Our service users have a right to expect that their data will only be used for the specific reasons it was collected, and these reasons are set out in our privacy notices.
As part of your role, you may have access to case management systems containing large amounts of personal data - you must never access personal data without a legitimate business need to do so.
Unauthorised access to service user’s records, without a proper justification is never acceptable and will lead to disciplinary action, in some cases it can also lead to a criminal conviction resulting in up to 2 years imprisonment. If you are unsure if there is a legitimate business need you should speak to your manager before accessing material to clarify this.