that it cannot disclose details of individual employment matters. BBC only
Dive deeper · 3 more factsShow less
  • Boardman said the trust did not apologise until contacted by the BBC and had told her it could not give her information because of the staff member's rights. BBC only
  • The trust said it reminded staff that records must only be accessed for a legitimate work-related reason, and is reviewing policies in light of strengthened NHS England guidance on inappropriate access to patient information. BBC only
  • The case follows other recent NHS data breaches, which Health Secretary Yvette Cooper described as a disgrace. BBC only

Context

A Cornwall woman says a hospital employee who accessed her medical record phoned her to tell her she had cancer before her consultant had given her the results. She is now recovering well, nine months later.

The Royal Cornwall Hospitals Trust has apologised and says action was taken following an investigation. It has not disclosed what disciplinary action was taken and is reviewing its policies.

How the Agent Panel Scored This

Independent AI personas each scored importance 1–10; the story's score is a trimmed mean (highest and lowest votes dropped). Vote spread: 1.

3 News Editor This is a local, individual privacy breach at one hospital with limited impact beyond the affected patient, though it touches on a broader pattern of NHS data breaches and the trust's policy review.
3 Informed Citizen This is a local story about a single privacy breach at one hospital, with the concrete action being an apology and policy review, so its impact on ordinary people beyond the affected patient and similar patients is limited.
2 Business Analyst This is a single local patient-privacy incident at one hospital trust, with the concrete event being a past employee misuse of records and an apology, and the wider NHS data-breach context and ministerial rhetoric do not add a new concrete action.

Source

← All stories