Your Data and Confidentiality & Privacy Notice

Update September 2021- further postponement of GDPDR

The proposed data upload in September 2021 has been further postponed, pending a further review. This is summarised here
This means that this is no need to register your Type 1 opt out if you object to your data being used, as this is no longer going ahead.

We have had a number of requests for Type 1 opt-out which have already been recorded on our IT system. However due to concerns, this system of opting in/out will likely be replaced in the future. We have left historic information below in italics from earlier in the year.

Dr Richard Greenway

"Withdrawal of Data Provision Notice

Further to the announcement made 8 June, the implementation of GP Data for Planning and Research has been deferred to provide more time to speak with patients, doctors, health charities and others.

The Data Provision Notice has, therefore, been withdrawn and no action is required by GP practices or GP system suppliers in response to it."


General Practice Data for Planning and Research Directions 2021

Directions have been given by the Secretary of State for Health and Social Care requiring NHS Digital to establish and operate an information system for the collection and analysis of General Practice data for health and social care purposes in April 2021. This link explains the legal basis of this and what your information may be used for.


Practice Statement and View 8.6.2021

This is a complex area which is currently under national review, and may be causing some concern. As we understand it, a new data extraction system is to be put in place from July 2021 to replace GPES. This will gather pseudonymised data from GP practices, which will not include attached documents or free text narrative. This data will be used centrally for planning and research. Please read the links below which explain the processes in more detail, including addressing concerns about data will be used for and how it will be stored. This will apply to residents in England automatically unless they opt out. Opt outs do not apply when the data use is specifically for your care. For example if you attend a local Accident and Emergency Service, they will be able to access elements of your GP record in order to care for you, even if you have opted out.You may opt out from, or opt back into this process at any point.

GP records form a large part of the data held on patients by the NHS, but Hospitals and other organisations also hold data on patients. The national opt out system will allow your preferences to be shared between NHS digital and all NHS organisations,. This system seems to be the main way of restricting your data use moving forward. A type 1 opt out prevents identifiable information being uploaded by NHS Digital from a GP practice for purposes other than direct care (with exceptions). Patients may choose to have both national and type 1 opt outs in place.

Please read the links below, and click below if you want to register an opt out.

Dr Richard Greenway

Collecting GP Data - Advice for the public Frequently asked questions- how your data may be used from July 2021

Choose if your data is used for planning or research purposes

General Practice Data for Planning and Research Directions 2021 Privacy Notice

  • To register your national opt out please click here

  • To register a Type 1 Opt Out, (see links above) please complete this form and return to your surgery reception.



Patient Confidentiality Privacy Notice

We respect your right to privacy and keep all your health information confidential and secure. It is important that the NHS keeps accurate and up-to-date records about your health and treatment so that those treating you can give you the best possible care.

Covid-19 and Data

Covid-19 Privacy Notice- Specific Information relating to data usage during the Covid-19 pandemic

General Data Protection Regulation GDPR

From 25th May 2018 the new regulations come into place which apply to personal data held by an organisation. Our practice policies relating to the way we deal with your data have been updated, and are summarised in the following Privacy Notice, which can be downloaded here:

GDPR Privacy Notice

Your Data within the Practice

We hold all our patient records on the EMIS web clinical system, which is approved for GP use, and regulated  by the Government. Over 50% of GP practices in the UK use EMIS. We also use Docman 10 software to receive and workflow documents, and Microsoft Office including Outlook linked to NHSmail, a secure mail service. All of these software packages are NHS licensed and approved.

The NHS in England has introduced the Summary Care Record, which will be used in emergency care. The record will contain information about any medicines you are taking, allergies you suffer from and any allergies to medicines you have had to ensure those caring for you have enough information to treat you safely. Healthcare staff will ask your permission before they look at your record, except in certain circumstances for example if you are unconscious. As a patient you have a choice, please click here to find out more.

In addition to the National Summary Care Record, your local NHS in Bristol, North Somerset and South Gloucestershire is developing a local shared record, called the Connecting Care Record.  Your Connecting Care record will contain more detailed information, such as diagnoses, medications and appointments, to support your treatment and care at services in your area. This record will only be used to support your care locally. It will ensure that the people caring for you have enough information to treat you safely and to co-ordinate your care. Your Connecting Care Record will only be available to authorised health and social care staff who are directly involved in your care locally.  As with the Summary Care Record, they must have permission each time they view your Connecting Care Record. As a patient you have a choice, please click here to find out more.

How your data is used locally

Local health services in BNSSG also hold information about you. Please click here to read more.


In addition to the National Summary Care Record, your local NHS in Bristol, North Somerset and South Gloucestershire is developing a local shared record, called the Connecting Care Record.  Your Connecting Care record will contain more detailed information, such as diagnoses, medications and appointments, to support your treatment and care at services in your area. This record will only be used to support your care locally. It will ensure that the people caring for you have enough information to treat you safely and to co-ordinate your care. Your Connecting Care Record will only be available to authorised health and social care staff who are directly involved in your care locally.  As with the Summary Care Record, they must have permission each time they view your Connecting Care Record. As a patient you have a choice, please click here to find out more.

Other NHS and NON-NHS organisations who we share your data with and why?

Sometimes the practice shares information with other organisations that do not directly treat you, for example, Clinical Commissioning Groups (CCG). Normally, it will not be possible to identify you from this information. This information is used to plan and improve services. The information collected includes data such as the area patients live, age, gender, ethnicity, language preference, country of birth and religion. The CCG also collects information about whether patients have long term conditions such as diabetes, blood pressure, cholesterol levels and medication. However, this information is anonymous and does not include anything written as notes by the GP and cannot be linked to you. (Please note this is not an exhaustive list and will change from practice to practice the main systems are included in the list below.)

Local Data Sharing Agreements: –

  1.     Sirona Community nurses and other health care professionals can access GP information about people on their caseloads who have recently been discharged from hospital, or who are housebound, or who require longer term rehabilitation from the GP record. This information can be read by the healthcare professional to improve the patients care, but they are not able to amend the GP medical record.*You can find more information available on their website www.sirona-cic.org.uk and view their Privacy Notice directly using this link www.sirona-cic.org.uk/policies/
  2.     Connecting Care* enables a range of health care organisations, including local NHS hospital, the Ambulance Service and the Out of Hours service provided by Brisdoc. This information can be read by the healthcare professional to improve the patients care, but they are not able to amend the GP medical record. *You can find more information available on their website using this link You can view their Privacy Notice here: www.connectingcarebnssg.co.uk/ www.connectingcarebnssg.co.uk/what-this-means-for-me/what-if-i-don-t-want-my-information-shared/
  1.     One Care – This agreement allows patients from the surgery to be seen and treated by GPs from other surgeries in the evening and at weekend. The agreement allows a GP in other localities to access the GP record securely and allows information about the consultation to be written into the record. *You can find more information available on their website onecare.org.uk   You can view their Privacy Notice using this link onecare.org.uk/privacy-policy/
  2.     St Peter’s Hospice – this agreement enables hospice staff to read the records of patients in their care. This information can be read by the healthcare professional to improve the patients care, but they are not able to amend the GP medical record *You can find more information available on their website  www.stpetershospice.org.uk/ and view their Privacy Notice directly using this link www.stpetershospice.org.uk/about/privacy-policy/
  3.      AccuRX-AccuRx is a British software company that has developed a messaging service for doctor surgeries to communicate with patients via SMS and Video messaging. We use this as a secure method of communications to and from patients, and for patients to send certain health related questionnaire information back to the practice securely "Floreys". *You can find more information available on their website  www.accurx.com/ view their Privacy Notice directly using this link Privacy Policy (accurx.com)
  4.     EMIS Health-formerly known as Egton Medical Information Systems, supplies electronic patient record systems and software used in primary care, acute care and community pharmacy in the United Kingdom. *You can find more information available on their website  www.emishealth.com/ view their Privacy Notice directly using this link www.emishealth.com/legal/
  5.     econsult- Health is a collection of digital triage solutions for Primary and Emergency Care eConsult enables NHS based GP practices to offer online consultations to their patients. This allows patients to submit their symptoms or requests to their own GP electronically, and offers around the clock NHS self-help information, signposting to services, and a symptom checker. *You can find more information available on their website  econsult.net/ view their Privacy Notice directly using this link econsult.net/privacy-policies/
  6.     Patient Access-Patient Access connects you to local health services when you need them most. Book GP appointments, order repeat prescriptions and discover local health services for you or your family via your mobile or home computer *You can find more information available on their website  www.patientaccess.com/ and their privacy policy at https://support.patientaccess.com/privacy-policy
  7.  iPlato- is a leading automated SMS, Email messaging service which delivers quick and efficient communications between health care providers and their patients across the NHS and private healthcare. *You can find more information available on their website  https://www.iplato.com/ and their privacy policy at https://www.iplato.com/privacy/
  8.     GetUbetter app- provide NHS Organisatons with new ways to support   people with common MSK conditions via end-to-end digital injury support and condition management. getUBetter – Privacy Policy 

How your data is used by the NHS centrally

The NHS in England has introduced the Summary Care Record, which will be available to hospitals and used in emergency care. The record will contain information about any medicines you are taking, allergies you suffer from and any allergies to medicines you have had to ensure those caring for you have enough information to treat you safely. Healthcare staff will ask your permission before they look at your record, except in certain circumstances for example if you are unconscious. As a patient you have a choice, please click here to find out more.

Your data may be used for research and planning purposes by the NHS, usually in an anonymised form.

If you want to opt-out, so that your records cannot be used for research and planning, your wishes are now recorded centrally against your NHS number (not on your GP record as before). Patients who have already opted out (prior to September 2018), who had what was then called a type 2 opt-out, will be automatically opted out under the new system.

To register your national opt-out please click here. 

Information leaflet here: Your Data Matters to the NHS

NHS IT and Amazon Web Services

A number of NHS IT companies, including EMIS and Docman -who own operate IT systems, are currently using Amazon Web Services (AWS) to store clinical records information. EMIS is large GP medical records provider which is used in around half of all UK GP patients (40 million records) , and the cloud servers it uses are approved by the department of health. As a practice, we don't have much control over national decisions like this, but we have been assured that AWS is safe and secure. AWS is used by numerous large companies such as the BBC and Netflix amongst others. 

Dr Richard Greenway
Managing Partner