General Data Protection Regulation

General Data Protection Regulation (GDPR)

There is a requirement for every NHS organisation and provider to publish a Practice Privacy Notice on their Web sites which sets out why the General Practice collects information about each patient and how the information is used. 

Please see the Practice Privacy Notice or the Children's Privacy Notice for The Chineham Medical Practice:

NHS England has directed NHS  Digital to collect and analyse data in connection with physical health checks for people with severe mental illness.  The details and the relevant Data Provision Notice can be found here.  NHS Digital  has  also been directed to collect data that will allow the identification of the clinically extremely vulnerable  in the context of Covid-19.  The details can be found here and the Transparency Notice is also  available from this link.

Accessing Your GP Record

The Data Protection Act gives you the right to see your health records.  This is known as the right of access.  

You can sign up for secure online Patient Access to view your full GP electronic record.

You can download and fill in the Subject Access Request Form below and email it to 

Subject Access Request Form.pdf

Coronavirus (COVID-19) Pandemic And Your Information

The Information Commissioner's Office (ICO) recognises the unprecedented challenges the NHS and other health professionals are facing during the Coronavirus (COVID-19) pandemic. The ICO also recognise that 'Public bodies may require additional collection and sharing of personal data to protect against serious threats to public health.'

The Government have also taken action in respect of this and on 20th March 2020 the Secretary of State for Health and Social Care issued a Notice under Regulation 3(4) of The Health Service (Control of Patient Information) Regulations 2002 requiring organisations such as GP Practices to use your information to help GP Practices and other healthcare organisations to respond to and deal with the COVID-19 pandemic.

In order to look after your healthcare needs during this difficult time, we may urgently need to share your personal information, including medical records, with clinical and non-clinical staff who belong to organisations that are permitted to use your information and need to use it to help deal with the Covid-19 pandemic. This could (amongst other measures) consist of either treating you or a member of your family and enable us and other healthcare organisations to monitor the disease, assess risk and manage the spread of the disease.

Please be assured that we will only share information and health data that is necessary to meet yours and public healthcare needs.

The Secretary of State for Health and Social Care has also stated that these measures are temporary and will expire on 30th September 2020 unless a further extension is required. Any further extension will be will be provided in writing and we will communicate the same to you.

Please also note that the data protection and electronic communication laws do not stop us from sending public health messages to you, either by phone, text or email as these messages are not direct marketing. It may also be necessary, where the latest technology allows us to do so, to use your information and health data to facilitate digital consultations and diagnoses and we will always do this with your security in mind.

If you are concerned about how your information is being used, please contact our DPO using the contact details provided in this Privacy Notice.