Cornwall woman says hospital data breach robbed her of privacy during cancer diagnosis
Constantvpn.com – A woman from Cornwall has described the distress of learning she had breast cancer through an unexpected phone call from a hospital worker, before her planned consultation to discuss the results.
Pippa Boardman, who lives in Lostwithiel, said the experience left her feeling that her personal dignity and privacy had been taken away at an already frightening point in her life. She had been waiting to see a consultant when a man she vaguely knew contacted her at home after accessing her medical information while working at the Royal Cornwall Hospital in Truro.
“I got a phone call at home from somebody I know through the sport that I play.”
Boardman said the caller told her not to worry before saying that she had cancer. The disclosure came two days before her consultant confirmed that she had breast cancer.
“This man said to me ‘Pippa, I don’t want you to worry, but you’ve got cancer’.”
She said she struggled to take in what she had been told.
“I just couldn’t really believe it.”
A diagnosis should come through the right clinical conversation
Medical records contain highly sensitive information, including test findings, diagnoses and treatment plans. While staff may need access to records in order to do their jobs, that access does not give them permission to share information outside their professional role.
For a patient awaiting potentially life-changing news, the planned conversation with a consultant can be especially important. It gives the clinician an opportunity to explain the diagnosis, discuss what happens next and respond to immediate questions. Boardman said that opportunity was undermined when she received the call beforehand.
Nine months after the diagnosis, Boardman said she was recovering well from cancer. However, she said the emotional impact of the breach remained.
“I lost my dignity and I’ve lost my privacy.”
She said the incident had made her feel deeply unsettled by the thought that someone could view her information and then disclose it improperly.
“It really distresses me people can’t see just how invasive and intrusive it is if somebody looks at your information and then shares it inappropriately.”
Concerns over the hospital’s response
Boardman said the way her complaint was handled added to her trauma. She felt it took significant courage to raise the matter and said she did not initially receive an apology from the trust. An apology was made after the matter was raised externally.
She said the trust explained that the rights of the employee involved meant it could not provide her with certain details. While she understood that employment matters could be confidential, Boardman said she questioned where that left her own rights as the patient whose private information had been accessed and shared.
“It took a lot of courage to complain… and I didn’t understand why the hospital wasn’t really prepared to engage with me.”
“I understand that it’s because his rights have to be protected. But I kept thinking where are my rights in this.”
Boardman said her purpose in speaking about the case was to reduce the risk of another patient facing the same experience. Although her health recovery has been positive, she said the circumstances in which she learned the diagnosis continue to weigh heavily on her.
“I’m in a very good place in terms of my cancer. I’m just in an awful place in terms of what happened and how it happened.”
Trust says action was taken
Royal Cornwall Hospitals NHS Trust said it was “truly sorry” that Boardman had been contacted in this manner. It said the staff member had legitimate access to her records as part of their job, but contacting her about the information was outside the scope of that role.
The trust said the contact should never have happened and acknowledged the concern and upset it was likely to have caused. It said an investigation began as soon as Boardman raised the issue and that appropriate action followed.
Because employment matters are confidential, the trust said it could not disclose the specific outcome for the individual involved. It nevertheless said it treated the incident with great seriousness.
The organisation has reminded staff that patient files may only be opened for a genuine work-related reason. It is also reviewing relevant procedures following strengthened NHS England guidance concerning inappropriate access to patient information.
Why privacy breaches can have lasting effects
Data protection in healthcare is not simply an administrative obligation. Patients must be able to trust that their records will be used only to support their care and that personal information will not be discussed by people who have no clinical or professional reason to do so.
A breach can be particularly harmful when it involves a diagnosis such as cancer, where the timing, setting and support around the conversation can shape how a patient begins to process the news. The information may be medically accurate, but an unauthorised disclosure can still deny a patient control over one of the most personal moments in their care.
Boardman’s case has emerged amid wider concern about inappropriate handling of NHS patient records. Health Secretary Yvette Cooper has described recent breaches involving NHS data as a disgrace. The issue has also been highlighted by cases involving the records of victims of serious incidents, where staff access has led to disciplinary action.
For Boardman, the central concern is that a patient should not have to fear that private medical information could be seen or shared beyond the people directly involved in their treatment. Her recovery from breast cancer has brought reassurance about her health, but she says the breach itself remains a separate and painful part of her experience.
Related Reading
Frequently Asked Questions
What is Data breach NHS worker told woman?
Data breach NHS worker told woman is the main topic of this guide. The article explains the context, practical details, and next steps readers should understand.
Why does Data breach NHS worker told woman matter?
Data breach NHS worker told woman matters because readers are looking for a useful answer, not just a short summary. Good content should match search intent and help them decide what to do next.