Menu Home Search

General Data Protection Regulation (GDPR)

Privacy Notice templates issued

As practices you are sharing your patients’ and staff’s personal data with other organisations and healthcare professionals.

You should consider whether you need to actively inform the data subjects about this.

This is a clear example of where it is appropriate to actively communicate a privacy notice and attached here are the GPC approved Privacy Notices for you to edit and publish on your websites and within your practices.

In order to treat people fairly prior to sharing information, you must carefully consider what any recipient organisation is going to do with it and what the effect on people is likely to be. It is good practice to obtain an assurance about this, for example in the form of a contract or a written data sharing agreement.

The following are templates for you to use:

Care Quality Commission Privacy Notice - April 2018

Emergencies Privacy Notice - April 2018

Direct Care Privacy Notice - April 2018

National Screening Programs Privacy Notice - April 2018

Payments Privacy Notice - April 2018

NHS Digital Privacy Notice - April 2018

Public Health Privacy Notice - April 2018

Research Privacy Notice - April 2018

Risk Stratification Privacy Notice - April 2018

Safeguarding Privacy Notice - April 2018

More information on privacy statements can be found here.

Other useful resources:

Data Protection Officer Bulletin - December 2019

Data Protection Officer Bulletin - November 2019

Data Protection Officer Bulletin - October 2019

Data Protection Officer Bulletin - September 2019

Data Protection Officer Bulletin - August 2019

Data Protection Officer Bulletin - July 2019

Data Protection Officer Bulletin - June 2019

Data Protection Officer Bulletin - May 2019

Data Protection Officer Bulletin - April 2019

Data Protection Officer Bulletin - Feb 2019

Access to health records reflecting GDPR - BMA May 2018

GPC guidance - GDPR March 2018

GDPR Q&A - Exeter Racecourse January 2018

GDPR Event Presentations - Exeter Racecourse Jan 16 2018

Information Commissioner's Office guide to the GDPR

Information Commissioner's Office personal data breach form

NHS Digital GDPR guidance

National Data Opt-out Programme - NHS Digital

National Data Opt-out Programme newsletter sign-up

GDPR - Key points for GPs from the Information Governance Alliance

GDPR guidance for sessional GPs - National Association of Sessional GPs