GDPR and Confidentiality

General Data Protection Regulation (GDPR) 2018

New GDPR regulations from Friday 25th May 2018

To comply with the new GDPR Regulations from Friday 25th May we have reviewed and updated our Privacy Statement and policy for handling data. Copies of our Privacy Statement are available from our Reception team and also here Privacy Statement.

You are entitled to access your clinical records held by the practice. This should be done in writing stating exactly what information you require. Subject Access Request forms are available from our Reception team or here -Access to Records form  Access to records information leaflet

Access to Information

Personal Health Information is information that identifies you such as name, address, date of birth and postcode. This can be linked to information about care and treatment you have received, information about your health and lifestyle and results of tests you may have had.

Your Personal Health Information is held on paper and on computer within this practice. If you are referred to a hospital they will also keep records for you in notes and on computer.

Your Personal Health Information is kept confidential as all NHS staff have a legal duty to keep information about you confidential. Your Personal Health Information is stored securely and only relevant information is shared within the NHS or outside organisations. We will not give information about you to organisations such as benefits agencies or employers without your written permission.

Your Personal Health Information is used to help NHS staff to provide the care and treatment you need. Information will be shared with other NHS staff involved in your care. Your information may be shared if:

  • You are referred to hospital
  • You are moved from hospital to hospital
  • You need support at home from District Nurses etc NHS24 refers you to a GP or another part of the NHS

Confidentiality of Records

Practices undergo regular visits by external assessors, whose purpose is to verify the process of the practices quality of care to the patient; therefore they may need to view records of a random number of individual patients. The visiting team adhere to a strict code of confidentiality.

Reception and administration staff require access to your medical records in order to do their jobs. These members of staff are bound by the same rules of confidentiality as the medical staff.

Your rights

  • You have a right to know how your personal health information is used. You can ask a member of NHS staff providing your care.
  • You have a right to see your health records and, if you choose, get a copy.
  • If you don’t want your health information to be used or shared, tell a member of NHS staff providing your care.
  • You are not able to object when information is legitimately shared for safeguarding reasons.
  • If you are not happy about how your health information has been used or protected, please contact a member of the practice team so that we can help.
  • You have the right to access your medical record and have any errors or mistakes corrected. Please speak to a member of staff.

Freedom of Information (Scotland) Act 2002

This act came into force on 1st January 2005 and enables any person requesting information from a public body to receive that information, subject to certain exemptions. This is to encourage public authorities, (GP Practices) to be more open and accountable and organise their information in an efficient and accessible way.

This excludes personal data.



NHS ScotlandThis site is brought to you by My Surgery Website