Major NHS breach means 150,000 patients had confidential data used without consent

Just one month after the roll-out of GDPR, it has been revealed that a staggering 150,000 patients have been affected by an NHS data breach where confidential information only requested to be used to provide them with care was also exploited for clinical audit and research purposes without their consent or knowledge.

The mistake is said to have been linked to a coding error in the software used by GPs to record objections to patient data being used for research purposes, which meant the application never passed on the request to NHS England’s IT provider.

Software developer TPP “apologised unreservedly” for the blunder.

In a written statement, health minister Jackie Doyle-Price said the 150,000 Type 2 objections set between March 2015 and June this year in GP practices running TPP’s system were not sent to NHS Digital. As a result, the objections were not upheld in NHS Digital’s data disseminations up until 26 June.

“This means that data for these patients has been used in clinical audit and research that helps drive improvements in outcomes for patients,” she explained.

Type 2 objections are when patients do not wish for NHS Digital to share their information for any purpose other than their individual care.

TPP apologised for its role in the data breach and is working with NHS Digital to fix the error. All GP practices using the software have been contacted to make sure they are aware of the issue, and the patients affected will receive a letter from NHS Digital.

“There is not, and has never been, any risk to patient care as a result of this error,” Doyle-Price argued. “NHS Digital has made the Information Commissioner’s Office (ICO) and the National Data Guardian for Health and Care aware.”

The introduction of the new national data opt-out, which will replace Type 2 objections, will simplify the process of objecting to sharing data beyond the use of patient care because patients will have direct control over their own preferences, rather than having to use GP systems. This will “prevent a repeat of this kind of GP systems failure in the future,” Doyle-Price added.

She concluded: “The government has the highest regard for data standards and is committed to ensuring patients can express a preference over how health data is shared for purposes beyond their own care.”

An ICO spokeswoman told the BBC: “We are aware of an incident involving NHS Digital and are making inquiries.”


Enjoying NHE? Subscribe here to receive our weekly news updates or click here to receive a copy of the magazine!


There are no comments. Why not be the first?

Add your comment


national health executive tv

more videos >

latest news

View all News


Turning blue lights green

11/04/2019Turning blue lights green

Polly Billington, director of UK100, a cities network that campaigns on env... more >
Going back to school at Gloucestershire Hospitals NHS Foundation Trust

10/04/2019Going back to school at Gloucestershire Hospitals NHS Foundation Trust

Steve Hams, director of quality and chief nurse at Gloucestershire Hospital... more >

editor's comment

25/09/2017A hotbed of innovation

This edition of NHE comes hot on the heels of this year’s NHS Expo which, once again, proved to be a huge success at Manchester Central. A number of announcements were made during the event, with the health secretary naming the second wave of NHS digital pioneers, or ‘fast followers’, which follow the initial global digital exemplars who were revealed at the same show 12 months earlier.  Jeremy Hunt also stated that by the end of 2018 – the 70th birthday... read more >

last word

Hard to be optimistic

Hard to be optimistic

Rachel Power, chief executive of the Patients Association, warns that we must be realistic about the very real effects of continued underfunding across the health service. It’s now beyond more > more last word articles >


How can winter pressures be dealt with? Introduce a National Social Care Service, RCP president suggests

24/10/2018How can winter pressures be dealt with? Introduce a National Social Care Service, RCP president suggests

A dedicated national social care service could be a potential solution to s... more >

the scalpel's daily blog

The introduction of state indemnity and the continued importance of MDO membership

22/05/2019The introduction of state indemnity and the continued importance of MDO membership

Dr Caroline Fryar, head of advisory services at the Medical Defence Union (MDU), explains why medical defence organisation (MDO) membership remains important following the int... more >
read more blog posts from 'the scalpel' >

healthcare events

events calendar


May 2019

mon tue wed thu fri sat sun
29 30 1 2 3 4 5
6 7 8 9 10 11 12
13 14 15 16 17 18 19
20 21 22 23 24 25 26
27 28 29 30 31 1 2
3 4 5 6 7 8 9

featured articles

View all News