NHS Bournemouth and Poole's been found to have breached the Data Protection Act - by sending thousands of patients' details to a private firm without permission.

Contact information was passed to Enhanced Care Services so they could invite people, identified as at risk of heart disease, for health checks.

The Trust says it's sorry and welcomes the guidance it's had from the Information Commissioner's Office - but stresses it didn't share 'confidential or medical' data.