The General Data Protection Regulation (GDPR) came into force in 2018.  GDPR requires practices to process data ‘fairly’ and in a ‘transparent manner’ which is ‘easily accessible and easy to understand’. This means that practices must provide information to patients about how the practice processes patient data in the form of practice privacy notices. 

Please find below links for more detailed information for patients:

GDPR Patient Information Leaflet

Privacy Policy - Notice updated July 2022

Electronic Health Record Sharing Leaflet

Consent Form for Electronic Health Record Sharing

Consent Leaflet and Form - Sharing Summary Care Record and SystmOne

Consent to use Mobile Number

Type One Opt Out Form