What is GDPR?

• GDPR stands for the General Data Protection Regulation. Together with UK data protection law, it sets rules for how organisations collect, use, store and share personal information.
• It means we must use your information fairly, lawfully, securely and only for clear purposes.

What is patient data? 

• Patient data is information that identifies you or relates to your health and care.
• This may include your name, date of birth, contact details, NHS number, appointments, test results, diagnoses, medication and care notes.

How do we use it? 

• We use your data to provide safe care, manage appointments and prescriptions, make referrals, communicate with other services involved in your care, and run and improve Practice services.
• We only use or share what is necessary. Access is limited to authorised staff who have a legitimate work-related reason.

What is consent?

• Consent means giving a clear, informed and voluntary agreement to something.
• For your care, we will explain what is proposed so you can decide. You can ask questions and may change your mind.

Your Information Rights

You can ask for a copy of your health record, ask us to correct inaccurate information, ask how and why your information has been used or shared, and raise a concern about how it is handled.

Our Privacy Notice and this information can be provided in large print, another language or another accessible format.

Who Oversees Information Governance at Our Practice?

Practice IG Lead

Dr Sam Smith - GP Partner: Supports good information-governance practice and helps ensure patient information is handled safely and lawfully.

Caldicott Guardian

Jessica Thompson - Practice Manager: Provides independent advice on protecting confidentiality and using patient information

Further Information

• Read our full privacy notice