NHS Staff Investigated Over Dead Teen’s Records in Bristol 2026

Key Points

• Mrs Paula McGowan OBE stated that 38 persons have seen the medical records of her deceased son Oliver, where 637 records have been viewed and 67 were downloaded after his death in 2016.
• Oliver McGowan passed away in Southmead Hospital, Bristol, due to being administered with anti-psychotic medicines despite the fact that his parents have alerted them about the allergy in him when he was aged 18.
• Out of 22 people who are still working in the trust, 15 persons have valid reasons for access, whereas 16 individuals who have viewed those records have now left the organization.
• At present, five persons are being investigated actively, among which three persons are nursing staff members and one is a doctor who has referred himself to the General Medical Council.
• Paula McGowan has observed derogatory remarks being made about her family on certain websites related to the Mandatory Training Programme of Oliver McGowan.
• The Chief Nursing and Improvement Officer of Bristol NHS Foundation Trust, Professor Steve Hams, has apologized and admitted that the matter was self-refereed to the Information Commissioner’s Office.

Bristol (Bristol Express News) – September 25, 2026 – As reported by Filipa Gaspar and Abigail Neep of Bristol Live, a grieving mother has spoken out after discovering that dozens of National Health Service staff may have accessed her late son’s confidential medical records inappropriately in the years following his tragic death.

Paula McGowan OBE, aged 61, whose 18-year-old son Oliver McGowan died in 2016 after being given antipsychotic medication at Southmead Hospital in Bristol, stated that she was left feeling “deeply hurt” upon learning the scale of the digital intrusion. As detailed by Filipa Gaspar and Abigail Neep of Bristol Live, Mrs McGowan was informed that 38 people had accessed Oliver’s records since his passing, resulting in 637 individual items being viewed and 67 items printed off.

Why Did Paula McGowan Investigate Her Son’s Medical Records?

As uncovered through reporting by Filipa Gaspar and Abigail Neep of Bristol Live, Mrs McGowan first grew suspicious after noticing derogatory comments regarding her family on online forums dedicated to the Oliver McGowan Mandatory Training programme—an initiative introduced nationwide to improve healthcare provisions for autistic people and individuals with learning disabilities.

Describing the online hostility, Paula McGowan stated to Bristol Live reporters Filipa Gaspar and Abigail Neep: “The comments were quite nasty, negative, and very demeaning towards Oliver, to me and my family. Some of the things they were saying about what had happened to Oliver, whilst not always accurate, there were a few where, you look over your shoulder, and you think, ‘how do they know that?'”

Prompted by these unsettling online disclosures, Mrs McGowan submitted a Subject Access Request (SAR) to uncover who had viewed her son’s hospital documentation. While some access was determined to be legitimate and linked directly to subsequent complaints, legal proceedings, and the coroner’s inquest into his death, a significant portion raised grave institutional concerns.

What Actions Are Being Taken Against the Staff Involved?

As outlined in the investigation by Filipa Gaspar and Abigail Neep of Bristol Live, the hospital trust has thoroughly audited the access logs. Of the 22 staff members still employed by the organization, 15 were found to have legitimate justifications for viewing the files, such as providing direct care or participating in official investigations.

Furthermore, reporting by Filipa Gaspar and Abigail Neep for Bristol Live highlighted that 16 individuals who accessed the files have since departed from the trust. The organization is actively utilizing professional registration details to trace and interview those former employees. Additionally, five active staff members are currently undergoing internal investigation—including three nursing professionals—while a doctor who no longer works for the trust has self-referred to the General Medical Council. Another member of staff is having their case reviewed under separate administrative channels.

How Has the Family Responded to the Breach?

Reflecting on the severe breach of privacy, Paula McGowan shared her profound distress with Bristol Live journalists Filipa Gaspar and Abigail Neep, stating: “Deeply hurt, deeply disappointed. Oliver has been violated. His notes have been violated. He’s been dehumanised yet again – it feels very dirty.”

Oliver McGowan originally passed away in October 2016 after being admitted to hospital for seizures and subsequently being prescribed antipsychotic medicine, despite his parents issuing explicit warnings to medical staff regarding his severe allergies.

Despite her heartbreak, Mrs McGowan praised the handling of the current inquiry by Bristol NHS Foundation Trust Chief Nursing and Improvement Officer, Professor Steve Hams, noting to Filipa Gaspar and Abigail Neep that he maintained regular contact and remained “absolutely open and transparent”. However, she emphasized that the episode exposes wide systemic vulnerabilities in digital security across modern healthcare frameworks.

What Has the NHS Trust and National Leadership Said?

As documented by Filipa Gaspar and Abigail Neep of Bristol Live, Professor Steve Hams formally addressed the findings on behalf of the organization. Professor Steve Hams stated: “We are deeply sorry for the distress that this situation has caused Oliver’s parents, at what is already a difficult time for their family.”

Professor Steve Hams added, as reported by Bristol Live:

“Every patient and family has the right to expect that their personal information will be treated with care, respect and confidentiality. Any concern that records may have been accessed without a legitimate reason is something we take extremely seriously. As soon as these potential issues were identified, we took immediate action, including self-referring the matter to the Information Commissioner’s Office and undertaking a thorough investigation as a priority.”

This incident follows broader national concerns regarding data security. In July, NHS England chief executive Sir Jim Mackey issued a strict warning that staff face immediate dismissal or criminal prosecution if they access patient files without a legitimate clinical rationale. This crackdown follows several high-profile security breaches involving medical files relating to victims of violent attacks across the country.

Explore more Local Bristol News:

Fatal Motorcyclist Crash on A370 Long Ashton Bypass, Bristol 2026

St Nick’s Market Overhaul Plans Announced in Bristol City Centre 2026

Background of the Particular Development

The unauthorized access to Oliver McGowan’s records unfolds against a backdrop of increasing scrutiny regarding data privacy and cybersecurity within the UK’s National Health Service. Patient confidentiality is protected strictly under data protection legislation and internal NHS governance frameworks, which dictate that clinical records can only be viewed by personnel directly involved in a patient’s care, administrative support, or authorized legal and regulatory reviews.

In recent years, the digitization of health records—while improving efficiency and multi-site clinical collaboration—has inadvertently created vulnerabilities where disgruntled, curious, or malicious employees can bypass audit trails or exploit systemic access permissions. The case also follows the high-profile establishment of the Oliver McGowan Mandatory Training programme, which thrust the McGowan family back into the national public eye and unfortunately made Oliver’s personal case file a subject of morbid curiosity or malicious discussion on digital forums. Regulatory bodies like the Information Commissioner’s Office (ICO) and the General Medical Council (GMC) maintain strict oversight to penalize breaches of medical confidentiality, aiming to deter staff from illicitly viewing sensitive patient data.

How This Development Can Affect the Particular Audience

For the broader National Health Service workforce, patient families, and vulnerable patient demographics—particularly autistic individuals and those with learning disabilities—this development will likely accelerate institutional clampdowns on electronic record security. Following Paula McGowan’s advocacy and the trust’s referral to the Information Commissioner’s Office, NHS trusts nationwide are expected to fast-track stricter multi-factor authentication, more aggressive automated audit triggers for deceased patient files, and harsher disciplinary penalties for unauthorized snooping.

For families of vulnerable patients, this breach risks deepening anxiety regarding whether their loved ones’ dignity and privacy are adequately safeguarded within public health institutions. However, it may also empower patient advocates to demand greater transparency and digital accountability, ensuring that health service providers treat confidential medical histories with uncompromised integrity long after a patient’s passing.