“It has always been accepted that information about a person's health and treatment for ill-health is both private and confidential. This stems not only from the confidentiality of the doctor-patient relationship but from the nature of the information itself. As the European Court of Human Rights put it in Z v Finland 25 EHRR 371 , 405-406, para 95: "Respecting the confidentiality of health data is a vital principle in the legal systems of all the Contracting Parties to the Convention. It is crucial not only to respect the sense of privacy of a patient but also to preserve his or her confidence in the medical profession and in the health services in general. Without such protection, those in need of medical assistance may be deterred from revealing such information of a personal and intimate nature as may be necessary in order to receive appropriate treatment and, even, from seeking such assistance, thereby endangering their own health and, in the case of transmissible diseases, that of the community."”
“If a doctor who treated a celebrity suffering from AIDS during his final illness were subsequently to sell to a newspaper intimate details which had been revealed to him by his former patient in confidence, and in the expectation that the doctor would continue to respect that confidence after the patient’s death, it is likely that a court would regard the obligation of confidence as subsisting after his death; and would grant to the personal representatives (depending on the circumstances) an injunction and /or an account of profits as the only effective means of enforcing the obligation. In such a case it could not be said that the deceased would suffer detriment from the publication, but it would seem contrary to justice that the doctor should make a windfall from his breach of his obligation. Privilege may survive in favour of a deceased’s estate and it is hard to see why a court should not recognise the survival of an obligation of confidentiality. The period for which any duty of confidentiality could reasonably be expected to continue would depend on many circumstances, including the nature of the relationship, the nature of the information and any harm which might be caused to the deceased’s estate or, possibly, those whom the deceased would reasonably have wished to protect, as well as any grounds for justifying disclosure.”
“The ethical obligation recognised in the Declaration of Geneva (“I will respect the secrets which are confided in me, even after the patient has died”) is repeated in Confidentiality: Protecting and Providing Information This is guidance given by the General Medical Council. at para.30: “You still have an obligation to keep personal information confidential after a patient dies. The extent to which confidential information may be disclosed after a patient’s death will depend on the circumstances…”
“Equity may impose a duty of confidentiality towards another after the death of the original confider. The question is not one of property (whether a cause of action owned by the deceased has been assigned) but of conscience”
“The equitable jurisdiction in cases of breach of confidence is ancient; confidence is the cousin of trust. The Statute of Uses, 1535, is framed in terms of “use, confidence or trust”; and a couplet, attributed to Sir Thomas More, Lord Chancellor avers that ‘Three things are to be held in Conscience; Fraud, Accident and things of Confidence’ ”
“The Inquiry has been contacted by a number of families from whose deceased relatives organs were taken at post-mortem examination and analysed at UK nuclear facilities. In those cases appropriate consent can be taken from the next of kin before any request is made of any individual or organisation for disclosure of confidential patient information. Clearly if consent is not granted then disclosure cannot be pursued. In a number of other cases however, the Inquiry is aware that organs have been taken at post-mortem examination but the relevant families have not contacted the Inquiry. It would not be appropriate for the Inquiry to contact those families, even if their contact details could be ascertained, because they may not wish to know whether their deceased relative was involved in this way and proactive contact by the Inquiry could cause untold distress. Indeed, I am aware of media coverage following the announcement that the Inquiry had been established which made it clear that at least one named individual did not want to be told of any potential involvement in such matters. Access to confidential patient information in those cases is however, required to enable the Inquiry to observe its Terms of Reference. There is also a third group of cases where it is not known at this stage whether organs were taken at post-mortem examination and where that issue can only be resolved by scrutiny of confidential patient information. Again, it would be inappropriate to contact such families when it is unknown whether they may or may not be directly involved.”
“The issue of confidentiality of patient information and the consent of patents to treatment are central to the relationship between clinicians and patients within the NHS. The concept of consent has been developed in common law and is comprehensively summarised in the GMC guidelines published in July 2000. The NHS routinely collects and processes patient information based on the theory of implied consent by the patients to such processing. Processing of patient data is now covered by theData Protection Act 1998 . Additional provisions in this Act were prompted by the commercial activities of company called Source Informatics, which was attempting to obtain information on GP prescribing practises in order to create a data base for marketing purposes by pharmaceutical companies. Its activities resulted in a judicial review… which prevented the collection of such data without the express consent of patients. This decision clearly had a knock on effect to much of the epidemiological activity of the NHS. The government wished to protect the NHS from the kind of commercial pressure that Source Informatics would have encouraged. At the same time, the government did not wish to disrupt the free flow of information which is necessary for planning services, public health and research purposes and for the maintenance of services of benefit to individual patients such as cancer registries. The Data Protection Commissioner, established under the Data Protection Act, had also expressed concern about the manner in which patient information was dealt with in the NHS. As a result, the Act has created a system for regulating the distribution of patient information and created a Patient Information Advisory Group to conduct annual reviews of the way in which the system is working.”