Specific new obligations which healthcare providers (including radiologists/radiology departments) should prepare for include data access for patients, rules for data processing including explicit consent of the data subject in the absence of derogations, or technical and organisational safeguards.
Blagging, or "knowingly or recklessly obtaining or disclosing personal data or information without the consent of the data controller" has been illegal since 1994.
Section 55 states: (1) A person must not knowingly or recklessly, without the consent of the data controller— (a) obtain or disclose personal data or the information contained in personal data, or (b) procure the disclosure to another person of the information contained in personal data.
That would be okay if these companies were to utilize the data in accordance with the positive consent of the data subject for the primary purpose intended and protected it against data hacking.
The processing of personal data shall be dependent on the prior consent of the data subject or the conclusion of a contract about the use of this data between the controller and the data subject.
This means prior-informed consent, notifications of data use, and clear opt-in and opt-out procedures.
The wide variety of ethical issues related to big data in society including individual privacy, informed consent, reuse of data, involvement of commercial organizations, and attitudes towards the boundaries between public and private are outside the scope of this article.
In this regard, the authors have argued that the Regulation only provides the opportunity for biobanks to process data provided they have the consent of the data subject.
Under the Data Protection Act, it is a criminal offence to knowingly or recklessly obtain, disclose or procure the disclosure of personal information, without the consent of the data controller.
In M.S. v. Sweden, the Court found that the lack of consent of the data subject to the disclosure of certain sensitive data was a key element in the finding of an infringement of Article 8 (the right to privacy).
