Any misuse of records is "a serious breach of trust"
Sir Ciarán Devane responds to a letter from the Information Commission's Office on access to medical records.
Responding to a letter from the Information Commission's Office (ICO) on health staff viewing medical records without a legitimate reason, the chief executive of the NHS Alliance, Sir Ciarán Devane, said:
"NHS staff work hard every day to protect confidential patient information, and any misuse of records is rightly treated as a serious breach of trust.
“As digital technology becomes increasingly central to patient care, strong data governance is essential.
“However, organisations need clear, achievable standards and the capability to meet them. Expectations around access controls, audit trails, monitoring and assurance must be supported by adequate resources, reflect what existing systems can do and be coupled with realistic implementation timescales.
“There is also a risk in placing responsibility on individual leaders without recognising the wider organisational and system challenges many NHS bodies are already managing.
“Maintaining public confidence requires both accountability and investment in the infrastructure, data governance and NHS expertise to prevent and respond to patient data safety."
Related articles
- Insights

Event insights: Responsible AI in NHS communications
22 Oct 2026
Exploring responsible AI use in NHS communications, with a presentation from Stephen Waddington.
Digital
Communications
- Insights

Now's the time to fix the Health Bill
12 Oct 2026
Far from perfect in its current form, now is the time to improve the Health Bill, writes David Williams.
NHS architecture
Digital
Governance
- Insights

National Commission into the Regulation of AI in Healthcare: what you need to know
11 Sep 2026
A member briefing on recommendations for a future regulatory framework for AI in the NHS, published by the National Commission into the Regulation of AI in Healthcare.
Digital