Question

A GP practice is conducting a clinical audit on hypertension management. They review anonymised data of all patients with high BP over the past year without seeking individual patient consent. Under GDPR, is this permissible?

Accepted Answer

Yes, it is permissible for audit with anonymised data

Answer

No, explicit consent is required from each patient

Answer

Yes, but only if patients are informed verbally

Answer

No, the data must be destroyed immediately

Answer

Yes, only if the practice obtains ethical committee approval

Practice question

A GP practice is conducting a clinical audit on hypertension management. They review anonymised data of all patients with high BP over the past year without seeking individual patient consent. Under GDPR, is this permissible?