How GDPR affects sick lists in catholic churches in Glasgow

The Scottish Catholic Observer reports how the General Data Protection Regulation which comes into force this month will impact on the churches in the city.

Scotland’s largest diocese has told its parishes that they need permission from an ill person before they can publish their name on a list of prayers for the sick.

A spokesman told the newspaper: "The advice we have been given at the moment is that a person’s name should only appear in a parish sick list when they have given prior written permission.

"Obviously in the case where someone has been taken ill suddenly and without warning, such prior written permission is not a realistic option. This would appear to be an unintended consequence of a much wider law which affects all organisations which hold data on individuals."

The spokesman added: “It may be that as time passes a clearer picture will emerge about such issues, but for now we have been advised that it is best to be careful to avoid unintended breaches.”

City parishes publish regular lists of the sick and ask for prayers, and do not routinely seek permission from the ill person because they are not well enough to do so.

Announcing the move in their parish bulletin, one parish, Holy Family and St Ninian in Kirkintilloch, wrote: “Parishes have been advised that names of the sick can no longer be published in the bulletin without the direct permission of the sick person to the parish priest. Names cannot be put on the sick list via a third party. All names on the present sick list will be removed next week. GDPR does not apply to the deceased.”

In St Aloysius Church in Glasgow, the bulletin informed parishioners: “We will… only publish names of those who ask personally for their name to be added to the prayer list.”

The Information Commissioner’s Office were contacted for a response and said they were aware of the problem, but were not immediately able to comment.