Which statement about data protection and information governance is false?

• A. Implied consent is when a patient provides a statement in writing for their personal information to be used
• B. Consent must be explicit in written form for sensitive data
• C. Personally identifiable information must be stored securely
• D. Data protection laws apply to healthcare data

Answer: (A)

Understanding consent types and when explicit written consent is needed for sensitive data.

Implied consent is not a written statement. It’s consent that is inferred from a person’s actions or the context of care, such as treating a patient or continuing with a service, rather than a formal written agreement. For processing sensitive data in healthcare, explicit consent is required, and this is typically obtained in a clear, documented form. So the statement that implied consent is a written statement for personal information is inaccurate.

The other statements align with proper information governance: personally identifiable information should be stored securely, and data protection laws apply to healthcare data.