The three-year-old was left with serious injuries after the incident at Johnsons of Old Hurst in Cambridgeshire
ByOrla Moore and Louise Parry
A hospital has launched an investigation after the medical details of a child seriously injured in a crocodile pit were accessed by up to 40 members of staff.
The three-year-old boy, who is now in a stable condition at Addenbrooke's Hospital in Cambridge, was attacked in the enclosure at Johnsons of Old Hurst near Huntingdon.
Cambridge University Hospitals (CUH) said it was exploring if there were legitimate reasons for the records to be accessed and it had referred itself to the Information Commissioner's Office (ICO).
"Where any member of staff is found to have accessed patient records without legitimate clinical or operational reasons we take robust disciplinary action," it added.
Officers said they were called to the zoo at 13:34 BST on 18 June.
Police said the boy, who was from Cambridgeshire and visiting the zoo with his family, sustained serious injuries "while in the enclosure" and was pulled out by members of staff.
A 30-year-old man from Norfolk was subsequently arrested and bailed on suspicion of attempted murder.
The boy received medical treatment at the scene before being taken to Addenbrooke's Hospital in Cambridge
He was taken to Addenbrooke's Hospital with serious injuries, but police said on Monday that he was "no longer critical" and was in a stable condition.
It is understood that restrictions had been put on the boy's medical records to prevent unnecessary access.
CUH said the boy's family were also being made aware of the investigation.
The three-year-old boy from Cambridgeshire had been visiting the zoo (pictured in April) with family
A CUH spokesperson said: "We have strict policies in place to safeguard patient data and we take any breach extremely seriously.
"We know the vast majority of our 13,000 staff understand the fundamental importance of maintaining patient confidentiality and uphold the highest professional standards.
"Where any member of staff is found to have accessed patient records without legitimate clinical or operational reasons we take robust disciplinary action, including dismissal.
"As part of our response to any breach, we notify both the ICO and apologise to patients and their families affected."
Zoo staff pulled the boy out of the crocodile enclosure which is below fenced-off walkways
Do you have a story suggestion for Cambridgeshire? Contact us below.