You have a right to know who holds personal information about you. This person or organisation is called the Data Controller. In the NHS, the Data Controller is usually your local NHS Health Authority and/or your GP Surgery. The NHS must keep your personal health information confidential. It is your right.
Please be aware that our staff are bound to the NHS code of confidentiality; they are therefore not permitted to discuss any of our patient’s medical history, including their registration status, without their written consent to do so.
Once written consent has been received and verified with the patient we can provide you with information as required; this includes communicating with you on behalf of the patient with regards to any complaints, but excludes patients who are unable to act on their own behalf and already have a designated person or carer responsible for their medical care.
We therefore respectfully ask parents, relatives and guardians not to request information regarding their relatives/friends or to complain on their behalf unless we have their written consent that you may do so. If consent is required we advise that the person concerned attends the Practice to complete the required form.
