Skip to main content

Medical Records: Data Protection

Question for Department of Health and Social Care

UIN HL6451, tabled on 6 July 2020

To ask Her Majesty's Government whether notices issued under the Health Service (Control of Patient Information) Regulations 2002 in March cover the release of patient identifiable information to local public health teams; and if so, which (1) legal, or (2) policy, provisions prevent local directors of public health from receiving such information.

Answered on

17 July 2020

It is of vital importance that the health and care sector is able to access the data it needs to respond to COVID-19. A Control of Patient Information Notice was issued to require a range of organisations to share and process data for COVID-19 purposes. This should include sharing data with public health teams responding to COVID-19.

The Notice only applies to data processed for COVID-19 purposes and organisations must also meet other regulatory and legal requirements such as the General Data Protection Regulation.

Public Health England is making available to all local authorities information on positive tests

for COVID-19. Public Health England also routinely shares personal data with local authorities to manage and control local clusters and outbreaks of certain infectious diseases.