Your Data Privacy and the Law - GDPR

Beacon Surgery - Your data, Privacy and the Law

How we use your medical records

  • This practice handles medical records according to the laws on data protection and confidentiality; we record telephone calls
  • We share medical records with health professionals who are involved in providing you with care and treatment. This is on a need to know basis and event by event
  • Some of your data is automatically copied to the Shared Care Summary Record
  • We may share some of your data with the local out of hours provider
  • Data about you is used to manage national screening campaigns such as Flu, Cervical Cytology and Diabetes Prevention
  • Data about you, usually de-identified, is used to manage the NHS and make payments
  • We share information when the law requires us to do, for instance when we are inspected or reporting certain illnesses or safeguarding vulnerable people
  • Your data is used to check the quality of care provided by the NHS

General Data Protection Regulation (GDPR)

The General Data Protection Regulation (GDPR) is a new law that determines how your personal data is processed and kept safe, and the legal rights that you have in relation to your own data. 

The regulation applies from 25th May 2018, and will continue to apply after the UK leaves the European Union.

The GDPR sets out the key principles about processing personal data for patients and staff:

  • Data must be processed lawfully, fairly and transparently
  • It must be collected for specific, explicit and legitimate purposes
  • It must be limited to what is necessary for the purposes for which it is processed
  • Information must be accurate and kept up to date
  • Data must be held securely
  • It can only be retained for as long as is necessary for the reasons it was collected

General Practice Data for Planning and Research:

GP Practice Privacy Notice - NHS Digial

General Practice Data for Planning and Research:

NHS Digital Transparency Notice - NHS Digital

Opt out on line - National Data opt-out


GDPR Policy including Subject Access Requests.pdf