GDPR and Practice Policies

General Data Protection Regulation (GDPR) 2018

To comply with the new GDPR Regulations from Friday 25th May we have reviewed and updated our Data Protection Notice for handling data. Copies of our Data Protection Notice are available from our Reception team and also here.

You are entitled to access to your clinical records held by the practice. This should be done in writing stating exactly what information you require. Subject Access Request forms are available from our Reception team or here

Access to Information

Personal Health Information is information that identifies you such as name, address, date of birth and postcode. This can be linked to information about care and treatment you have received, information about your health and lifestyle and results of tests you may have had.

Your Personal Health Information is held on paper and/or on computer within this practice. If you are referred to a hospital they will also keep records for you in notes and on computer.

Your Personal Health Information is kept confidential as all NHS staff have a legal duty to keep information about you confidential. Your Personal Health Information is stored securely and only relevant information is shared within the NHS or outside organisations. We will not give information about you to organisations such as benefits agencies or employers without your written permission.

Your Personal Health Information is used to help NHS staff to provide the care and treatment you need. Information will be shared with other NHS staff involved in your care. Your information may be shared if:

  • You are referred to hospital
  • You are moved from hospital to hospital
  • You need support at home from District Nurses, etc.; NHS24 refers you to a GP or another part of the NHS

Confidentiality of Records

Practices undergo regular visits by external assessors, whose purpose is to verify the process of the practices quality of care to the patient; therefore they may need to view records of a random number of individual patients. The visiting team adhere to a strict code of confidentiality.

Reception and administration staff require access to your medical records in order to do their jobs. These members of staff are bound by the same rules of confidentiality as the medical staff.

Your rights

  • You have a right to know how your personal health information is used. You can ask a member of NHS staff providing your care.
  • You have a right to see your health records and, if you choose, get a copy.
  • If you don’t want your health information to be used or shared, tell a member of NHS staff providing your care.
  • You are not able to object when information is legitimately shared for safeguarding reasons.
  • If you are not happy about how your health information has been used or protected, please contact a member of the practice team so that we can help.
  • You have the right to access your medical record and have any errors or mistakes corrected. Please speak to a member of staff.

Freedom of Information (Scotland) Act 2002

This act came into force on 1st January 2005 and enables any person requesting information from a public body to receive that information, subject to certain exemptions. This is to encourage public authorities (GP Practices), to be more open and accountable and organise their information in an efficient and accessible way.

This excludes personal data.


We make every effort to give the best service possible to everyone who attends our practice.

However, we are aware that things can go wrong resulting in a patient feeling that they have a genuine cause for complaint. If this is so, we would wish for the matter to be settled as quickly, and as amicably, as possible.

To pursue a complaint please contact the practice manager who will deal with your concerns appropriately. Further written information is available regarding the complaints procedure from reception.

Violence Policy

The NHS operate a zero tolerance policy with regard to violence and abuse and the practice has the right to remove violent patients from the list with immediate effect in order to safeguard practice staff, patients and other persons. Violence in this context includes actual or threatened physical violence or verbal abuse which leads to fear for a person’s safety. In this situation we will notify the patient in writing of their removal from the list and record in the patient’s medical records the fact of the removal and the circumstances leading to it.

NHS ScotlandThis site is brought to you by My Surgery Website