Fair Processing

Fair Processing and Privacy Notice

How we use your information

The health care professionals, who provide you with your care, create and maintain electronic and/or paper records about your health and the treatment you have received. This helps them to provide you with the best possible healthcare.

Every member of staff who works for an NHS organisation has a legal obligation to keep information about you confidential. Anyone who receives information from an NHS organisation has a legal duty to keep it confidential.

Information held about you may be used for research purposes or to help improve the level of care within the NHS. Strict measures are taken to ensure that this information does not contain details that could identify the patient.

We maintain our duty of confidentiality at all times, and will only ever pass your information onto others involved in your care e.g. referral to a consultant. We will not disclose your information to any third party without your permission unless there are exceptional circumstances i.e. life or death situations, or where the law requires information to be passed on.

We are committed to protecting your privacy and will only use information collected lawfully in accordance with:

  • The Data Protection Act 2018 and General Data Protection Regulation (GDPR) (EU) 2016/679 the ethical codes of conduct of all health care professionals, require that medical data is treated confidentially at all times.
  • Human Rights Act 1998
  • Common Law Duty of Confidentiality
  • Health and Social Care Act 2012
  • NHS Codes of Confidentiality, Information Security and Records Management
  • Information: To Share or Not to Share Review

Information will only be accessed with your permission and while you are receiving direct treatment by a health care professional.

What information will be made available?

  • Name, address, NHS Number and contact number
  • Medications
  • Test results and investigations
  • Correspondence
  • Clinical history
  • Emergency department treatment
  • Hospital admissions
  • Health and Care plans
  • Mental Health alerts and diagnoses

Who are our partner organisations?

We may also have to share your information, subject to strict agreements on how it will be used, with the following organisations:

  • NHS Trusts / Foundation Trusts
  • GPs
  • Independent Contractors such as dentists, opticians, pharmacists
  • Private Sector Providers
  • Ambulance Trust
  • Social Care Services
  • Local Authorities
  • Education Services
  • Fire and Rescue Services
  • Police and Judicial Services
  • Other ‘data processors’

Access to personal information

You have the right under the Data Protection Act 2018 to request access to view or to obtain copies of what information the surgery holds about you and to have it amended should it be inaccurate. In order to request this, you need to do the following:

Your request must be in writing to the GP – for information from the hospital, you should write direct to them

There may be a charge to have a printed copy of your health record [please see section on Fees under Clinics & Services / Non-NHS Services]

We are required to respond to you within 40 days

You will be required to provide information for us to confirm your identification e.g. name, date of birth, address

Change of Details

It is important that you tell the person treating you if any of your personal details have changed, such as your name or address. This helps with the provision of care should you be referred for further treatment.

You have a responsibility to inform us of any changes so our records are accurate and up to date.

Objections and Complaints

For further information, please see the section on Complaints

Call 111 when you need medical help fast but it’s not a 999 emergencyNHS ChoicesThis site is brought to you by My Surgery Website