Think Before You Click: Protecting Patient Records
Download this memo
Save a PDF copy to read, print or share with your practice team.
Download PDFAbout this memo
Patient records are not for curiosity!
Every access to a patient record should have a legitimate, authorised purpose. Inappropriate access can undermine patient trust, breach confidentiality and lead to serious disciplinary or legal consequences.
This week’s Memo of the Week reminds everyone working in general practice of their responsibilities when accessing patient information, including the importance of appropriate permissions, secure working practices and recognising that access activity can be monitored and audited.
Just because you can access a patient record doesn’t mean you should.
Key actions
- Review staff access permissions and role-based access to ensure they remain appropriate
- Check your starters, movers and leavers procedures, including the timely removal of access
- Remind staff that access to patient records is logged and may be audited
- Review how your practice identifies, investigates and responds to unusual or inappropriate access
- Reinforce confidentiality expectations at your next team meeting, including how staff should report concerns
Explore this topic further
Preventing Inappropriate Access to Patient Records: A Practical Guide for Practice Managers
Read guideSources & Further Reading
This memo provides general operational information and should be read alongside current national guidance, relevant legislation and local policies. Practices should seek appropriate clinical advice when making decisions about specific risks or procedures.