UK: Boy’s medical records may have been accessed inappropriately after crocodile attack at zoo
Up to 40 NHS staff members may have improperly accessed the medical records of a young boy who was injured in a crocodile attack at a Cambridgeshire zoo. The case is under review amid concerns that access controls were not adequate for a high-profile patient.
Why this matters: When someone becomes news, their medical records become a target. That is a predictable problem, and hospitals know it. A child has no say in whether his attack goes viral, and he definitely has no say in how many curious staff members pull up his file. Medical records contain some of the most personal information anyone holds. Forty people with access is not a security system — it is a gap. Health providers handling high-profile cases have a clear duty to lock down access before the curiosity starts, not after.
Who should care: Healthcare professionals · Privacy officers · Compliance
This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.