- Enforcing jurisdiction
- United Kingdom · Geography does not establish applicable law.
- Confirmed applicable legislation
- No confirmed legal basis recorded.
- Privacy topics
NHS Blood and Transplant – Reprimand (United Kingdom, 2023)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
NHS Blood and Transplant received a reprimand for accidentally releasing untested code into a live system used for matching transplant patients with organ donors. This mistake could have serious implications for patient safety and trust. It serves as a reminder of the importance of rigorous testing before launching new systems.
What happened
NHS Blood and Transplant mistakenly released untested development code into a live system in August 2019.
Who was affected
Patients on the transplant list who rely on accurate matching with organ donations.
What the authority found
The Information Commissioner's Office issued a reprimand under GDPR for the unintentional release of untested code.
Why this matters
This incident emphasizes the need for thorough testing of software before it goes live, especially in healthcare, where mistakes can have serious consequences.
Source checks
Linked-source text retrieved.
Automated check recorded — 16 October 2026.
Processing notes: articles corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Commissioner has decided to issue NHSBT with a reprimand in accordance with Article 58 of the GDPR, after they inadvertently released untested development code into a live system for matching transplant list patients with donated organs in August 2019.
Outcome
Reprimand
A formal reprimand: the DPA found a violation and issued a formal censure.
Related Enforcement Actions (0)
No other enforcement actions found for NHS Blood and Transplant in UK
This is the only recorded action for this entity in this jurisdiction.
Details
Decision Date
3 March 2023
Authority
Information Commissioner's Office
About this data
Cite as: Cookie Fines. NHS Blood and Transplant - United Kingdom (2023). Retrieved from cookiefines.eu
Last updated: