{"id":623831,"date":"2026-08-06T16:21:14","date_gmt":"2026-08-06T16:21:14","guid":{"rendered":"https:\/\/www.europesays.com\/ie\/623831\/"},"modified":"2026-08-06T16:21:14","modified_gmt":"2026-08-06T16:21:14","slug":"disciplinary-action-to-follow-after-inappropriate-access-of-northern-ireland-patient-data-in-new-nhs-digital-record-system-the-irish-news","status":"publish","type":"post","link":"https:\/\/www.europesays.com\/ie\/623831\/","title":{"rendered":"Disciplinary action to follow after \u2018inappropriate access\u2019 of Northern Ireland patient data in new NHS digital record system \u2013 The Irish News"},"content":{"rendered":"

The Department of Health has said disciplinary action could follow after it was confirmed there has been over 40 incidents of \u201cinappropriate access to patient information\u201d in Northern Ireland\u2019s new \u00a3400m digital healthcare records system.<\/p>\n

The Encompass system promised streamlined access to patient records for medical professionals, reducing paperwork for both patients and staff and saving time and money within the health service.<\/p>\n

Its rollout began in late 2023 after seven years of planning, and was completed across all health trust areas in the north by May of last year.<\/p>\n

Health service documentation advising patients on the new system states staff \u201cwill only access your information on a strict \u2018need to know\u2019 basis or when they are involved in your period of care\u201d.<\/p>\n

\"Mo<\/a>\"‘We’ll<\/a><\/p>\n

It adds staff would \u201censure that all personal data is treated with the highest possible levels of confidentiality\u201d.<\/p>\n

However, the health minister Mike Nesbitt has admitted that alleged unauthorised access has occurred across all trust areas since its introduction.<\/p>\n

\"C2522527Staff at Newry’s Daisy Hill Hospital celebrate Encompass going live in the Southern Trust last year <\/p>\n

It is the latest controversy to hit Encompass after Mr Nesbitt was forced to apologise in June when it emerged thousands of patient referral letters went missing in the system<\/a>, including \u2018red flag\u2019 cases that should be treated with the highest priority.<\/p>\n

Encompass\u2019 \u00a3400m price tag was also reported by the Irish News as being \u00a3100m over its projected initial cost<\/a>.<\/p>\n

Responding this week to a written question from DUP MLA Paul Frew, the minister said that since \u2018going live\u2019, \u201cHSC Trusts have reported incidents of inappropriate access to patient information on Encompass,\u201d adding: \u201cNot all such incidents meet the threshold for a notifiable UK GDPR breach.\u201d<\/p>\n

The Belfast Trust had the highest number of reported incidents of staff accessing patient records \u201cwithout appropriate authorisation or legitimate clinical reason\u201d since Encompass went live there in 2024.<\/p>\n

In the South Eastern Trust there were nine reported incidents of unauthorised access in 2024\/25 and a figure fewer than five in 2025\/26.<\/p>\n

Eight incidents were reported in the Northern Trust area, while in the Western Trust, two incidents of data being accessed \u201cmet the threshold for referral to the Information Commissioner\u201d since Encompass was introduced in the trust in May 2025.<\/p>\n

The Southern Trust, meanwhile, reported fewer than five incidents<\/p>\n

The Department of Health has told the Irish News it is aware of a \u201csmall number of investigations\u201d into suspected unauthorised access of patient data.<\/p>\n

\"HealthHealth minister Mike Nesbitt has revealed details of suspected data breaches in the new Encompass system PICTURE: PA (Liam McBurney\/PA) <\/p>\n

\u201cAny investigations will be handled by the relevant HSC Trust with potential consequent disciplinary action a matter for them consistent with their policies and procedures,\u201d a spokesperson said.<\/p>\n

They continued: \u201cAll HSC staff are contractually obligated to ensure that personal data is treated with the highest levels of confidentiality and staff adhere to the HSC Code of Practice and common law Duty of Confidentiality. <\/p>\n

\u201cProcedures are also in place to deal with any suspected data security breach. Registered health and care professionals must also comply with professional duties of conduct and are subject to regulatory authority.\u201d<\/p>\n

Encompass has safety features including the ability to generate reports on any inappropriate access to patient data.<\/p>\n

It also has a \u201cdedicated Information Governance Advisory Council\u201d, made up of representatives from across the health service, Department of Health, patient representatives, and observers from the Information Commissioners Office. <\/p>\n

\u201cConsiderable effort has been made to protect information and ensure those using the encompass system access only the information they require to do their work,\u201d the spokesperson added. <\/p>\n","protected":false},"excerpt":{"rendered":"The Department of Health has said disciplinary action could follow after it was confirmed there has been over…\n","protected":false},"author":2,"featured_media":623832,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","_share_on_mastodon":"0"},"categories":[275],"tags":[2672,18,135,475,474,19,17,71278],"class_list":["post-623831","post","type-post","status-publish","format-standard","has-post-thumbnail","category-healthcare","tag-digital","tag-eire","tag-health","tag-health-care","tag-healthcare","tag-ie","tag-ireland","tag-mike-nesbitt"],"share_on_mastodon":{"url":"https:\/\/pubeurope.com\/@ie\/117049485043022478","error":""},"_links":{"self":[{"href":"https:\/\/www.europesays.com\/ie\/wp-json\/wp\/v2\/posts\/623831","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.europesays.com\/ie\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.europesays.com\/ie\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ie\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ie\/wp-json\/wp\/v2\/comments?post=623831"}],"version-history":[{"count":0,"href":"https:\/\/www.europesays.com\/ie\/wp-json\/wp\/v2\/posts\/623831\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ie\/wp-json\/wp\/v2\/media\/623832"}],"wp:attachment":[{"href":"https:\/\/www.europesays.com\/ie\/wp-json\/wp\/v2\/media?parent=623831"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.europesays.com\/ie\/wp-json\/wp\/v2\/categories?post=623831"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.europesays.com\/ie\/wp-json\/wp\/v2\/tags?post=623831"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}