Woman Charged After 100 NHS Lothian Patient Records Accessed in Data Breach

Around 100 patients in NHS Lothian had their private medical records accessed during a data breach discovered in a routine audit. The breach was caused by a woman working at Edinburgh Royal Infirmary, who accessed the records out of inappropriate personal interest and no longer works at the health board. NHS Lothian took immediate action, contacting affected patients and reporting the incident to Police Scotland and the Information Commissioner's Office. Police Scotland confirmed that a woman has been charged in connection with the breach, and a report has been submitted to the Procurator Fiscal. Dr. Tracey Gillies, medical director at NHS Lothian, emphasized the swift investigation and appropriate response but declined to comment on individual staff members. This breach highlights ongoing challenges in protecting patient data within the NHS system.