Nottingham University Hospitals Sacks Eleven Staff Over Victims' Illegitimate Records Access
Nottingham University Hospitals (NUH) NHS Trust has confirmed the dismissal of eleven staff members for inappropriately accessing the medical records of victims Barnaby Webber, Grace O'Malley-Kumar, and Ian Coates, who were fatally stabbed in Nottingham on 13 June 2023.
Internal Inquiry Leads to Disciplinary Action
In addition to the dismissals, twelve employees received final written warnings, and two were issued first written warnings. The Trust indicated that doctors, nurses, registered medical professionals, and administrative staff were among those investigated. The families of the victims, while acknowledging the Trust's actions, described the development as a "kick in the teeth" given the ongoing statutory public inquiry examining the lead-up to and aftermath of the attacks.
Nottinghamshire Police has stated there is no criminal investigation underway regarding these data breaches. However, the Information Commissioner's Office (ICO) will assess evidence from the Trust to consider potential criminal investigations under data protection law.
Wider Institutional Failings Exposed
James Coates, son of Ian Coates, asserted that the NUH investigation represented merely "the tip of the iceberg," pointing to similar issues within Nottinghamshire Police, the council, mental health trusts, and the probationary and prison services. This incident highlights a systemic problem of unauthorised access to sensitive information across various public bodies involved in the case.
Dr Sanjoy Kumar, Grace O'Malley-Kumar's father, expressed profound hurt, noting his daughter's aspiration to work in the Nottingham NHS. Emma Webber, Barnaby Webber's mother, suggested that without the families' persistent pressure and the public inquiry, these breaches might never have been brought to light. Further investigations are ongoing into similar inappropriate access concerning the surviving victims of the attacks.
Dr Manjeet Shehmar, Medical Director at NUH, offered apologies to the families, reiterating that unauthorised access to medical records is "totally unacceptable." The Department of Health and Social Care (DHSC) has deemed such actions "completely unacceptable," endorsing the Trust's robust response.
Beyond NUH, investigations in December 2024 revealed that Ministry of Justice (MoJ) staff also allegedly accessed computer files related to the Nottingham attacks. The public inquiry heard that court workers inappropriately accessed case information in January 2024, and three probation service officers were found to have accessed files without legitimate reason, though their breaches were deemed not serious enough for further action by HM Prison and Probation Service and the MoJ's data protection unit. Nottinghamshire Police also confirmed an audit following a complaint regarding staff viewing attack-related footage and images without legitimate policing purpose.