Guernsey
A medical student, Rebecca Elliot, aged 35, has been charged with unlawfully accessing the personal data of 46 individuals during her tenure at the Princess Elizabeth Hospital in Guernsey. The case has been escalated to the Royal Court, highlighting serious concerns regarding data privacy within healthcare institutions.
Ms. Elliot faces eight charges under Guernsey's Data Protection Law, alleging that she knowingly or recklessly obtained personal data without the consent of the data controller. The offenses are reported to have occurred between October 2019 and October 2025. The nature of the data accessed and the potential relationships between Ms. Elliot and the affected individuals are currently under investigation.
During a recent appearance before Guernsey's Magistrate's Court, Ms. Elliot was granted unconditional bail and is scheduled to appear before the Royal Court on 22 April 2026. Health & Social Care (HSC) has confirmed that all individuals whose data was compromised have been contacted, and the matter has been referred to the Office of the Data Protection Authority (ODPA) for further action.
This case underscores the critical importance of safeguarding personal data within healthcare settings and the legal ramifications of unauthorized access. It serves as a reminder for institutions to enforce stringent data protection protocols to prevent breaches and maintain public trust.
