Processing/ Handling of confidential records

Andrew B made this Freedom of Information request to Department of Health and Social Care

This request has been closed to new correspondence from the public body. Contact us if you think it ought be re-opened.

Department of Health and Social Care did not have the information requested.

Dear Department of Health,

I am aware that several private companies may handle and process full
patient level healthcare data and that they 'anonymise' the data. This still provides full potentially inaccurate and embarrassing data alongside my date of birth and also postcode. I am also aware that these 'gaps' are routinely 'filled in' effectively making a full patient level package of information available.

What companies/ organisations handle, process, retain and hold my
data. Please list the type of data they hold and provide the
address of their data controller. Please also clarify the purposes
of this and the methods of transmission of this data.

Please also specify how any patient (should they per chance
discover that this is happening to their personal data) might
ensure that their data is processed in line with their wishes- Is this via a specific opt out form or s10 DPA request to your the data controller?

I would be grateful if you would be kind enough to send me the
requested information promptly and in any event not later than the
twentieth working day following the date of receipt of my request.

If my request is denied in whole or in part, or specific items
within the responses are withheld from disclosure, then you must
justify all deletions by reference to specific exemptions of the
act, as per Section 17 of the Act Where you rely on a qualified
exemption to withhold disclosure,you are obliged to consider the
public interest in your decision and the refusal notice must
explain not only which exemption
applies and why, but also the public interest arguments addressed
in reaching the decision.

I wish to receive the information by email; I believe such a
request would be reasonable in these circumstances- per Section
11 of Part 1 of the FOI Act. I would be grateful if you would "so
far as reasonably practicable give effect to that preference"; if you determine that
it is not reasonably practicable to comply with this preference
then you are required by law to notify me of the reasons for your

The “return address” (to which the information that I have
requested be should be sent ) is [email address]

I would be grateful if you would kindly acknowledge receipt of this
request as recommended by the ICO (“It would be good practice to
acknowledge receipt of requests and to refer to the 20 working day
time limit, so that applicants know their request is being dealt

Yours faithfully,

Andrew Barlow

Department of Health and Social Care

Thank you for contacting the Department of Health.
This is an acknowledgement - please do not reply to this email.
Where a reply is appropriate, we aim to send one within 18 working days,
or 20 working days if your query is a Freedom of Information request or
If you have contacted the Department of Health about a current health or
social care campaign, please visit the [1]GOV.UK website, the UK
Government’s official information website, where a response may have been

If your enquiry is about a medical matter, please contact NHS 111 or visit
[2]NHS Choices, or contact your GP surgery.

For general health information you may also find it helpful to refer to
[3]GOV.UK, which includes the Department of Health's [4]'What we
do' section.
Please note that the Department of Health does not process complaints
about the NHS or social services. If you wish to make a complaint about a
healthcare professional, an NHS organisation or a social care provider,
please visit the [5]'Complaints procedure' page on the GOV.UK website.
You can find out more about the Department’s commitments from our
[6]Personal Information Charter.

show quoted sections

Communications via the GSi may be automatically logged, monitored and/or
recorded for legal purposes.


Visible links

Department of Health and Social Care

2 Attachments

Email Content stored in attached file 'Long_Email_Body_17_02_2014.html'.


show quoted sections

Communications via the GSi may be automatically logged, monitored and/or
recorded for legal purposes.

Andrew B left an annotation ()

Leaflet answers
YES they sell this data- but they do not who to yet nor are there any descriptions or protocols to deduce for what purpose.

Yes you can object to this data being collected but they are likely to do so anyway where the law says they can (a law that is being eroded quickly)

You have no control over who accesses what- not just yet anyway.

Only when I die do they stop exporting data! - so be it! there is little point in pursuing this. Life is hard enough.