Could I just check something with the list? A patient undergoes treatment at a private hospital, and then subsequently requests that clinical records detailing their treatment are destroyed. Their rationale is this: Patient argues that data was processed under schedule 3 'medical purposes' (and we believe explicit consent, although this has been questioned) Following the treatment, the patient suggests that the medical purpose has now expired, and the hospital no longer has a legal basis to retain the detailed records. Supporting this argument, the patient cites the fact that the treatment was elective, non-emergency and privately funded. Once the treatment has ceased, the patient argues that the relevance of the data to the medical purpose ceases and should thus not be retained beyond the immediate treatment. I would be interested in the views of those involved in the provision of Healthcare, and in particular those who strive to meet the requirements of a 'registered person' in the Care Standards Act and the requirements of the DPA. Duncan Smith iCompli Ltd. ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ All archives of messages are stored permanently and are available to the world wide web community at large at http://www.jiscmail.ac.uk/lists/data-protection.html If you wish to leave this list please send the command leave data-protection to [log in to unmask] All user commands can be found at : - http://www.jiscmail.ac.uk/help/commandref.htm Any queries about sending or receiving message please send to the list owner [log in to unmask] (all commands go to [log in to unmask] not the list please) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^