Message from Dr Anne Whitehouse, Medical Director and Caldicott Guardian
It is vital that we maintain the trust that patients place in us to keep their information safe and confidential. NHS guidance published in August 2026 reinforces the importance of ensuring that access to patient records is justified and directly related to a colleague's role in supporting patient care or service delivery.
Confidential clinical information (on Cleo, EMIS, ICE, RiO, Connecting Care etc) must only be accessed where there is a legitimate work-related reason to do so. This means:
- Only accessing records required to undertake your role.
- Only viewing information that is necessary to support care, service delivery or an approved organisational function.
- Not accessing your own records or those of family members, friends, colleagues or people known to you unless this forms part of your professional duties in your role at BrisDoc and there is a clear, legitimate reason. Curiosity or personal interest is not a legitimate reason.
- Regulated healthcare professionals can access records to support reflective practice if they have a legitimate care relationship with the patient, past or present.
- All access to patient records is auditable and may be reviewed.
- Raising concerns if you become aware of inappropriate access, or possible inappropriate access. Please log as a learning event to enable timely review and follow up.
BrisDoc will always investigate inappropriate notes access thoroughly, in line with the disciplinary policy (co-owners only), governance processes and legislative requirements. Clinicians may require referral to the relevant regulatory body.
These consequences are serious because accessing patient records for any reason other than the intended work purposes is both unethical and illegal. Please do not do it.
Best Wishes
Anne