Witness Statements of Mandy Covey and Mark Jobling
- Ms Mandy Covey, Medical Secretary, Neurosciences – Hurstwood Park Hospital
- Mr Mark Jobling, Investigations Officer – East Sussex County Council (ESCC)
The purpose is to identify, in a strictly documentary manner, the procedural gaps, omissions, and unreferenced authorisations that emerge directly from the content of the statements.
- an initial telephone contact from ESCC,
- followed by an in‑person visit to the hospital.
- a written request,
- a statutory notice,
- a formal authorisation,
- a verification of investigatory powers,
- an external enquiry log,
- any Information Governance (IG) or Caldicott procedure.
The interaction appears to rely solely on verbal representations made by an ESCC officer.
“I checked the electronic records for Mr Gresta…”
- the lawful basis relied upon,
- an internal authorisation to access data outside a clinical context,
- a procedure for handling external enquiries,
- a record of the access in an audit log.
The access to clinical data is described without any accompanying legal or procedural framework.
- IG involvement,
- Caldicott Guardian consultation,
- escalation to a senior data‑protection officer,
- any form of supervisory review.
The individuals responsible for safeguarding patient data do not appear to have been consulted.
However:
- ESCC is not a law‑enforcement body,
- ESCC does not possess criminal investigatory powers,
- no verification of authority is mentioned by the hospital witness.
The hospital appears to have accepted the term “criminal investigation” without verification.
- the patient’s neurology records,
- the 2019 clinical letter,
- appointment history.
- not linked to treatment,
- not linked to patient care,
- not linked to an internal NHS purpose.
The access was triggered solely by an external body, not by clinical need.
“She stated that the last Neurology Letter regarding Mr Gresta was dated 2019.”
“I can produce this letter as my exhibit (MC/01).”
- disclosure of clinical information,
- extraction of a clinical document,
- transfer to an external authority.
The disclosure of clinical data is described without any procedural or legal justification.
“I immediately drew the conclusion that it was not genuine.”
- linguistic analysis,
- stylistic comparison,
- content evaluation.
“typing medical letters and answering the phone to patients.”
The assessment of authenticity was carried out outside the scope of the stated role.
- access logs,
- internal notes,
- IG reports,
- Caldicott reviews,
- external enquiry registers,
- written authorisations.
The event, as described, appears unaccompanied by institutional traceability.
“I can produce this letter as my exhibit (MC/01).”
“I obtained a statement from Mandy…”
- internal approval,
- procedural guidance,
- supervisory oversight.
A formal witness statement was produced without reference to any internal governance process.
- no written request from ESCC,
- no verification of investigatory powers,
- no stated legal basis for accessing clinical data,
- no IG or Caldicott involvement,
- no internal authorisation,
- no audit trail referenced,
- disclosure of clinical information without documented justification,
- administrative evaluation of clinical document authenticity,
- absence of institutional records accompanying the event.
It simply identifies the procedural gaps that emerge directly from the official documents.