Ten NHS staff have been removed from duty or suspended after a data breach involving the digital medical records of a three-year-old boy who died earlier this month.
Noah Woods went missing in the village of Brantham, Suffolk, on 15 September. After a large search — at least 1,300 people helped in the 24 hours before he was found — his body was recovered from a nearby pond by police divers the next day. An inquest opened on Friday heard he had left a play area through a gap in a fence. His family described him as a happy, cheeky, playful boy who loved to laugh, and his mother urged other parents to hold their children a little tighter.
What the trust has done
East Suffolk and North Essex NHS Foundation Trust has launched what it calls an urgent investigation. A spokesperson said ten employees had been "removed from active duty or suspended whilst investigations are concluded".
Dr Martin Mansfield, the trust's deputy chief medical officer, said any unauthorised access of patient data was "completely unacceptable". The trust has apologised unreservedly to Noah's family and said disciplinary action would be taken if needed.
Why ten is the number that matters
This is the first visible consequence of the policy change we reported yesterday. On Friday, NHS England chief executive Sir Jim Mackey wrote to every trust in England ordering immediate suspension and system lockout for staff merely suspected of looking at records without a valid reason.
"We have seen too many cases of people abusing that trust, and enough is enough," Sir Jim said. "Anyone who thinks they can satisfy their curiosity by looking at a patient's record should know this: they will be found out, they may lose their career and could end up with a criminal record."
The number is the point. Ten people, in one trust, around one child's file. That is not a rogue individual; it is what happens when a case is in the news and a record is a few clicks away from anyone with a login. It is also, quietly, evidence that the audit logs work — every one of those ten was identified because the system recorded who opened the file and when.
What it means in Bangladesh
The number is what travels, not the policy. Ten people opened one child's file. That is not a discipline story about ten unusual individuals — it is a description of how the access was designed, and it fits almost every hospital information system in this country.
Most systems here grant access by job title rather than by involvement in care. A clerk, a technician or a ward nurse holding a departmental login can typically open any patient in that department, whether or not they are treating them. The alternative is not complicated and does not need a new law: records open routinely only for patients assigned to you, and reaching anything outside that requires a reason typed in at the moment of opening, which somebody later reads. Hospitals abroad call it break-glass access, and it turns curiosity into a decision a person has to justify in writing.
The second problem is more specifically Bangladeshi and quietly defeats everything else: shared logins. Where a ward runs on one account that the whole shift uses, there is no such thing as establishing who looked. Ten names could never have been produced. Individual accounts with individual passwords are the precondition for every other safeguard, and they cost nothing beyond the administrative work of issuing them.
For patients there is no right to ask, and until there is, the only realistic protection is institutional. A hospital that can tell you who opened your file is a hospital that already decided it mattered.
