Anita CHANDRA

On 14 January 2025 at the Information Commissioner’s Office in London Dr Chandra accepted a caution for contravening section 170(1)(a) of the Data Protection Act 2018, in that between 2 August 2022 and 30 September 2022 she knowingly or recklessly, without the consent of the data controller, namely Cambridge University Hospitals NHS Foundation Trust, obtained personal data by accessing the medical records of two patients. This conduct does not meet the standards required of a doctor. It risks bringing the profession into disrepute and it must not be repeated. The required standards are set out in Good medical practice and associated guidance. Good medical practice states: 81. You must make sure that your conduct justifies patients’ trust in you and the public’s trust in your profession. 88. You must be honest and trustworthy, and maintain patient confidentiality in all your professional written, verbal and digital communications. Confidentiality: good practice in handling patient information states: 5. Medical professionals, like everyone else, must comply with the law when using, accessing or disclosing personal information. The law governing the use and disclosure of personal information is complex, however, and varies across the four countries of the UK. 120. You must not access a patient’s personal information unless you have a legitimate reason to view it. Whilst these failings are not so serious as to require restriction on Dr Chandra’s registration, it is necessary in response to issue this formal warning.