General Data Protection Regulation (GDPR)
The GDPR is the EU’s General Data Protection Regulation – effective from 25th May 2018 – bringing a number of changes affecting how organisations store data. The GDPR and Data Protection Act 2018 replace the provisions of the Data Protection Act 1998 and continue in place after the UK exit from the EU. The GDPR is designed to strengthen and unify data protection for all individuals within the EU and determines how your personal data is processed and kept safe, and the legal rights you have in relation to your own data.
Surgery privacy notice for patients
These privacy notices explains why Wootton Medical Centre collects information about you and how that information may be used.
As Data Controllers, GPs have fair processing responsibilities. We will ensure that patients are informed about how the information we hold is processed and shared. All information will be processed lawfully and fairly, in accordance with the Data Protection Act 2018. Our Privacy notice explains why we collect information about you and how that information may be used to deliver your direct care and manage the local health and social care system.
The notice reflects:
- What information we collect about you;
- How and why we use that information;
- How we retain your information and keep it secure;
- Who we share your information with and why we do this.
The notice also explains your rights in relation to consent to use your information, the right to control who can see your data and how to seek advice and support if you feel that your information has not been used properly.
- Privacy notice for patients (April 2020) (PDF)
- Covid-19 Privacy notice march 2020 (PDF)
- Privacy notice for children (PDF)
- How we use your information leaflet (PDF)
Accessing your medical records
In accordance with the GDPR, patients (referred to as data subjects) have the right to access their medical records held by WMC, this is commonly known as a data subject access request (DSAR).
Please look at the attached information and DSAR form:
Changes to our policy
We regularly review our privacy policy and any updates will be published on our website and posters around the surgery to reflect the changes.
Questions
If you have any questions about our privacy policy or the information we hold about you, please contact the practice manager via email at wootton.medicalcentre@nhs.net or by calling 01604 709922.