Confidentiality & GDPR

What is GDPR?

GDPR stands for General Data Protection Regulations and is a piece of legislation that superseded the Data Protection Act 1998 on Friday 25th May 2018. It not only applies to the UK and EU; it covers anywhere in the world in which data about EU citizens is processed.

The GDPR is similar to the Data Protection Act (DPA) 1998 (which the practice already complies with), but strengthens many of the DPA’s principles. The main changes are:

  • Practices must comply with subject access requests.
  • Where we need your consent to process data, this consent must be freely given, specific, informed and unambiguous.
  • There are new, special protections for patient data.
  • The Information Commissioner’s Office must be notified within 72 hours of a data breach.
  • Higher fines for data breaches – up to 20 million euros.

Data Protection

The practice complies with data protection and access to medical records legislation. Identifiable information about you will be shared with others in the following circumstances:

  • To provide further medical treatment for you e.g. from district nurses and hospital services.
  • To help you get other services e.g. from the social work department. This requires your consent.
  • When we have a duty to others e.g. in child protection cases anonymised patient information will also be used at local and national level to help the Health Board and Government plan services e.g. for diabetic care.

If you do not wish anonymous information about you to be used in such a way, please let us know.

Reception and administration staff require access to your medical records in order to do their jobs. These members of staff are bound by the same rules of confidentiality as the medical staff.

confidentiality and medical records

 

Freedom of Information

Information about the General Practioners and the practice required for disclosure under this act can be made available to the public. All requests for such information should be made to the practice manager.

 

Access To Records

In accordance with the Data Protection Act 1998 and Access to Health Records Act, patients may request to see their medical records. Such requests should be made through the practice manager and may be subject to an administration charge. No information will be released without the patient consent unless we are legally obliged to do so.

 

Equal Rights

We ensure all patients / visitors are treated with dignity and respect and do not discriminate against age, sex, marital status, pregnancy, race, ethnicity, disability, sexual orientation, religion or belief.

Documents

Fair Processing Notice May 2018

You can exercise your rights at anytime by completing our Subject Access Request (SAR) form

Subject Access Request (SAR) Form

INDEX - Policies

MAIN INDEX