The practice complies with data protection and access to medical records legislation. Identifiable information about you will be shared with others in the following circumstances:

• To provide further medical treatment for you e.g. from district nurses and hospital services.
• To help you get other services e.g. from the social work department. This requires your consent.
• When we have a duty to others e.g. in child protection cases anonymised patient information will also be used at local and national level to help the Health Board and Government plan services e.g. for diabetic care.

If you do not wish anonymous information about you to be used in such a way, please let us know.

Reception and administration staff require access to your medical records in order to do their jobs. These members of staff are bound by the same rules of confidentiality as the medical staff.

Freedom of Information

Information about the General Practioners and the practice required for disclosure under this act can be made available to the public. All requests for such information should be made to the practice manager.

Access to Records

In accordance with GDPR patients may request to see their medical records. Such requests should be made through the completion of a Subject Access Request form (see online forms section) and handed into reception.   You will be required to provide ID for yourself on collection.  If someone is collecting on your behalf you must specify this on the form and they must bring your photo ID and their photo ID at the time of collection. No information will be released without the patient consent unless we are legally obliged to do so.

Data Protection and Confidentiality for Young People

A easy to read summary of GDPR and confidentiality issues for young people published by NHS Lothian is available here