Authority
ICO
Country
United Kingdom
Date Issued
December 15, 2025
Industry
Healthcare
Summary
Staines Health Group issued a reprimand for sending 23 years of medical records directly to an insurance company instead of the requested 5 years to the patient first for review, resulting in excessive and unnecessary disclosure of sensitive health data without proper data subject oversight.
Violation Types
Data Subject RightsData CollectionHealth Data
Articles Violated
Related Enforcement Actions
Avoid enforcement risk with automated compliance
IQWorks helps organizations automate UK GDPR compliance before regulators come knocking.
Talk to an Expert