A senior staff nurse at the Institute of Mental Health (IMH), Muhammad Hazrul Sani, was sentenced to one week in jail on January 24 for violating patient privacy under the Computer Misuse Act. Hazrul, 34, accessed a patient’s records through the hospital's system after noticing her Instagram post about an appointment with her psychiatrist.
Hazrul, who had worked at IMH since 2013, admitted to being attracted to the 29-year-old woman and wanting to get to know her. On October 25, 2022, he contacted her on Instagram, mentioning that he recognized the location in her photo as IMH. The next day, he messaged her again, addressing her by her real name—information he retrieved from the hospital's patient system.
Although the woman had not disclosed her real name on Instagram, Hazrul admitted to checking her records but claimed he did not read her file. Despite feeling uncomfortable, the woman initially responded cordially to avoid offending him. Over the next six days, Hazrul sent multiple messages, complimenting her appearance and referencing details from her medical records, including her psychiatrist's advice, prescribed medication, and upcoming appointments.
The situation escalated on October 31, 2022, when Hazrul messaged the woman about her upcoming appointment and suggested meeting after his shift. Uncomfortable with his persistence, the woman blocked him on Instagram. However, Hazrul continued to contact her, using her mobile number—retrieved from the hospital system—to send WhatsApp messages, including birthday wishes.
The woman reported the matter to her psychologist, prompting IMH to launch an internal investigation. It was revealed that Hazrul had accessed her records on nine separate occasions. His access to the patient system was disabled on December 27, 2022, and IMH filed a police report on January 10, 2023. Hazrul was dismissed from his position in March 2023.
In court, Hazrul expressed remorse, explaining that he acted impulsively due to personal issues, including a conflict with his ex-wife. He claimed he had sought comfort by confiding in the woman. However, after being fired, Hazrul messaged the woman again, blaming her for his job loss and stating that "karma" would affect her.
Deputy Public Prosecutor Sunil Nair recommended a fine of $4,000 to $5,000, arguing that Hazrul may have believed the woman did not view her information as private because she acquiesced to his actions and posted publicly about her appointment.
Principal District Judge Lee Lit Cheng disagreed, emphasizing the sensitive nature of psychiatric records, which contain deeply personal details such as family history, relationships, and life experiences. The judge highlighted the societal stigma surrounding mental health and noted that breaches of privacy could discourage patients from seeking help.
Calling Hazrul’s actions a serious breach of trust, Judge Lee sentenced him to one week in jail instead of a fine. The sentence reflects the gravity of violating patient confidentiality, particularly in the mental health sector, where privacy is crucial for fostering trust and encouraging treatment.
Comments
Post a Comment