ICO (UK) · 16 December 2025
Staines Health Group
FineNo fineViolation found
- Regulator
- ICO (UK)
- Decided
- 16 December 2025
- Country
- United Kingdom
- Sector
- Not given
- Regulator’s reference
- Staines Health Group
- Fino case number
- 2025/GB/018
What happened
The DPA reprimanded a clinic for sharing 23 years' worth of medical records based on a patient’s request to transmit the records of the last 5 years to their insurer. Furthermore, the DPA found that the clinic failed to ensure security of processing and to report a data breach in time.
Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
The source doesn’t list which GDPR articles were involved.
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2025/GB/018.