It’s been about a year since the Notifiable Data Breach scheme came into effect, legally obliging GP clinics to report unauthorised disclosures of patient information that created a significant risk of harm.

Initially there were fears the requirement would bury practices under a paperwork mountain.