Unless they are a certain GP supplier, who thought they could ignore the instructions from their data controllers. Took several years but they have seen the light.
Simon: It would seem you might not be registered with CQC, you don't come up on their site when searched for.
If you're still run by Anglian Community Enterprise (ACE) [http://www.acecic.co.uk/Page.aspx?ID=416], then their CQC registration page doesn't seem to include the GP practices:
You might want to check you are registered with CQC...