An NHS trust has apologised to the family of three-year-old Noah Woods after his medical records were accessed without authorisation following his death.
East Suffolk and North Essex NHS Foundation Trust has launched an urgent investigation into the breach and said any access to patient information without a legitimate clinical reason was unacceptable.
Dr Martin Mansfield, the trust’s deputy chief medical officer, said immediate measures had been taken to secure Noah’s records and prevent further unauthorised access.
The trust has also reported the matter to the Information Commissioner’s Office (ICO), while saying Noah’s family will be kept informed as the investigation continues.
In a statement, Dr Mansfield apologised to Noah’s family for the additional distress caused by the breach.
The trust said disciplinary action would be considered if the investigation establishes that staff members had accessed the records improperly.
The circumstances surrounding the access have not been fully established publicly, and the investigation remains ongoing.
Noah was reported missing from the village of Brantham, Suffolk, on 15 September.
A large search operation followed, involving at least 1,300 members of the public and emergency services. His body was found the following day in nearby water by police divers.
The circumstances surrounding his death are also being examined through an inquest.
The inquest opened in Ipswich on Friday before Assistant Coroner Jyoti Gill, who described Noah’s death as very sad and tragic before adjourning proceedings.
Noah’s family described him as a “happy, cheeky, playful” child who loved to laugh.
His mother also urged other parents to cherish time with their children, saying families should hold their children a little tighter and appreciate every moment together.
The family’s tribute came after the extensive search effort in which members of the local community joined emergency services in trying to find the missing child.
The inquest heard that Noah had left a play area through a gap in a fence before he went missing.
The coroner is expected to consider the circumstances surrounding his death as the formal investigation progresses.
The data breach is a separate matter and concerns access to Noah’s medical records rather than the circumstances of his death.
The NHS trust said it would continue investigating the unauthorised access and has informed the relevant data protection authority.