UK hospitals can't stop staff from peeking at patient files - hundreds of times this year

UK's privacy watchdog, the Information Commissioner's Office (ICO), has called out healthcare leaders after receiving more than 300 reports of staff snooping through medical records this year alone. The ICO has sent letters to over 200 senior health executives demanding they personally confirm their organizations have proper safeguards to prevent employees from accessing patient files out of sheer curiosity, looking up people they know, or sharing private information without authorization.

The issue isn't about hacking—these healthcare workers already have legitimate access to records as part of their jobs. The problem is they're using that access to peek at files of neighbors, ex-partners, or others they shouldn't be viewing. ICO chief Paul Arnold warned this isn't "harmless curiosity" but causes real distress and erodes public trust. Healthcare bosses now have until November 27 to respond, with those lacking proper safeguards getting another three months to fix their systems. The takeaway: when your medical privacy relies on hundreds of employees not being nosy, you're basically trusting the world's worst secret-keepers.