NHS Tayside sends staff update on patient privacy after Minnie Merriman 'data breach'

NHS Tayside has reminded all staff of their responsibilities in protecting patients’ privacy after the medical records of a murdered schoolgirl were allegedly accessed without a legitimate reason.

The health board is currently investigating an alleged serious data breach in which Minnie Merriman’s medical file was accessed without an appropriate reason.

The nine-year-old was found injured at Elliot Industrial Estate in Arbroath shortly after midnight on August 3 and was transported to Ninewells Hospital, where she died.

Minnie’s father, Christopher Rice, has appeared at Forfar Sheriff Court charged with murder.

In the days following Minnie’s death, NHS Tayside suffered an alleged data breach in which someone without cause accessed the child’s medical file.

An investigation by the health board remains ongoing, but all employees have now been contacted, reminding them of their responsibilities and the strict codes of conduct around patient privacy.

All staff are subject to mandatory training in how to access and handle individuals’ private information.

An NHS Tayside spokesperson said: “NHS Tayside is progressing its investigation into the circumstances of an alleged data breach and, as the investigation is reviewing the actions of individual members of staff, it would not be appropriate to provide further details.

“NHS Tayside has reminded staff of their individual responsibilities to protect and handle information appropriately.

“All staff are required to undertake mandatory training in safe information handling and follow information governance policies and procedures.”