Your Data and Confidentiality & Privacy Notice

New 17.5.2021


General Practice Data for Planning and Research Directions 2021

Directions have been given by the Secretary of State for Health and Social Care requiring NHS Digital to establish and operate an information system for the collection and analysis of General Practice data for health and social care purposes in April 2021. This link explains the legal basis of this and what your information may be used for.

*Stop Press :the proposed data upload to NHS Digital has been postponed to 1st September 2021. Patients now have until 25th August to put a Type 1 opt out in place *


Practice Statement and View 8.6.2021

This is a complex area which is currently under national review, and may be causing some concern. As we understand it, a new data extraction system is to be put in place from July 2021 to replace GPES. This will gather pseudonymised data from GP practices, which will not include attached documents or free text narrative. This data will be used centrally for planning and research. Please read the links below which explain the processes in more detail, including addressing concerns about data will be used for and how it will be stored. This will apply to residents in England automatically unless they opt out. Opt outs do not apply when the data use is specifically for your care. For example if you attend a local Accident and Emergency Service, they will be able to access elements of your GP record in order to care for you, even if you have opted out.You may opt out from, or opt back into this process at any point.

GP records form a large part of the data held on patients by the NHS, but Hospitals and other organisations also hold data on patients. The national opt out system will allow your preferences to be shared between NHS digital and all NHS organisations,. This system seems to be the main way of restricting your data use moving forward. A type 1 opt out prevents identifiable information being uploaded by NHS Digital from a GP practice for purposes other than direct care (with exceptions). Patients may choose to have both national and type 1 opt outs in place.

Please read the links below, and click below if you want to register an opt out.

Dr Richard Greenway

Collecting GP Data - Advice for the public Frequently asked questions- how your data may be used from July 2021

Choose if your data is used for planning or research purposes

General Practice Data for Planning and Research Directions 2021 Privacy Notice

  • To register your national opt out please click here

  • To register a Type 1 Opt Out, (see links above) please complete this form and return to your surgery reception.


Patient Confidentiality Privacy Notice

We respect your right to privacy and keep all your health information confidential and secure. It is important that the NHS keeps accurate and up-to-date records about your health and treatment so that those treating you can give you the best possible care.

Covid-19 and Data

Covid-19 Privacy Notice- Specific Information relating to data usage during the Covid-19 pandemic

General Data Protection Regulation GDPR

From 25th May 2018 the new regulations come into place which apply to personal data held by an organisation. Our practice policies relating to the way we deal with your data have been updated, and are summarised in the following Privacy Notice, which can be downloaded here:

GDPR Privacy Notice

Your Data within the Practice

We hold all our patient records on the EMIS web clinical system, which is approved for GP use, and regulated  by the Government. Over 50% of GP practices in the UK use EMIS. We also use Docman 10 software to receive and workflow documents, and Microsoft Office including Outlook linked to NHSmail, a secure mail service. All of these software packages are NHS licensed and approved.

The NHS in England has introduced the Summary Care Record, which will be used in emergency care. The record will contain information about any medicines you are taking, allergies you suffer from and any allergies to medicines you have had to ensure those caring for you have enough information to treat you safely. Healthcare staff will ask your permission before they look at your record, except in certain circumstances for example if you are unconscious. As a patient you have a choice, please click here to find out more.

In addition to the National Summary Care Record, your local NHS in Bristol, North Somerset and South Gloucestershire is developing a local shared record, called the Connecting Care Record.  Your Connecting Care record will contain more detailed information, such as diagnoses, medications and appointments, to support your treatment and care at services in your area. This record will only be used to support your care locally. It will ensure that the people caring for you have enough information to treat you safely and to co-ordinate your care. Your Connecting Care Record will only be available to authorised health and social care staff who are directly involved in your care locally.  As with the Summary Care Record, they must have permission each time they view your Connecting Care Record. As a patient you have a choice, please click here to find out more.

How your data is used locally

Local health services in BNSSG also hold information about you. Please click here to read more.


In addition to the National Summary Care Record, your local NHS in Bristol, North Somerset and South Gloucestershire is developing a local shared record, called the Connecting Care Record.  Your Connecting Care record will contain more detailed information, such as diagnoses, medications and appointments, to support your treatment and care at services in your area. This record will only be used to support your care locally. It will ensure that the people caring for you have enough information to treat you safely and to co-ordinate your care. Your Connecting Care Record will only be available to authorised health and social care staff who are directly involved in your care locally.  As with the Summary Care Record, they must have permission each time they view your Connecting Care Record. As a patient you have a choice, please click here to find out more.

How your data is used by the NHS centrally

The NHS in England has introduced the Summary Care Record, which will be available to hospitals and used in emergency care. The record will contain information about any medicines you are taking, allergies you suffer from and any allergies to medicines you have had to ensure those caring for you have enough information to treat you safely. Healthcare staff will ask your permission before they look at your record, except in certain circumstances for example if you are unconscious. As a patient you have a choice, please click here to find out more.

Your data may be used for research and planning purposes by the NHS, usually in an anonymised form.

If you want to opt-out, so that your records cannot be used for research and planning, your wishes are now recorded centrally against your NHS number (not on your GP record as before). Patients who have already opted out (prior to September 2018), who had what was then called a type 2 opt-out, will be automatically opted out under the new system.

NHS IT and Amazon Web Services

A number of NHS IT companies, including EMIS and Docman -who own operate IT systems, are currently using Amazon Web Services (AWS) to store clinical records information. EMIS is large GP medical records provider which is used in around half of all UK GP patients (40 million records) , and the cloud servers it uses are approved by the department of health. As a practice, we don't have much control over national decisions like this, but we have been assured that AWS is safe and secure. AWS is used by numerous large companies such as the BBC and Netflix amongst others. 

To register your national opt-out please click here. 

Information leaflet here: Your Data Matters to the NHS

NHS IT and Amazon Web Services

A number of NHS IT companies, including EMIS and Docman -who own operate IT systems, are currently using Amazon Web Services (AWS) to store clinical records information. EMIS is large GP medical records provider which is used in around half of all UK GP patients (40 million records) , and the cloud servers it uses are approved by the department of health. As a practice, we don't have much control over national decisions like this, but we have been assured that AWS is safe and secure. AWS is used by numerous large companies such as the BBC and Netflix amongst others. 

Dr Richard Greenway
Managing Partner