Pharmacy Technician’s Unauthorised Access to Patient Records Leads to GPhC Warning

Allegations

This case concerns serious breaches of information governance and patient confidentiality by the registrant during her employment within two NHS Trusts over a four-year period (2020–2024). The allegations centred on inappropriate access to electronic patient records, a fundamental component of modern healthcare systems such as NHS electronic health record (EHR) platforms.

Specifically, the registrant accessed the medical records of seven individual patients without any clinical justification or legitimate professional reason. Additionally, she accessed her own patient records without following appropriate procedures or obtaining authorisation. Accessing one’s own record may appear less harmful at first glance; however, within NHS systems, this is strictly controlled to ensure auditability, prevent misuse, and maintain system integrity.