Analysis and Comment

Epidemiology

Consent, confidentiality, and the Data Protection Act

BMJ 2006; 332 doi: 10.1136/bmj.332.7534.165 (Published 19 January 2006)
Cite this as: BMJ 2006;332:165

Access to the full text of this article requires a subscription or payment. Please log in or subscribe below.

  1. Amy Iversen (A.Iversen@iop.kcl.ac.uk), clinical lecturer,
  2. Kathleen Liddell, lecturer in law,
  3. Nicola Fear, senior lecturer,
  4. Matthew Hotopf, professor of general hospital psychiatry,
  5. Simon Wessely, professor of epidemiological and liaison psychiatry
  1. King's Centre for Military Health Research, King's College London, Institute of Psychiatry, London
  2. Faculty of Law, University of Cambridge and Cambridge Genetics Knowledge Park, Cambridge
  3. Academic Centre for Defence Mental Health, King's College London
  1. Correspondence to: A Iversen, Department of Psychological Medicine, Weston Education Centre, London SE5 9RJ
  • Accepted 23 November 2005

Overly strict interpretation of the law is hampering epidemiological research. Here, one research team shows why regulators and organisations holding data should adjust their approach

The United Kingdom's Data Protection Act 1998 has had a substantial impact on health research, although that was not its primary purpose. It is a wide ranging piece of legislation that safeguards individuals' fundamental right to privacy when personal data are processed.1 The act supplements the common law of confidentiality developed through judicial decisions. The medical and academic community is concerned that current interpretation of the law is changing the face of medical research.2 We use our experiences in studying UK military personnel to present empirical data in support of a more balanced interpretation of the act.

Data Protection Act and the law of confidentiality

Although some medical researchers blame the law for increasing the bureaucratic barriers to research,3 others, including the Information Commissioner and the Lord Chancellor, dispute this.4 The Lord Chancellor stated in the House of Lords:

At present the 1998 Act allows medical data to be used for any medical research purpose without the need for consent of individuals. It is not necessary to define the term “medical research” nor to make specific provision for it to include the monitoring of public health, which for these purposes is regarded as medical research.4

Current difficulties seem to stem from interpretations of the law that fail to appreciate the methods of epidemiology and the relatively minor privacy interferences that most epidemiological research entails.

Currently most codes of conduct recommend informed consent for any medical research, whether it involves direct contact with participants or access to their records. But as a matter of law, this is not an absolute rule. Both the law of confidentiality and the Data Protection Act envisage circumstances in which personal health information may …

Access to the full text of this article requires a subscription or payment

Subscribe

Article access

Article access for 1 day

Purchase this article for £20 $30 €32*

The PDF version can be downloaded as your personal record

* Prices do not include VAT

Rapid responses

THIS WEEK'S POLL

BMJ most popular