NHS opt-out error

[polarpercy]

Has anyone else had a letter today or in the last few days telling them they were one of the victims of the NHS opt-out errors? I've had a letter this morning saying that due to an error with one of their system suppliers my opt-out (think I did it straight away in 2015) was not received by NHS digital until recently.

Apparently the provider TPP have offered an 'unreserved apology' but this still means that my medical information has been shared with NHS Digital approved organisations. I have no idea what has been shared about me.

Apologies if there is already a thread about this, had a quick search. AIBU to think it is shocking that this has happened? I know mistakes happen but if I had wanted my data used by these organisations I would have said yes. I'm going to contact NHS Digital and ask for a detailed list of what has been shared about me and with which organisations.

I received the same letter today. Not sure how it affects me as I don't remember opting out - my GP may have automatically done it

I'm worried as I have no idea what of my data they would have shared, and there's plenty in my relatively extensive record(!) that I wouldn't want anyone other than my GP to know.

I don't know if a GP would have done it for you, could you have done it years ago or your partner have done it for you?

Sorry assuming about partner there!

That's very incompetent and untrustworthy of them.

Have you seen the MedConfidential website and e-newsletter? medconfidential.org/2018/150000-patients-opt-outs-not-honoured-their-confidential-information-sold-for-3-years/

Deck thank you for that link. I hadn't seen it, that confirms for me that I did do the opt-out back in 2015. I had thought it was years ago not months. I'm just horrified that I have no idea what has been shared, I've had a very rough few years health wise and had thought my data was private.

I would report this to the ICO

I think from the letter NHS Digital have already done that. But, my husband pointed out that if this was only discovered in June 2018 (27th according to my letter) this is post GDPR which makes it more interesting.

I'm just angry that I have no idea who/what companies know about me

Sorry Boo hope that didn't come across as snippy, I agree with your point entirely.

Sorry Boo hope that didn't come across as snippy, I agree with your point entirely.

Sorry Boo hope that didn't come across as snippy, I agree with your point entirely.

ARGH glitches!

Didn't think you were being snippy. I would still report to ICO anyway and inform both NHS Digital and the ICO that you want a full list of who has access to your data, what was shared and who with. They cannot fully assess the impact of this data breach without first knowing the scale of it. Write to your MP and anyone else you can think of. With new GDPR rules they could be massively fined!!

I had the same letter. Bit dodge really!

I'm also assuming that my daughter (under 13 - so won't get separate letter) has been affected but I can't confirm this. Bizarre that my surgery told me due to data protection they cannot do the text service for her appointments as she is 4, but this has happened!

Giving this a BUMP for those of you getting home from work/picking children up etc.

Sorry I didn't respond - I think, going off the letter saying it could have been years ago, I would have been under 18 then. My Mum doesn't have a clue! I know what you're saying, I might request it too, even if it's just to get more info and more understanding of it.