NHS staff accessed Southport victims' records 'inappropriately', hospital trust admits

He added that the "relevant regulators and professional bodies" were contacted.

The Information Commissioner's Office said it was not intending to start a criminal investigation "at this time", but added: "We continue to remind all healthcare organisations about the importance of keeping patient data secure."

Solicitor Nicola Brook, of Broudie Jackson Canter, which represents adult survivors of the attack, said: "This is a truly unbelievable breach of privacy for victims of one of the most horrific attacks this country has ever seen.

"This is more than a few bad apples when it was 48 different members of staff who for no legitimate reason, chose to access vulnerable victims' records.

"That speaks to a culture, and one that will only change if there are real consequences for those responsible.

"For the Trust to then try to hide that it happened is appalling. The Trust has many questions to answer and we will be ensuring our clients get those answers as soon as possible."

Ryan-Donnelly described the two-year delay in telling her client as "absolutely shameful".

She also called on the Trust to give more answers to the teenage girl's family, and for staff to "face proper accountability".

The Labour MP for Southport, Patrick Hurley, told the BBC he was "deeply concerned" by reports of the data breach.

He said: "The suggestion that confidential records may have been accessed without legitimate reason, particularly at a time when survivors and families were at their most vulnerable, is profoundly troubling."

He added: "We must make sure this doesn't happen again, either here in Southport or in other high profile cases where people are receiving confidential health care."

Layla Moran MP, Chair of the Health and Social Care Committee, said that any breach of this kind "fundamentally undermines patient confidence".

The Shadow Health Secretary, Stuart Andrew, said: "Any inappropriate access to confidential medical records is a serious violation of that trust and should never have happened.

"The vast majority of NHS staff uphold the highest professional standards every day under immense pressure. Where those standards are breached, it is right that disciplinary action is taken."

The UHLG said in a statement: "Breaches of patient confidentiality are inexcusable and undermine the hard work of those teams who sought to provide the highest standard of care to these patients after they experienced such traumatic and life-changing events.

"Staff who were found to access patient records were subject to HR disciplinary processes.

"When we concluded our investigation into the incident, we consulted the clinical team who had managed the patients' care and made a decision not to inform the patients involved, taking into consideration the potential psychological impact it may have upon them at the time.

"We notified the relevant regulators and professional bodies, including the ICO, and were fully transparent about any findings and actions taken. Learning from the incident has led to the introduction of a digital solution which reduces inappropriate access to patient records of this nature."

Listen to the best of BBC Radio Merseyside on Sounds and follow BBC Merseyside on Facebook, X, and Instagram. You can also send story ideas via Whatsapp to 0808 100 2230.