The attraction of SARs is that they must be returned within a defined period, which is not the case for GPRs, and they are more cost effective.

However, the insurer then has access to a patient’s entire medical history, rather than just the specific condition that triggered the need for further medical investigation.

The Information Commissioner warned insurers that using rights under the data protection act to access people’s entire medical records is inappropriate and an abuse of that right.

Mr Pappin at Vita said: “In 2016 we should receive clarification from the ICO regarding the SARs debate, however, we should not assume it will be based on what’s best for the people whose records are being accessed, it could instead be an outcome based around a technicality.”