The ICO said the unauthorised person gained access to the ward and then, “due to a lack of identification checks and formal processes”, they “assisted with administering care to one patient” and were handed a document containing the personal information of 14 people.