![\"Gdpr\"](\"https:\/\/surgerywebtemp.org.uk\/b83045\/wp-content\/uploads\/2026\/04\/GDPR.gif\")
\nWhat is the GDPR<\/b>?<\/b><\/p>\n
GDPR <\/b>is a regulation in EU law on data protection and privacy for all individuals within the European Union. It addresses the export of personal data outside the EU and EEA. The GDPR aims primarily to give control to citizens and residents over their personal data<\/p>\n
We hold sensitive and confidential data about you in our computer system, we have a duty of care to ensure we protect this information for you. We are a Data Controller<\/b> of your information. This means we are responsible for collecting, storing and handling your personal and healthcare information when you register with us as a patient.<\/p>\n
We use your personal and healthcare information in the following ways:<\/p>\n
We <\/b>will never pass on your personal information to anyone else who does not need it, or has no right to it, unless you give us clear consent to do so. <\/b>For further information please review our Privacy Notice Policy<\/a><\/b><\/p>\n The data held in the GP medical records of patients is used every day to support health and care planning and research in England, helping to find better treatments and improve patient outcomes for everyone. NHS Digital has developed a new way to collect this data, called the General Practice Data for Planning and Research data collection.<\/p>\n NHS Digital is the national custodian for health and care data in England and has responsibility for standardising, collecting, analysing,\u00a0publishing and sharing data and information from across the health and social care system, including general practice.<\/p>\n NHS Digital collected\u00a0patient data from general practices using a service called the General Practice Extraction Service (GPES), which has operated for over 10 years and now needs to be replaced.<\/p>\n NHS Digital has engaged with doctors, patients, data and governance experts to design a new approach to collect data from general practice that:<\/p>\n Patient data collected from general practice is needed to support a wide variety of research and analysis to help run and improve health and care services. Whilst the data collected in other care settings such as hospitals is valuable in understanding and improving specific services, it is the patient data in general practice that helps us to understand whether the health and care system as a whole is working for patients.<\/p>\n In addition to replacing what GPES already does, the General Practice Data for Planning and Research service will also help to support the planning and commissioning of health and care services, the development of health and care policy, public health monitoring and interventions (including coronavirus (COVID-19) and enable many different areas of research.<\/p>\n This data will be shared from 1 September\u00a02021. Data may be shared from the GP medical records about:<\/p>\n NHS Digital will not collect patients\u2019 names or addresses. Any other data that could directly identify patients\u00a0(such as\u00a0NHS Number, date of birth, full postcode) is replaced with unique codes which are produced by de-identification software before the data is shared with NHS Digital.<\/p>\n This process is called pseudonymisation and means that patients will not be identified directly in the data. NHS Digital will be able to use the software to convert the unique codes back to data that could directly identify patients in certain circumstances, and where there is a valid legal reason.<\/p>\n If you don\u2019t want your identifiable patient data to be shared for purposes except for your own care, you can opt-out by registering a\u00a0Type 1 Opt-out<\/a>\u00a0or a\u00a0National Data Opt-out<\/a>, or both. These opt-outs are different and your individual care will not be affected if you opt-out using either option.<\/p>\n If you do not want your patient data shared with NHS Digital, you can register a Type 1 Opt-out with your GP practice. You can register a Type 1 Opt-out at any time. You can also change your mind at any time and withdraw\u00a0a Type 1 Opt-out.<\/p>\n Data sharing with NHS Digital will start on 1 September\u00a02021.<\/p>\n If you have already registered a Type 1 Opt-out with your GP practice your data will not be shared with NHS Digital.<\/p>\n If you wish to register a Type 1 Opt-out with your GP practice before data sharing starts with NHS Digital, this should be done by\u00a0returning this form<\/a> to your GP practice. If you have previously registered a Type 1 Opt-out and you would like to withdraw this, you can also use the form to do this. You can send the form by post or email to your GP practice or call 0300 3035678\u00a0for a form to be sent out to you.<\/p>\n If you do not want NHS Digital to share your\u00a0identifiable patient data with anyone else for purposes beyond your own care, then you can also register a\u00a0National Data Opt-out<\/a>.<\/p>\n\n\t\t\t\tYour Data Matters<\/span>\n\t\t\t<\/summary>\n\t\t\t
\n
What the data will be used for<\/h2>\n
What data is shared<\/h2>\n
\n
NHS Digital will collect:<\/h2>\n
\n
NHS Digital does not collect:<\/h2>\n
\n
Opting out<\/h2>\n
Type 1 Opt-out\u00a0(opting out of NHS Digital collecting your data)<\/h2>\n
National Data Opt-out (opting out of NHS Digital sharing your data)<\/h2>\n