Privacy and Your Health Records
We understand that your health information is deeply personal. Think of us as the guardians of your medical history; while we are here to provide your care, we also take our role in protecting your privacy very seriously. This guide explains how we handle your data, your rights under the law, and how we ensure your information stays between you and your healthcare team.
Your Information and the Law
In legal terms, the Practice acts as the Data Controller for your medical records. This means we are responsible for how your personal and health information is collected, stored, and shared.
Our handling of your data is governed by strict UK legislation, including the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR). These laws ensure that your information is processed lawfully, fairly, and transparently.
Confidentiality and Our Staff
Every member of our team—from our GPs and nurses to our reception and administrative staff—is bound by a legal and professional duty of confidentiality. This is often referred to as the NHS Scotland Code of Practice on Health and Care Confidentiality.
To protect your privacy, our staff are not permitted to discuss any aspect of your medical history or registration status with anyone else unless you have given us explicit permission to do so.
Communicating on Your Behalf
We know that sometimes you might want a family member, friend, or carer to help manage your healthcare or speak to us about a concern. To ensure we are following the law, we follow these procedures:
- Written Consent: If you would like us to share information with someone else, you must provide written consent. We recommend visiting the Practice in person to complete our formal consent form.
- Complaints: We cannot discuss the details of a complaint with a third party unless we have verified written permission from the patient concerned.
- Legal Representatives: Different rules apply if a patient lacks the capacity to manage their own affairs. In these cases, we work with officially designated individuals, such as those with a Welfare Power of Attorney.
Accessing Your Records
You have a legal right to see the information we hold about you. This is known as a Subject Access Request (SAR). In most cases, this service is provided free of charge, and we aim to provide the information within one month.
Useful Resources
For further information on how the NHS handles your data and your rights as a patient in Scotland, please visit the following resources: