Info Gov

The deletion of files relating to hundreds of maternity cases at Nottingham University Hospitals (NUH) NHS Trust was most likely to have been “deliberate and intentional”, an independent investigation has found.

The investigation followed a police inquiry into the deletion of key records at the NHS Trust in July 2024.

Nottinghamshire Police concluded in June 2025 that the deletion was "most likely to be the action of an individual" but the loss "was not caused or contributed to by any systemic corruption within NUH".

Families affected by maternity failings at the trust were told the files were "most likely" to have been deleted intentionally or maliciously, but that the police were not able to identify a responsible individual.

Following the police investigation, the NHS trust commissioned a further independent investigation, which reached the same conclusion, as well as providing a number of recommendations.

The independent investigation was unable to find a motive, but concluded it was a possibility that the deletion could have been "connected to concerns about scrutiny of historic record keeping".

The investigation also found that the deletion "could have been intended to create the impression that another person was responsible".

The NHS trust was at the centre of the biggest review of maternity failings in NHS history, led by senior midwife Donna Ockenden.

Anthony May, Chief Executive at NUH said: “We recognise that the loss of data caused significant distress and uncertainty for the families affected. We are deeply sorry for the impact this had and for the additional worry caused at what was already an extremely difficult time.

“When we became aware of the deletion of key records from the Medical Examiner’s Office in July 2024, immediate steps were taken to retrieve the data, which were successful, and we informed key partners including Nottinghamshire Police and Donna Ockenden. Nottinghamshire Police investigated the incident and concluded that the deletion was most likely to have been deliberate and intentional, but were not able to identify a responsible individual.

“We then commissioned a further independent investigation, which reached the same conclusion, as well as providing a number of recommendations that we are following up on to improve our records keeping and help prevent a similar incident from occurring again.”

Also in this section

Oct 19, 2026

ICO audit finds "limited" assurance over Derbyshire Constabulary data protection governance

The Information Commissioner's Office (ICO) has given Derbyshire Constabulary a "limited" assurance rating for governance and accountability following a consensual data protection audit, finding that the force does not hold a comprehensive record of processing activities and is not yet meeting the logging requirements for law enforcement processing under section 62 of the Data Protection Act 2018.
Oct 19, 2026

DSG to pay £200,000 as consent order ends long-running cyber attack penalty dispute with ICO

The Information Commission (ICO) has confirmed that its long-running enforcement action against DSG Retail Ltd over the 2017 malware attack on Currys PC World and Dixons Travel tills has ended, after the First-tier Tribunal approved a consent order under which the retailer will pay £200,000 of the monetary penalty imposed by the tribunal rather than contest a fresh hearing.