Confidentiality Guidelines : Caldicott Report: key principles
Every proposed use or transfer of patient identifiable information within or from an organisation should be clearly defined and scrutinised. With continuing uses regularly reviewed, by an appropriate guardian.