1 All England Reports (2000) pages 786-801
2 All England Reports (2000) page 789
3 One risk is that if the purpose is research, the Office of the Information Commissioner is likely to challenge whether research is 'necessary', even though it is listed as a necessary medical purpose within the Data Protection Act 1998. It would be costly to redesign clinical systems to implement the wishes of patients who do not want their data used for specific types of research.
4 Including issues raised in section 4.5 about whether ISD processing should change to meet the requirements of the law.