outsourcing GP appointments to India: is this legal under DPA?

Francis Davey fjmd1a at gmail.com
Sat Dec 11 10:10:38 GMT 2010

On 10 December 2010 15:24, Mary Hawking <maryhawking at tigers.demon.co.uk> wrote:
> http://www.pulsetoday.co.uk/story.asp?sectioncode=23&storycode=4128022&c=2
> This is a story about NHS Shared Business Services (DH plus Steria) urging
> GP Consortia to make massive savings by outsourcing back-office functions
> and above all appointments to India.
> Regardless of the practicalities – and I cannot see this being popular with
> either GPs or patients – would this outsourcing of NHS data be legal under
> DPA? Even if already being done?

With care, namely suitable contractual arrangements or binding
corporate rules (where done internally) it can be done. There is an
infelicity in that the law does not properly specify processor to
processor arrangements, but this would likely be controller to

Francis Davey

More information about the ukcrypto mailing list