https://www.whatdotheyknow.com/request/selected_data_on_pace_trial_part#incoming-508208
For the purposes of determining release of personal data under FOIA,
Principle 1 is the most relevant (1). Principle 1 states that personal
data must be fairly and lawfully processed by a data controller (in this
case QMUL). Given that assurances of this sensitive data’s confidentiality
were given as a condition precedent to trial participation, it would not
be within the reasonable expectations of these individuals that the data
would be released in to the public domain. In addition, it is very likely
that the disclosure to members of the public without these data subjects’
further explicit consent would cause great distress, evidently to their
detriment. It is not fair to process personal data in a manner which leads
to adverse consequences, such as revealing that an individual suffers from
a certain health condition.
When these participants consented to taking part in the PACE trial, they
consented that the collection, use and analysis of their sensitive
personal data would be for a specific limited purpose only i.e. for
disclosure only to individuals associated directly with the PACE trial,
for its research analysis in this trial. Not only did the PACE trial
participants not consent explicitly to the further release of their
sensitive medical data beyond the scope of this limited purpose, they were
given assurances of its confidentiality, often as an essential condition
of their voluntary participation in the PACE trial. All participants
signed informed consent to participate based on the understanding that
"information collected about me for the trial, including my personal
details, a copy of this consent form and all of the questionnaires I
complete for the trial, will be held securely by the local trial staff and
at the PACE trial coordinating centre at Queen Mary, University of
London." Furthermore, they signed the consent form on the basis of a
patient information sheet, which included the following: "Will you keep my
details confidential? Yes. All your details and all recordings will be
kept strictly confidential and held in a locked filing cabinet or on a
secure computer. People on our research team will only see your records if
they need to for the research." The patient information sheet also stated:
"The data and recordings we collect will be securely stored for 20 years
after the end of the trial, for your protection and to follow good
clinical practice (GCP). The same applies to other records gathered for
our study, including your medical notes and the database holding the
collected data for this trial."