LONDON – A report from the UK's leading medical ethics body recommends the introduction of criminal penalties, including imprisonment, for the misuse of health data and said those who collect data should have a duty to track how it is used and tell data subjects of any breaches of security.