Member

I must admit that, when I challenged the NHS on that, there really was not much appetite to address it at all. It probably would say that it was meeting all the GDPR requirements and that people consented to their data being shared—I am sure that absolutely was the case. But when you are presented with a diagnostic test that says you consent to your data being shared, you think it is being shared for a good reason; the reality there was that it did not need to be shared at all. The real-life consequence of all that was that it made Synnovis a target for an attack—the data did not need to be there—and that thousands upon thousands of operations had to be cancelled, as the NHS in London had to go back to a paper-and-pen-based system. It had real-life consequences.