In the last three steps articles we have considered the power given to the Secretary of State under section 60 of the Health and Social Care Act 2001 to make regulations on disclosure of patient information, the role of the Patient Information Advisory Group in scrutinising draft regulations permitting disclosure of patient information and the recent regulations which have been made by the Secretary of State. This steps article considers the implications of Article 8 of the European Convention on Human Rights and the right to privacy.