As above really. I work for the NHS and in theory on my computer i could look up admissions to hospital and blood results of anybody who is a resident in my county, or has had dealings witht the local hospital. However, it is a disciplinary offence to do so, unless i need to in the course of my work.
Having said that, i'm not sure who monitors it, or if it would get picked up if i did it once or twice. I would go for that "sensitive" option outlined above if i were you