NHS Grampian report "data breach" after person pretended to be ARI staff

The ICO has confirmed it's received a report of a breach of data from NHS Grampian following the incident.

Author: Vanessa WalkerPublished 1st Feb 2024
Last updated 1st Feb 2024

NHS Grampian has reported a possible data breach to the watchdog after a man was arrested and charged in connection with pretending to be staff at Aberdeen Royal Infirmary.

Police confirmed on Tuesday a person had been arrested and charged after "falsely claiming" to be a member of staff at the hospital.

Today, Information Scotland Office (ICO) has confirmed it's received a report of a 'breach of data' from the health board and are "assessing" the information.

An ICO spokesperson said: “We can confirm we have received a report of a data breach from NHS Grampian and are assessing the information provided.”

NHS Grampian say it is carrying out its own internal investigations around the incident and following any guidance the ICO are providing.

The health board says it's also assisting officers with their enquiries.

An NHS spokeswoman said: "Internal investigations into this matter are ongoing; we have made the Information Commissioner's Office aware of the incident and will follow any guidance they offer."

The 20-year-old was arrested on Friday 26 January after officers received reports of a man impersonating a member of staff at the hospital.

He has been released and is due to appear at court at a later date.

A Police Scotland spokesperson said: “We were made aware of a man falsely claiming to be a member of staff at Aberdeen Royal Infirmary around 4.40am on Friday, 26 January.

“A 20-year-old man was arrested and charged in connection with the incident.

“He was released on an undertaking to appear in court at a later date.”

Hear all the latest news from across the UK on the hour, every hour, on Greatest Hits Radio on DAB, smartspeaker, at greatesthitsradio.co.uk, and on the Rayo app.