Extremely concerning data breach
Extremely concerning data breach and poor handling of the situation
I paid £810 to GP Matters for a China visa medical and was extremely disappointed by the way my personal data was handled.
After my appointment, GP Matters sent me a medical report belonging to another patient. This was not simply a minor administrative error; the document contained highly sensitive personal information, including their medical information, address and passport details. I was given access to information that I should never have received.
What concerns me even more is the obvious question this raises about the security of my own information and whether my medical report could have been disclosed to somebody else. While GP Matters have stated that my information was not disclosed to another individual, I have no way of independently verifying this.
I contacted the company expecting the seriousness of the situation to be recognised. Although they apologised and subsequently provided my correct report, they refused to offer any refund, stating that the medical examination had been completed. I find this response extremely disappointing given that the service involved a serious breach of confidentiality and the mishandling of highly sensitive personal data.
I was also instructed to securely delete the report belonging to the other patient, which I of course did. However, the fact that this information was sent to me in the first place has seriously undermined my confidence in the company’s handling of personal and medical information.
For a company dealing with medical examinations and visa applications, I would expect an exceptionally high standard of data protection and confidentiality. Unfortunately, my experience has left me questioning whether that standard is being met.
I would strongly encourage anyone considering using GP Matters to think carefully about how comfortable they are entrusting such sensitive personal information to this company.








