KembaraXtra-Case Law-R v Department of Health ex p Source Informatics Ltd and Others (2000)

KembaraXtra-Case Law-R v Department of Health ex p Source Informatics Ltd and Others (2000)
Key takeaway:

Using anonymous data does NOT constitute a breach of confidence. The law aims to protect personal privacy, and anonymization removes that risk.

1. Facts of the Case

Company: Source Informatics (American company) wanted to gather data on doctors' prescribing habits.
Data Collection Method: Pharmacists were to collect computerized prescription data.
Anonymity: The data would not include patient details (anonymous data).
Department of Health Stance: Initially considered this a breach of patient confidentiality, issuing a policy document against it.
Legal Challenge: Source Informatics challenged the Department of Health's view via judicial review.
Initial Outcome: The challenge was dismissed in the first instance. Source Informatics appealed.

2. Court of Appeal Decision

Appeal Outcome: The Court of Appeal allowed the appeal (reversed the initial decision).
Reasoning:
- The law regarding breach of confidence aims to protect the confider's personal privacy.
- Patients have no ownership of the prescription form or the data on it.
- Crucial point: If personal confidences are protected (identity is hidden), there's no breach of confidence.

3. Implications and Commentary

Data Protection Act 1998 (DPA 1998):
- Anonymization could be classified as "data processing" under the DPA 1998.
- However, once data is truly anonymized, it can be used freely.

4. Key Concepts

Breach of Confidence: A legal wrong where someone improperly discloses information given to them in confidence.
Confider: The person who provides the confidential information.
Anonymity: Data where identifying details have been removed so that the individual to whom the data relates cannot be identified.
Data Processing: A broad term that includes collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Personal Privacy: An individual's right to control the collection, use, and disclosure of their personal information.

LAW