NHS trust loses 11 years of maternity access logs in database error
Developed over time first seen 1 day ago
Nottingham University Hospitals NHS Trust accidentally overwrote eleven years of maternity database records on 18 August after staff failed to update a critical setting in reused computer instructions. During routine work to copy a radiotherapy database, pre-written code executed against the wrong database, destroying the Medway maternity records system containing information about women and babies treated between September 2011 and November 2022. This incident raises significant concerns about data governance and audit trail integrity in healthcare systems, and has been reported to the Information Commissioner's Office and Nottinghamshire Police.
Whilst the Trust has successfully recovered the clinical information needed for ongoing patient care—including notes, observations, and test results—it has been unable to fully restore the audit history showing who accessed maternity records during the affected eleven-year period. This means the Trust cannot establish in most cases whether a particular person viewed a patient's maternity record between those dates. Current maternity services remain unaffected, no patient information was accessed inappropriately, and the Trust has completed a safety incident investigation and strengthened its technical controls to prevent a repeat occurrence.
- 11 years of maternity audit logs lost due to misconfigured reused database script
- Clinical data recovered but access history permanently unavailable
- NHS trust strengthens controls after human error destroyed critical audit trail
Both sides, in good faith
The strongest fair case each way — we don't pick a winner.
The case for
The destruction of eleven years of maternity audit logs constitutes a grave failure in healthcare data governance, particularly when patient safety investigations—including Operation Perth into maternal deaths—may depend on establishing access trails and accountability. Even though clinical information was recovered, audit trail loss is irreversible and undermines the Trust's ability to demonstrate compliance with data protection standards and investigate potential misconduct; this vulnerability is especially serious in maternity services, where historical records may be crucial to understanding patterns of care or identifying systemic issues. The incident suggests inadequate safeguards exist within the NHS for protecting critical databases, raising legitimate questions about whether similar risks persist elsewhere in the healthcare system.
The case against
Whilst procedural failures warrant investigation and correction, the actual harm from this incident remains contained: all clinical data essential for ongoing patient care was successfully recovered, no patients experienced adverse outcomes, and there is no evidence of unauthorised access or data misuse. The Trust responded appropriately by notifying authorities and implementing stronger technical controls, demonstrating competent incident management and organisational learning; these are the standard mechanisms by which large complex systems identify and remedy isolated errors. Disproportionate focus on this single contained failure risks damaging public confidence in NHS maternity services without commensurate clinical or safety benefit, when the evidence suggests this was an exception handled through proper channels rather than symptomatic of systemic breakdown.
More coverage
Read the full article at the source →
Originally published by The Register as “NHS Trust IT blunder overwrites 11 years of maternity records”.