Under the Data Protection Act 1998, you have a right to know who holds personal information about you. This person or organisation is called the data controller. In the NHS, the data controller is usually your local NHS board and your GP surgery. The NHS must keep your personal health information confidential. It is your right.
Your doctor and the team of health professionals caring for you keep records about your health and any treatment or care you receive from the National Health Service (NHS). This information will either be written down (manual records), or held on computer (electronic records). These records are then used to guide and manage the care you receive.
You may also be receiving care from organisations outside the NHS (like social services). If so we may need to share some information about you so that everyone involved in your care can work together for your benefit. Whenever this is necessary, your information will be handled in the strictest of confidence and will be subject to the principles of confidentiality.
We will require written, signed & dated consent from the patient for enquiries or requests made by representives of patient to this practice.