Featured image: A wooden shelving unit contains numerous files and folders. AI-generated image; not a photograph of the reported event.
Nottingham University Hospitals (NUH) NHS Trust has dismissed 15 staff members. The action follows an investigation into inappropriate access to medical records of victims of a stabbing on 13 June 2023. Source: bbc.co.uk.
What Happened
On 13 June 2023, Valdo Calocane stabbed three people in Nottingham. The victims were students Barnaby Webber and Grace O’Malley-Kumar, and grandfather Ian Coates.
Calocane had paranoid schizophrenia and pleaded guilty to manslaughter in January 2024, citing diminished responsibility as a defence.
After the attack, NUH launched an internal review of how medical records were accessed. In May, 11 staff were dismissed. By Friday, the total number of staff let go rose to 15.
These staff included doctors, nurses, and registered healthcare professionals. All had accessed records without a legitimate clinical or administrative reason.
Two cases were found to have no case to answer. The access was deemed insufficiently serious or justified. Families still express deep concern about breaches of privacy.
Key Facts and Responses
- 15 staff received final written warnings; two received first written warnings.
- Independent bodies including the Nursing and Midwifery Council, General Medical Council, and Information Commissioner’s Office have been notified.
- Nottinghamshire Police confirmed staff viewed attack footage and images without a legitimate policing purpose.
- Following a complaint by Barnaby’s mother, Emma Webber, in March, the force will audit all such access to verify purpose and necessity.
Dr Sanjoy Kumar, Grace’s father, said: ‘I am appalled. It’s time to get a handle on these failures.’ He called the access of medical data ‘voyeuristic’ and said it worsened grief for families.
Dr Manjeet Shehmar, NUH’s medical director, said: ‘There is no excuse for accessing records without a legitimate reason. We will investigate and take action.’ She added that the actions were isolated and did not reflect the trust’s overall values.
System and Training Changes
NUH is introducing a new data protection system under testing. It monitors access in real time and flags deviations from policy.
If suspicious activity is detected, alerts go to staff and senior management. This allows swift review and intervention.
A campaign titled ‘Your Responsibility, Your Actions, Their Privacy’ has launched. It trains staff on data protection duties and the consequences of breaches.
Training covers handling records, reporting breaches, and legal and moral responsibilities. Staff are now engaged in learning and compliance will be monitored through audits.
Broader Context and Other Cases
The NUH case is part of a public inquiry into the lead-up to the attacks and post-incident decisions. The Nottingham Inquiry, led by retired judge Deborah Taylor KC, heard from 164 witnesses between February and June 2026.
Closing statements were given in September. The findings of the inquiry will be published after the conclusion of the hearings.
Calocane had been sectioned four times under the Mental Health Act. He had a history of violent incidents linked to police encounters. These findings suggest gaps in mental health monitoring.
In December 2024, a MoJ investigation began into allegations that MoJ staff accessed attack-related files. Seven probation officers were found to have accessed case data.
Four had legitimate reasons. Three did not. The HM Prison and Probation Service and MoJ’s data unit said the breaches were not serious enough for further action.
Nottinghamshire Police will audit all instances of footage or image access. They will assess frequency and purpose to determine if access was justified.
Why It Matters
This case shows how personal data can be vulnerable in public institutions. Even minor breaches can deeply hurt victims’ families and damage trust in services.
While NUH says the incidents are isolated, multiple agencies have faced access issues. This raises questions about oversight, training, and enforcement of data rules.
What to Watch Next
The findings of the Nottingham Inquiry will be published after the conclusion of the hearings. It will assess the lead-up, decisions, and any systemic failures.
Public attention to data access in healthcare and justice services is likely to grow. The new system and audit results will be closely watched.
For updates, listen to BBC Radio Nottingham on Sounds or follow BBC Nottingham on Facebook, X, or Instagram. Send story ideas to eastmidsnews@bbc.co.uk or via WhatsApp at 0808 100 2210.
Source: BBC News
