A former healthcare assistant who pleaded to offences of unlawfully obtaining and disclosing personal data was ordered to pay a total of £1,715 in fines and costs by the ICO. Following a complaint by a patient, an investigation was opened and revealed that the healthcare assistant had accessed the records of 29 people and that some information had been subsequently shared with others. The ICO stated that this was a breach of patient confidentiality and a breach of the Data Protection Act 1998. The ICO has, therefore, warned NHS staff about the potentially serious consequences of prying into patients’ medical records without authorisation or a valid reason.