Confidentiality & Management of Records
Tudor Gate Surgery is committed to protecting your personal data and ensuring confidentiality in accordance with the UK General Data Protection Regulation, also known as UK GDPR, the Data Protection Act 2018, and the Freedom of Information Act 2000.
When we may share information about you
We only share identifiable information about you in the following circumstances:
- To provide further medical treatment, for example from district nurses or hospital services
- To help you access other services such as social services. This requires your consent
- When we have a duty to protect others, such as in child protection cases
- Anonymised data may be used at local or national level to help the Health Board or Government plan services, for example diabetic care. This data does not identify individuals.
If you do not wish your anonymised information to be used in this way, please inform us.
Welsh GP Record
Your Welsh GP Record is a summary of key medical information taken from your full GP record and made available to selected health professionals in Out of Hours and certain secondary care settings.
It includes:
- Your name, address and contact details
- Current medications and prescriptions from the past two years
- Any allergies or adverse reactions
- Current medical problems or diagnoses
- Recent test results from within the previous year, such as blood tests or X-rays
It does not include any private discussions with your GP.
More information is available on request from the surgery.
Read about the Welsh GP RecordHow we use your information
We use your medical record to provide safe, effective healthcare and treatment, including:
- Diagnosing and managing your health
- Referrals to hospital or specialist care
- Prescriptions to your preferred pharmacy
- Checking the quality of care through audits and reviews
We only share relevant information when it is necessary to provide your care or when legally required.
Read our Privacy NoticeYour rights under GDPR
You have several rights under data protection law, including the right to:
- Access your medical records
- Request corrections to inaccurate information
- Object to certain uses of your data, although this may affect your care
- Withdraw consent where it has previously been given
You may make a Subject Access Request, also known as a SAR, to view your medical records.
More information is available in our GDPR SAR leaflet.
Safeguarding
We may need to share personal data without your consent when it is required to:
- Protect individuals from harm
- Meet safeguarding responsibilities
These decisions are made under strict legal and professional frameworks.
Management of records
We follow strict procedures in line with records management guidance to ensure that we keep the right information at the right time to make informed healthcare decisions.
This includes:
- Paper and electronic documents
- Emails
- Audio and video recordings
- X-rays
- CCTV footage
We are committed to maintaining high standards through policies that support information governance and legal compliance.
Call recording and CCTV
- All calls to and from the surgery are recorded for training and quality purposes.
- CCTV is in use to support crime prevention and safety.
Information governance and access
We comply with the Freedom of Information Act 2000, which entitles you to request certain non-confidential information held by the surgery.
Our Publication Scheme outlines routinely available information and how it can be accessed.
For Freedom of Information requests or information governance enquiries, please contact the Practice Manager.
Complaints and further support
If you have concerns about how your data is used or wish to make a complaint, contact the Information Commissioner’s Office.
Information Commissioner’s Office
Website: ico.org.uk/global/contact-us
Telephone: 0303 123 1113
Data protection contacts
Data Controller: Dr H. S. Neville
Data Protection Officer: Mrs S. M. Lapping, Practice Manager