- Privacy Notice
- How we use your information to provide you with healthcare
- How your information is used for medical research and to measure the quality of care
- How your information is shared so that this practice can meet legal requirements
- National Screening Programmes
- Data Provision Notice (DPN) Privacy Statement
- Patient Information on GDPR Transparency Notice
NHS Digital will not collect patients’ names or addresses
Any other data that could directly identify patients (such as NHS Number, date of birth, full postcode) is replaced with unique codes which are produced by de-identification software before the data is shared with NHS Digital.
This process is called pseudonymisation and means that patients will not be identified directly in the data. NHS Digital will be able to use the software to convert the unique codes back to data that could directly identify patients in certain circumstances, and where there is a valid legal reason.
We will collect structured and coded data from patient medical records.
- data about diagnoses, symptoms, observations, test results, medications, allergies, immunisations, referrals, recalls and appointments, including information about physical, mental and sexual health.
- data on sex, ethnicity, and sexual orientation.
- data about staff who have treated patients.
- name and address (except for postcode, protected in a unique coded form).
- written notes (free text), such as the details of conversations with doctors and nurses.
- images, letters, and documents.
- coded data that is not needed due to its age - for example medication, referral and appointment data that is over 10 years old.
- coded data that GPs are not permitted to share by law - for example certain codes about IVF treatment, and certain information about gender re-assignment.