Data Sharing and GDPR





New General Data Protection Regulations (GDPR) are being introduced from 25th May 2018. The Practice has produced a ‘Privacy Notice’ to give you more information on how we use your information.

Please click here for Hanham Health Privacy Notice for patients over 16 years of age.

Please click here for Hanham Health Privacy Notice for patients aged between 13 & 16 years of age.

Alternatively, hard copies can be read in Reception at Hanham or Oldland Surgery.



Patient Confidentiality

We respect your right to privacy and keep all your health information confidential and secure. It is important that the NHS keeps accurate and up-to-date records about your health and treatment so that those treating you can give you the best possible care.

This information may be used for management and audit purposes. However, it is usually only available to, and used by, those involved in your care. You have the right to know what information we hold about you. If you would like to see your records, please contact a member of our practice staff.

General Practice Data for Planning and Research (GPDPR)


The data held in the GP medical records of patients is used every day to support health and care planning and research in England, helping to find better treatments and improve patient outcomes for everyone. NHS Digital has developed a new way to collect this data, called the General Practice Data for Planning and Research data collection.

Further details on GPDPR are available here

If you don’t want your patient data to be shared for purposes except for your own care, you can opt-out by registering a Type 1 Opt-out or a National Data Opt-out, or both. These opt-outs are different and they are explained in more detail below. Your individual care will not be affected if you opt-out using either option.

Type 1 Opt-out (opting out of NHS Digital collecting your data)

We will not collect data from GP practices about patients who have registered a Type 1 Opt-out with their practice. More information about Type 1 Opt-outs is in our GP Data for Planning and Research Transparency Notice, including a form that you can complete and send to your GP practice.

This collection will start on 1st September 2021.

If you register a Type 1 Opt-out after this collection has started, no more of your data will be shared with us. We will however still hold the patient data which was shared with us before you registered the Type 1 Opt-out.

If you do not want NHS Digital to share your identifiable patient data with anyone else for purposes beyond your own care, then you can also register a National Data Opt-out.

If you wish to register a Type 1 Opt-out please use the link above and return a completed form which is available on this page. We ask that all Type 1 Opt-out forms are received in surgery by Friday 20th August therefore allowing us time to process this in advance of 1st September 2021. 

National Data Opt-out (opting out of NHS Digital sharing your data)

We will collect data from GP medical records about patients who have registered a National Data Opt-out. The National Data Opt-out applies to identifiable patient data about your health, which is called confidential patient information.

NHS Digital won’t share any confidential patient information about you - this includes GP data, or other data we hold, such as hospital data - with other organisations, unless there is an exemption to this.

To find out more information and how to register a National Data Opt-Out, please read our GP Data for Planning and Research Transparency Notice.

A National Data Opt-out cannot be processed by your GP surgery. Please use the form available on the link provided and follow the instructions for the return of your opt-out. 

The attached graphics explain how your information is used. 


Your Data Matters to the NHS

Information about your health and care helps the NHS to improve your individual care, speed up diagnosis, plan your local services and research new treatments.

In May 2018, the strict rules already in place about how this data can and cannot be used were further strengthened and the NHS is committed to keeping patient information safe and always being clear about how it is used.

You can choose whether your confidential patient information is used for research and planning.

To find out more, please click here.

You can manage your choices online, however, if you are unable to do this you can do so by post using one of these forms:

You can also contact the NHS Digital contact centre on 0300 303 5678 9am to 5pm Monday to Friday (excluding bank holidays)


Connecting Care

Connecting Care is a local record and is designed for staff who are directly involved in your care to share relevant information about your care in a way that is both controlled and consistent. Your Connecting Care record will contain more detailed information, such as diagnoses, medications and appointments, to support your treatment and care at services in your area. This record will only be used to support your care locally. It will ensure that the people caring for you have enough information to treat you safely and to co-ordinate your care. Your Connecting Care Record will only be available to authorised health and social care staff who are directly involved in your care locally.

Please click this link to find out more.

If you wish to opt-out, please complete the form available below and return to the freepost address included on the form.


Summary Care Record (SCR)

The Summary Care Record is an electronic record introduced by NHS England to support your emergency Care. The record contains information about any medicines you are taking, allergies you suffer from and any bad reactions to medicines you have had to ensure those caring for you have enough information to treat you safely. Healthcare staff will ask your permission before they look at your record, except in certain circumstances for example if you are unconscious. You can now choose to have an ‘enriched SCR’ which will mean additional information from your care record is included.

Further information on the SCR is available here

If you wish to opt-out, please complete the form available below and return to the Practice.


One Care Data Sharing Agreement

Hanham Health has signed up to the One Care Information Sharing Agreement to enable significant improvements to our patients. Any patient who is seen by our clinical staff or referred by our practice team will have their full GP record made available to the appropriate clinician. Being able to see what care patients have received in the past allows healthcare professionals to make the safest and most effective decisions now, and in the future. All staff accessing patient records have received NHS confidentiality training.

Our practice will enter this data sharing agreement and are asking patients to decide whether they are happy to share their primary care (GP) record with other local healthcare professionals. Opting out of data sharing may affect the care available to you in the future. Please be aware that due to technical limitations this will opt you out of sharing of clinical record with ALL other clinical providers so your choice is important.

In order to support this improved service, our practice is using both EMIS web to facilitate new ways of working across practices in Bristol, North Somerset and South Gloucestershire, as part of the One Care Consortium.

A number of GP practices across Bristol, North Somerset and South Gloucestershire have come together to form One Care Consortium, with the Out of Hours service BrisDoc, and NHS community service provider, GP Care.

For more details about what data sharing means for you as a patient, please click here


Children and Health Data 

Latest guidance on Children and Health Data provided by our Data Protection Officer.


National Audit data extractions

Hanham Health participates in the National Diabetes Audit. This is an annual extraction of data using your NHS number and date of birth to link information from your GP record and hospital records to assess diabetes care. If you do not want information taken from your GP records for this audit, please let us know – we will need to add a code to your record to ensure your data is not extracted. Further information is available here


NHS Digital Data Extraction

Further information from our Data Protection Officer regarding data extraction and how it affects you is available here.