Ten members of staff at the East Suffolk and North Essex NHS Foundation Trust have been removed from active duty or suspended after it was discovered they accessed the digital medical records of three-year-old Noah Woods. The child, whose family described him as a “happy, cheeky, playful” boy, died after going missing on 15 September in the Suffolk village of Brantham; his body was discovered in a nearby pond by police divers the following day. According to a spokesperson for the trust, 10 employees had been “removed from active duty or suspended whilst investigations are concluded”. His mother urged other parents to “hold their children a little tighter and cherish every moment”.
Dr. Martin Mansfield, the trust’s deputy chief medical officer, condemned the unauthorized access as “completely unacceptable” and confirmed that an urgent investigation is underway. The organization has apologized unreservedly to the Woods family and stated that disciplinary action will be pursued where appropriate.
The breach was identified through a proactive internal search specifically targeting the high-profile case. To prevent further unauthorized activity, the trust has taken the step of restricting access to the child’s records. Officials confirmed that staff are regularly trained on information governance, with reminders posted in communal work areas. Internal communications sent to staff on Saturday emphasized that the organization is taking swift action regarding these breaches. If you, or someone you know, have been affected by child bereavement, details of help and support in the UK are available at Action Line.
Investigation and Oversight Details
- Reported Agency: Information Commissioner’s Office (ICO)
- Official Position: Inquiries are ongoing into the trust
- Broader Context: The ICO warned that unauthorized access threatens professional accreditation, livelihoods, and can lead to criminal sanctions
- Systemic Response: Sir Jim Mackey, chief executive of NHS England, has issued a directive to all trusts to implement stronger measures to prevent data misuse
The incident coincides with a wider focus on patient record security. Sir Jim Mackey recently noted that there have been too many instances of individuals abusing patient trust, stating that those who access records out of curiosity will be discovered, potentially losing their careers or facing criminal records. The ICO added that recent high-profile cases of unauthorized data access across the sector present an “extremely worrying picture.” They may lose their career and could end up with a criminal record, anyone who thinks they can satisfy their curiosity by looking at a patient’s record should know this: they will be found out. Your professional accreditation” and could face “criminal sanctions”, it stressed that any healthcare professionals knowingly or recklessly accessing patient data beyond their remit risked “your livelihood.
The tragic circumstances surrounding Noah’s death were subject to an inquest that opened on Friday. Assistant coroner Jyoti Gill described the death as a “very sad and tragic” event, noting that the toddler had managed to exit a play area through a gap in the perimeter fence. The search for the boy had previously drawn at least 1,300 members of the public who assisted emergency services before his body was located. At least 1,300 people helped in the search for Noah in the 24 hours before he was found.
Important Details
- In the statement issued on Sunday,, external Mansfield said: “Immediate steps were also taken to secure the records and prevent further access that was not for a legitimate, clinical reason.
- Which is something we’re able to do in this specific case,” she added, we’ve made it impossible to find [Noah’s] record.
