As data controllers, GPs have fair processing responsibilities under the Data Protection Act and GDPR law 2018. This means ensuring that your personal confidential data (PCD) is handled in ways that are safe, transparent and what you would reasonably expect. Please find documents and links below.
Identifiable information about you will be shared with others in the following circumstances:
- To provide further medical treatment for you i.e. hospital referrals
- To help you get other services e.g. from the social work department, this will require your consent
- When we have a duty to others i.e. in child protection cases
Reception and administration staff require access to your medical records in order to do their jobs effectively. These members of staff are bound by the same confidentiality rules as the medical staff.
Please read our practice Data Protection Policy and Practice Privacy Notice below for more detailed information about how we keep your information safe. Please contact the Practice Manager at the surgery if you would like to discuss this policy in more detail or would like to receive copies of the appendices mentioned in our policy.
GDPR and My GP Patient Record – FAQs for patients
Important Notice
The current NHS Digital (NHSD) extract of GP data for Research purposes (known as the GPDPR) has been delayed due to NHSD wishing to review the way in which this data will be collected, to conduct more public involvement and information about the plans and change the way in which patients can opt out of the extract of their GP data.
Currently the only way to opt out is to complete a Type 1 opt out form and return this to the practice by the 1st September. However, this extract will not be taken until the NHSD have changed the way it will take the data and respect the patient’s choice for using their data. NHSD are introducing the following changes to the opt out process which will mean that patients will be able to change their opt-out status at any time:
- Patients do not need to register a Type 1 opt-out by 1st September to ensure their GP data will not be uploaded.
- NHS Digital will create the technical means to allow GP data that has previously been uploaded to the system via the GPDPR collection to be deleted when someone registers a Type 1 opt-out.
- The plan to retire Type 1 opt-outs will be deferred for at least 12 months while we get the new arrangements up and running and will not be implemented without consultation with the RCGP, the BMA and the National Data Guardian.
This means that you can opt out at any time in the future and NHSD will delete data that they already have taken for research purposes, the deadline has been delayed until a new system of opt out is developed. Hopefully, this will be a simple centralised approach via the NHS app or NHS website to avoid paper form and administration work for your GP.
We will update you when we know more about the NHSD plans to change how you can control who has access to your data.
Patients can view medication, allergies and vaccination status through our online Patient Access service or may submit a Subject Access Request for more detailed information; please ask our reception staff for more details.