Confidentiality and data protection issues
The healthcare sector handles and stores some of the most sensitive personal data, in the form of medical records.
The GDPR and Data Protection Act (DPA) place legal obligations on healthcare providers to protect that information. It also gives patients the right to see their personal information, by way of a ‘subject access request’.
Our specialist group of healthcare lawyers regularly advises on all the legal aspects of medical record disclosure and the confidentiality of health information generally.
We advise on the general provisions of the GDPR, DPA and common law duties of confidentiality in respect of patient and family member requests for health records and health related information.
We have, for example, advised healthcare providers on the lawfulness of disclosing confidential patient information to third parties e.g. the police, where public interest concerns arise.