GENERAL DATA PROTECTION REGULATIONS
We have a legal obligation under the General Data Protection Regulations (The Data Protection Act 2018) to ensure that all information held or processed about you complies with the principles of these Regulations. Sometimes the law requires us to pass on information for example, in the event of sudden death.
We only ever pass on information about you if people have a bona fide authorised need for it and it is in your best interest that information is disclosed.
Most data we disclose is anonymised i.e. your personal details are not disclosed (eg for medical research purposes) If we do need to disclose information about you to other parties it is generally with your written consent (e.g. you are seeking life insurance cover).
Anyone who receives personal or similar information from us is also under a legal duty to keep it confidential.
View our Privacy Notice explaning how we use your information to provide healthcare by clicking here.
From the 1st of February 2023, all patients will have the opportunity to view all enteries into their full medical records from that date onwards (Patients who register with the Practice following that date will be able to view their records from the date of registration).
To view your medical records you will need to have registered for access to Online Services at the Practice, which can be done by collecting a form at reception, photo ID will be required.
The NHS app can also be used to view your medical records by linking it to your Online Services account. You will require a passphrase and account ID number, which can be given to you on request at reception, photo ID will be required.
If you have already registered on Online Services, you should automatically have access to your records from the 1st February 2023 onward. If you do not please contact the Practice and we will look into why not.
If you wish to view your medical records prior to Feburary 1st 2023 you will need to make a Subject Access Request. Please see below for details on how to request this.
Summary Care Records (SCR) are an electronic record of important patient information, created from GP medical records. They can be seen and used by authorised staff in other areas of the health and care system involved in the patient's direct care.
When registered with a Practice in England your SCR is created automatically unless you opt out.
The information included in a SCR is medications, allergies and adverse reactions. This will allow authorised staff in other areas of the health and sare system to provide care and make decisions about your treatment if a situation arose where you were unable to provide them with that information yourself.
You can also request to have an Enhanced SCR which will provide the authorised staff with additional information which includes: your significant medical history (past and present), reasons for your medication, information about the management of any long term conditions and your immunisation history. If you wish to have this Enhanced SCR please speak to reception.
If you require a copy of part or all of your medical records, we require this request in writing. We ask that you provide us with as much information as possible with regards what parts of your records you require, to help us provide you with the information you need correctly and as efficently as possibly. For example, please specify if you require all of your records or just a certain time period.
For certain requests you may only require a summary of your medical history (e.g. dates of diagnosis and medication history) rather than every consultation and hospital letter. If you make us aware of this at the time of your request this will allow us to process your request more efficently.
On collection of your medical records, you will need to bring photo ID to confirm identity.
iGPR
We use a processor, iGPR Technologies Limited (“iGPR”), to assist us with responding to report requests relating to your patient data, such as subject access requests that you submit to us (or that someone acting on your behalf submits to us) and report requests that insurers submit to us under the Access to Medical Records Act 1988 in relation to a life insurance policy that you hold or that you are
applying for.
iGPR manages the reporting process for us by reviewing and responding to requests in accordance with our instructions and all applicable laws, including UK data protection laws.
The instructions we issue to iGPR include general instructions on responding to requests and specific instructions on issues that will require further consultation with the GP responsible for your care.
The NHS uses information about patients (patient data) to research, plan and improve the services we offer and the treatment and care patients receive.
The data is from GP surgeries, hospitals and other healthcare providers and the organisation that collects the data is called NHS Digital.
To help improve services, NHS Digital shares this data with researchers from organisations such as universities or hospitals. This type of data-sharing has been happening for many years.
All data that is collected and shared is protected by strict rules around privacy, confidentiality and security. The data is not shared with insurance or marketing companies.
You can opt out from your GP data being used for the above by completing this form and handing it into reception. However, NHS digital will still be able to collect and share data from other healthcare providers, such as hospitals. To opt out of this data being collected please visit the 'Make your choice' NHS wesbite and opt out there.
