I have been swapping emails with the Chairman and he has accepted that the Trust doesn't have sufficient policies in place for handling "private information" for patients with a GRC,  but he and the chief executive have undertaken to do something about it.   Since so many UK NHS patients have surgery with them (Charing Cross Hospital),  it is about time but at least it should hopefully get fixed now.

Sat in my Inbox is a revised data handling policy for another NHS trust I have been working on as well.  I will try to post up something about that one in the next few weeks.

PS I don't know if it is news but apparently the Tavistock are merging with Charing Cross GIC.