Confidentiality and medical records

The practice complies with data protection and access to medical records legislation. Identifiable information about you will be shared with others in the following circumstances:

  • To provide further medical treatment for you e.g. from district nurses and hospital services.
  • To help you get other services e.g. from the social work department. This requires your consent.
  • When we have a duty to others e.g. in child protection cases anonymised patient information will also be used at local and national level to help plan services e.g. for diabetic care.

If you do not wish anonymous information about you to be used in such a way, please let us know. 

Reception and administration staff require access to your medical records in order to do their jobs. These members of staff are bound by the same rules of confidentiality as the medical staff.  For more details of the information we hold and share and how you can amend this please see our Privacy Notice below.

In accordance with the Data Protection Act 1998 and Access to Health Records Act, patients may request to see their medical records. Such requests should be made in writing – please see form below. No information will be released without the patient consent unless we are legally obliged to do so.   

Please see this short video for further information on “How the NHS uses your patient data from GP Practices”.

NHS Digital will not collect patients’ names or addresses. Any other data that could directly identify patients (such as NHS Number, date of birth, full postcode) is replaced with unique codes which are produced by de-identification software before the data is shared with NHS Digital.

This process is called pseudonymisation and means that patients will not be identified directly in the data. NHS Digital will be able to use the software to convert the unique codes back to data that could directly identify patients in certain circumstances, and where there is a valid legal reason.

We will collect structured and coded data from patient medical records.

NHS Digital will collect:

  • data about diagnoses, symptoms, observations, test results, medications, allergies, immunisations, referrals, recalls and appointments, including information about physical, mental and sexual health.
  • data on sex, ethnicity, and sexual orientation.
  • data about staff who have treated patients.

NHS Digital does not collect:

  • name and address (except for postcode, protected in a unique coded form).
  • written notes (free text), such as the details of conversations with doctors and nurses.
  • images, letters, and documents. 
  • coded data that is not needed due to its age – for example medication, referral and appointment data that is over 10 years old.
  • coded data that GPs are not permitted to share by law – for example certain codes about IVF treatment, and certain information about gender re-assignment.