“GP practices could face prosecution under the Data Protection Act if they do not take steps to inform patients that data will be taken from their records and used by the NHS and private companies from this autumn.”
The Independent, 6th August 2013
Source: www.independent.co.uk