outsourcing GP appointments to India: is this legal under DPA?

[Francis Davey]

On 10 December 2010 15:24, Mary Hawking <maryhawking at tigers.demon.co.uk> wrote:
> http://www.pulsetoday.co.uk/story.asp?sectioncode=23&storycode=4128022&c=2
>
> This is a story about NHS Shared Business Services (DH plus Steria) urging
> GP Consortia to make massive savings by outsourcing back-office functions
> and above all appointments to India.
>
> Regardless of the practicalities – and I cannot see this being popular with
> either GPs or patients – would this outsourcing of NHS data be legal under
> DPA? Even if already being done?
>

With care, namely suitable contractual arrangements or binding
corporate rules (where done internally) it can be done. There is an
infelicity in that the law does not properly specify processor to
processor arrangements, but this would likely be controller to
processor.

-- 
Francis Davey