Campaigners claim GPs could face £500k fines over data protection

GP practices could be fined up to £500,000 under the Data Protection Act if they do not inform all patients about plans to extract personal data from their GP records, a pressure group has warned.

Data: information from GP records extracted
Data: information from GP records extracted

The warning from director of Big Brother Watch Nick Pickles comes after the GPC said most patients are unaware of the extent of data extraction planned by the Health and Social Care Information Centre (HSCIC) under the care.data programme.

Unless patients opt out, personal data including postcodes and NHS numbers will be extracted from GP records under the programme.

GP leaders have called on NHS England to make all patients aware that they can opt out of having this data extracted. Anonymised data will also be extracted from GP records by HSCIC, but patients cannot opt out of this process.

The government has warned that GP practices with ‘an abnormal number of objections’ face being investigated by the BMA and NHS England.

LMCs have raised concerns that posters provided by NHS England for GPs to display in practices will not reach the wider public.

Mr Pickles told the Conservative party conference in Manchester that GP practices, as data controllers, have a duty under the Data Protection Act to inform patients that their personal information will be used by a third party.

‘You as a GP practice will be in breach of the Data Protection Act and liable for up to a £500,000 fine and that is every GP surgery in the country, individually liable,’ he said.

Fines could be imposed under rules allowing the Information Commissioner's Office to demand up to £500,000 for serious breaches of the Data Protection Act.

Mr Pickles added: ‘The NHS England proposal was that we would put up posters up in GP surgeries. Unless you went to your GP practice you would have no knowledge - I have been twice in three years. The idea that it is being done and individual patients aren’t having a letter is in my view immoral but also I think it is probably illegal.

‘There is a right to extract under the [Health and Social Care] Act but there isn’t an exemption from the Data Protection Act. The presumption is you will have consent to do that.’

GPC deputy chairman Dr Richard Vautrey said: ‘It is important that this really is a pro-active publicity campaign and NHS England puts significant energy behind informing patients about what is happening, why it is happening and how they can opt-out if they have concerns.

‘At the moment hardly any patient is aware of this and it is surprising that there has not been more of a focus on this significant change by the national lay media. In the spirit of openness and transparency DH and NHS England should facilitate a really informed publicity campaign, and not simply rely on posters on surgery waiting rooms.’

An NHS England spokeswoman said it has not yet set a date for the data extraction, which was due to begin this autumn.

‘Advice sought by NHS England and the HSCIC suggested that GP practices should have a minimum of eight weeks to inform and discuss with their patients before extracts of data begin under the care.data programme,’ she said.

‘We are clear, however that eight weeks is a minimum requirement, not a maximum, and have always been committed to doing everything we can to ensure patients’ understanding of the programme and of their rights for their objections to be recorded if they have concerns.

‘NHS England and the HSCIC have not yet set a date for the first extractions of data from GP practices and we are continuing to develop further awareness on a regional and national basis, working with the Information Commissioner’s Office and with the RCGP.’

Have you registered with us yet?

Register now to enjoy more articles and free email bulletins

Register

Already registered?

Sign in

Follow Us:

Just published

UK COVID-19 vaccination programme tracker

UK COVID-19 vaccination programme tracker

GPs across the UK are playing a leading role in the largest-ever NHS vaccination...

‘Warm and kind’ retired Derbyshire GP dies from COVID-19

‘Warm and kind’ retired Derbyshire GP dies from COVID-19

Retired Derbyshire GP Dr Om Prakash Chawla, who was known for his warmth and kindness,...

GPs can learn from pandemic to strengthen relationship with patients, says RCGP chair

GPs can learn from pandemic to strengthen relationship with patients, says RCGP chair

General practice can build on changes to care during the COVID-19 pandemic to strengthen...

Surrey GP practice targeted by aggressive anti-vaccination poster

Surrey GP practice targeted by aggressive anti-vaccination poster

Staff at a GP surgery in Surrey have been left completely demoralised after they...

JCVI issues final guidance on phase 2 of COVID-19 vaccination programme

JCVI issues final guidance on phase 2 of COVID-19 vaccination programme

The JCVI has confirmed the next phase of the COVID-19 vaccination programme will...

'Case-by-case' approach to GPs prescribing budesonide for COVID-19

'Case-by-case' approach to GPs prescribing budesonide for COVID-19

Inhaled budesonide is not expected to be routinely prescribed for patients receiving...