NHS England's chief, Sir Jim Mackey, has announced that healthcare staff suspected of improperly accessing patient records will be immediately suspended and have their access to NHS systems removed. This decision follows several high-profile cases where NHS workers were found to have snooped on patients’ medical information. These incidents included cases linked to victims of the Southport and Nottingham Killings, a three-year-old who fell into a crocodile pit in Cambridge, and an 18-year-old who died nearly a decade ago. Additionally, a former healthcare worker from a private hospital was recently given a caution by the Information Commissioner’s Office for attempting to obtain and sell the medical records of Princess Kate, the Princess of Wales. In a letter to all NHS trusts, Sir Jim Mackey urged a "zero-tolerance" approach to unauthorized access of patient information. He expressed frustration and disappointment at the repeated reports of NHS staff accessing confidential medical records without justification, stressing that such actions are illegal and erode public trust in the NHS. He acknowledged the public’s understandable anger, adding that the misconduct of a small number of staff is harming the reputation of the majority of NHS workers who serve the public with integrity. Sir Jim emphasized that patient records contain sensitive and private information, and he stated that there must be an end to staff abusing that trust. He argued that staff suspected of unauthorized access should be suspended immediately during investigations, rather than continuing their roles while the inquiries take place. This approach, he said, is necessary to ensure the integrity of the NHS and to protect patients from further harm. To address these concerns, the NHS has already taken steps to strengthen the security of patient records. These include launching a new campaign to remind staff of their responsibilities regarding patient confidentiality and issuing updated guidance to NHS organizations on how to prevent and monitor unauthorized access to medical records. These measures are part of a broader effort to ensure that patient data is protected and that public confidence in the NHS is maintained.