NHS Tayside is investigating an alleged data breach involving the medical records of nine-year-old Minnie Merriman, who died earlier this week. The investigation centers on whether staff at Ninewells Hospital in Dundee improperly accessed her file without authorization or clinical necessity.
Minnie Merriman was publicly identified on Wednesday, following the arrest of a 35-year-old man in connection with her death. The man, who police state was known to the child, appeared in Forfar Sheriff Court on August 5, where he made no plea and was remanded in custody.
The alleged breach reportedly occurred in a clinical area where staff access patient information. NHS Tayside confirmed it is investigating the circumstances and stated that any data protection breach would be recorded, investigated, and, if appropriate, reported to the Information Commissioner’s Office (ICO). The trust declined to comment on the nature of the accessed data or specific staffing matters.
Minnie Merriman was discovered with serious injuries at approximately 00:02 on Monday, August 3, in the Elliot Industrial Estate. She was subsequently transported to Ninewells Hospital, where she later succumbed to her injuries. Police Scotland has indicated they are not seeking additional individuals in connection with her death.
Medical records in the UK are safeguarded under the UK GDPR, as outlined in the Data Protection Act 2018, in addition to common law confidentiality rules. NHS staff are permitted to access patient information only when there is a legitimate clinical or work-related requirement.
Minnie's family, from West Yorkshire and who were camping nearby, are receiving specialist support. In a statement released via Police Scotland, the family expressed their devastation over the loss of their "beloved, absolutely incredible, beautiful and brave Minnie Moo," requesting privacy during this difficult time.
Detective Inspector Mike Ness of Police Scotland’s major investigation team stated that their thoughts are with everyone affected, particularly Minnie's family. He added that a police presence would remain in the area as inquiries continue and urged anyone with concerns or information to contact Police Scotland, quoting incident number 0008 of Monday, August 3, 2026.
