Parliamentary Search

Written question asked by Lord Kamall (Conservative) on Tuesday, 2 June 2026, in the House of Lords. It was due for an answer on Tuesday, 16 June 2026. It was answered by Baroness Merron (Labour) on Tuesday, 30 June 2026 on behalf of the Department of Health and Social Care.

University Hospitals of Liverpool Group: Medical Records

Question

To ask His Majesty's Government whether the internal investigation by Liverpool Women’s University Hospital into inappropriate access to the medical records of victims in Southport considered the patient or the hospital itself to have been a victim of the unlawful misuse of data; and whether that position was supported by (1) NHS England, (2) the Department of Health and Social Care, and (3) the Information Commissioner.

Answer

The unauthorised access of patients’ confidential information following the tragic events in Southport and Nottingham was unacceptable. It is essential that patients’ confidential information is only accessed appropriately, lawfully, and in line with their reasonable expectations.

As the investigation carried out by the Liverpool University Hospitals NHS Foundation Trust was internal, the Department does not have the detailed information requested.

The Nottingham Inquiry is also investigating the unauthorised access of data at the Nottingham University Hospitals NHS Trust. The inquiry will provide recommendations to ensure lessons are learned. We want to take steps to ensure that the culture within health and social care services, and the strong protections in law and various safeguards in the National Health Service, ensure that health and care information is used in a safe, secure, and legal way, and that this does not happen again.

NHS England is developing guidance which is focused on inappropriate access to patient records. The guidance will be aimed at NHS organisations and highlights the importance of ensuring that patient records are only ever accessed for legitimate purposes and any inappropriate access is likely to be considered a significant data breach. The guidance will be published in the coming months.

Secondary information

Type
Written question
Reference
HL569
Session
2026-27
Grouped for answer
Yes
Subjects
Data protection Crimes of violence Homicide Medical records Victims Southport University Hospitals of Liverpool Group
Link
View this Written question on www.parliament.uk