If you have read The Vultures Circle: Defending the NHS from the Tech Bros and are concerned about the commercialisation of NHS data, you can use the resources below to take action. The following template allows you to exercise your GDPR rights by explicitly instructing your GP practice to stop sharing your confidential information for anything other than your direct care.
Subject: Formal Objection to Data Processing – [Your Full Name]
[Your Full Name] [Your Address] [Your Date of Birth] [Your NHS Number / CHI Number]
To the Practice Manager, [Name of GP Practice] [Address of GP Practice]
[Date]
Dear Practice Manager,
Re: Exercise of Right to Object to Processing of Personal Data
I am writing to formally exercise my right to object to the processing of my personal data for purposes other than my direct medical care. This request is made in accordance with Article 21 of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Please ensure that my medical records are updated to reflect that I do not consent to my confidential patient information being shared for:
- Research purposes
- Planning or administrative purposes
- Commercial usage
- Any other secondary uses not directly related to my immediate clinical care
I request that you apply the necessary opt-out codes (such as the Type 1 Opt-out or the relevant local equivalent) to prevent my confidential data from leaving this GP practice for the purposes listed above.
Please note that this objection does not apply to data sharing that is strictly necessary for my direct treatment, such as referrals to hospitals or emergency care.
As per Article 12(3) of the UK GDPR, I request that you confirm in writing, within one month of receipt of this letter, that my objection has been upheld and the relevant restrictions have been applied to my record.
Yours sincerely,
[Signature]
[Your Printed Name]