General Data Protection Regulations (GDPR)
The GDPR came into force on 25th May 2018 and EU wide legislation and will not be affected by Brexit. This replaces the Data Protection Act 1998. This Regulation requires organisations (not just the NHS) to demonstrate compliance and accountability.
Attached are the necessary mandatory policies which are required, there are also copies at the Practice - if you would like a hard copy please ask Reception.
GDPR Privacy Notice
NHS Prescription poster
Subject Access to Records - this is the Practice Policy - listed below are the forms to be completed
1. Patient Request
2. On behalf of an individual