Hospital Authority intern doctor arrested for patient data breach

A 24-year-old intern doctor in Hong Kong, surnamed Lai, was arrested on suspicion of unauthorized access to patient data. She was held for about 21 hours before being released from Cheung Sha Wan Police Station on Saturday afternoon. Shortly after her release, she was taken back to Caritas Medical Centre, her former workplace, for evidence collection. The arrest came within three days of a report filed by a doctor at the hospital on June 10. The Hospital Authority also dismissed her on Friday for misconduct. Preliminary investigations indicate that Lai used a device at Caritas Medical Centre to access patient records at Tuen Mun Hospital via an account that was not assigned to her, between May 13 and 14.

This breach of patient confidentiality has serious legal consequences, as she could face up to five years in prison under Hong Kong’s laws on accessing a computer with dishonest intent. The case underscores the strict enforcement of data privacy regulations in the healthcare sector. The Hospital Authority’s swift dismissal and the police’s rapid investigation signal a zero-tolerance approach to such violations. As the probe continues, Lai remains out on bail, and the incident highlights the critical need for robust access controls and monitoring systems to protect sensitive patient information.