Your Data (GDPR)

General Data Protection Regulation

The General Data Protection Regulation (GDPR) is a new law that determines how your personal data is processed and kept safe, and the legal rights that you have in relation to your own data. The regulation applies from May 25th 2018, and will apply even after the UK leaves the UK.

The GDPR is similar to the Data Protection Act (DPA) 1998 (which the practice already complies with), but strengthens many of the DPA's principles.

In this section of the website you will find our Privacy Notices, information on how we use your data and other resources.

General Information about GDPR

What is GDPR? (updated 20/05/18)

Important Information for Patients

Practice Privacy Poster (updated 22/05/18)

Provision of Direct Care (updated 22/05/18)

Medical Research (updated 14/05/18)

Meeting our Legal Requirements (updated 14/05/18)

National Screening Programmes (updated 20/05/18)

Subject Access Requests

Forms and information will appear here

Lawful Basis

Lawful Basis (updated 20/05/18)

Information for Children

Privacy Information Leaflet (updated 21/05/18)

Data Breaches

If you suspect a Data Breach has occurred (updated 22/05/18)

National Opt-Out Preference

Commissioned by the Secretary of State for Health, Dame Fiona Caldicott, the National Data Guardian for Health Care (NDG) has reviewed data security and data sharing in the health and social care system.  The so-called 'Caldicott Review' provides for people to be able to make an informed choice about whether to share data or not.

Patients and public who decide they do not want their personally identifiable data used for planning and research purposes will be able to set their national opt-out preference.

As of the 25th May 2018, residents have the right to opt out of your personal confidential information being used for the following purposes:

  • Providing local services and running the NHS and social care
  • Supporting research and improving treatment of care

To set an opt-out preference, NHS Digital will offer digital (online) and non-digital national data opt-out systems.  For further information and support relating to opt-outs, please contact NHS Digital ( or by phoning 0300 303 5678.

Exceptional circumstances

The opt-out will not apply where there is a mandatory legal requirement or an overriding public interest.  These will be areas where there is a legal duty to share information (for example a fraud investigation) or an overriding public interest (for example to tackle the ebola virus)

Call 111 when you need medical help fast but it’s not a 999 emergencyNHS ChoicesThis site is brought to you by My Surgery Website