The NHS just keeps on ignoring the DH's rules...
Anyone who thinks their NHS data will be secure is living in cloud cuckoo land. The NHS blatantly ignores the Department of Health's rules whenever it suits them.
The DH banned the use of expensive 084 telephone numbers by the NHS way back in 2009.
http://news.bbc.co.uk/1/hi/health/8251290.stm http://goo.gl/ps05rw
There was widespread non-compliance, so the DH had to issue clarifications in February 2012.
https://www.gov.uk/government/publications/the-use-of-084-numbers-in-the-nhs-further-guidance
However, four years after the original ban many GPs' surgeries and NHS hospitals and are still using these numbers on their websites and in appointment letters to patients. Calling them now costs up to 41p/minute.
http://www.mtw.nhs.uk/your-visit/getting-to-maidstone-hospital.asp
https://www.nhs.uk/Services/hospitals/Services/Service/DefaultView.aspx?id=91892
Last August, the ASA upheld a complaint against NHS Choices. They were told to include clear pricing information about the cost of calling the rip-off numbers the NHS isn't allowed to use.
http://asa.org.uk/Rulings/Adjudications/2013/8/NHS-Choices/SHP_ADJ_232957.aspx
All that's happened is that NHS Choices now make the false claim that the Call Set Up fee is zero pence, when it's really 15p!
http://goo.gl/8sGvy7
If the DH can't even obtain compliance when the NHS's defiance of the rules is so publicly visible, there's no way that they'll be able to ensure that the NHS will keep patients' personal data secure, especially when the public can't check what's really going on.