GDPR (General Data Protection Regulation) – Your Information, Your Rights
Many organisations in the NHS such as, hospitals, GPs, Dentists, Opticians, and Community Pharmacists provide healthcare services.
The people providing these services aim to provide you with the highest quality care. To do this they must keep records about your healthcare and any treatment they provide you.
They take their responsibility to look after your information very seriously. NHS Wales staff have a legal duty to keep your information confidential, accurate and secure at all times, and are trained to handle your information correctly and to protect your privacy.
There may be a need to share your information with people and organisations within the NHS who are responsible for providing you with treatment and care.
For example, your Dentist could share your information with a doctor in a hospital, so that they can provide you with further treatment or a hospital Pharmacist may access your GP record in order to review your current medication. This is to ensure patients receive the most appropriate, up to date and cost effective treatments.
Sometimes members of a care team, which may include people from organisations such as health, social care, or other care organisations, may need to share your information within the team to provide your care.
There may be occasions where we are required to use or share your information to help us plan our services for patients and check how well we are doing when we provide you with treatment and care.
We will only share the minimum information needed at that time and only where the law allows us to share it. We will never sell your personal information.
GDPR – Can I access my records?
The Data Protection Act 1998 (DPA) and the General Data Protection Regulation (GDPR – replaces the DPA from 25 May 2018) gives every living person, or authorised representative, the right to apply for access to their health records. You have a right to ask for a copy of all records held about you. You can make a request in writing and we will respond within a month.
- You will need to give adequate information (for example full name, address, date of birth NHS number etc) and will be required to provide ID before any information is released to you.
- If you think that anything in your record is factually inaccurate or incorrect, or would like any further detail about your information rights under the General Data Protection Regulation, please inform us.
Leaflets are available which give you more details about how we manage your information and the rights you have in respect of the personal information that we hold about you. Please ask a member of our Reception staff for a copy.
If you have any concerns about the way your information is used, you may wish to discuss these with the healthcare professional responsible for your care, or you may contact the Practice Manager by ringing (01437) 720303.