Hospital records of all NHS patients sold to insurers
Since the telegraph story is vague on the exact content of the date of birth and postcode information sold along with the patien records, I have today written to the Department of Health with the following questions to clarify the issue...
Was any NHS patient information data sold between 1997 and 2010 to commercial companies, including insurers, actuaries etc, which contained the full date of birth of the patient (Day, Month, Year) and their full postcode?
If not to what was the maximum resolution of the date of birth data (e.g. year only) and postcode data (e.g. first two letters only)?
Using full date of birth and postcode information it would be very easy for insurers to access our personal health records on an individual by individual basis. Anyone even remotely familiar with relational database systems could do this after a week of training.