Must HPP 1 be complied with where information is collected from an unsolicited source?
HPP 1 applies where an organisation collects health information, whether solicited or not. However, where the information is unsolicited there may be implied consent for the organisation to have it, otherwise the individual would not have supplied the information. If a third party supplied the information the organisation needs to comply with HPP 1.5 about making the individual aware that the information has been collected.
