NHS Tayside is investigating an alleged data breach after staff at Ninewells Hospital reportedly accessed the medical records of nine-year-old Minnie Merriman without authorization or clinical need. The trust said the incident happened in a working clinical area where staff can access patient information and that any confirmed data-protection breach would be formally recorded and, where appropriate, reported to the UK Information Commissioner’s Office.
Why it matters: This is a sensitive healthcare privacy breach involving a child’s records, with potential harm to the family and clear implications for insider access controls and auditing in hospitals. Healthcare organizations should review least-privilege access, monitoring, and staff handling of patient records, while the public should expect notification and regulatory follow-up if a breach is confirmed.
2026.08.07
100% relevant
This article appears to be the first report establishing the alleged unauthorized access incident involving Minnie Merriman’s records at Ninewells Hospital under NHS Tayside.
← Back to all stories