Its perhaps not surprising that our government organisations adopt the do what I say, not do what I do attitude. In this particular case, I received a very nice letter and leaflet telling me that the NHS are creating electronic Summary Care Records over the next 18 months or so.
Now best practice would indicate that consumers should be specifically asked to opt in for programmes like this. But clearly the designers of the programme have read Nudge. They know that asking for opt in will make it much harder to get people signed up. So the nice leaflet gives you three different ways to opt out, buried at the back of the leaflet and mixed in with the rest of the text. There isn't a clear form with a nice check box and prepaid envelope to fill in.
In this case, I suspect the society good does outweigh the individual privacy concern. My problem is that we are asked, as commercial organisations, to take extraordinary care not to assume the right to contact or sign people up for programmes in an unfair way. New European legislation puts a big onus on organisations to prove they have the right to make contact with individuals and take actions based on opt ins.
Our government agencies seem to believe that none of this applies to them and their programmes.