The data held in the GP medical records of patients is used every day to support health and care planning and research in England, helping to find better treatments and improve patient outcomes for everyone. NHS Digital has developed a new way to collect this data, called the General Practice Data for Planning and Research data collection (GPDPR). This service, a broader general-purpose collection which will enable faster access to patient data for planners and researchers.
More detailed information can be found via NHS Digital, including the process of how you can opt out. Under the Health and Social Care Act 2012, GP practices have no choice but to allow NHS Digital to extract this information – it is a legal obligation. NHS Digital will become the data controller for that information, will administer the data, and intends to use it for planning health services, commissioning, population health management and for research.
This is known as secondary uses of your medical records.
Medical staff treating you in GP surgeries, hospitals, A&E and out-of-hours centres will not use, or be able to use, this database. They have access to all relevant medical information about you in other ways for direct care purposes.
Although GP practices cannot object to this information leaving the practice, individual patients and their families can instruct their practice to prohibit the transfer of their personal data, i.e. you have the right to opt-out.
Data collection from GP surgeries will start on 1st September 2021, if you do not want your data shared from the GP system with NHS Digital this should be done by returning a type 1 data opt form to the GP surgery – download the document (DOCX, 16KB). We will then put a code on your medical record to stop any data extraction.
The type 1 data opt only apples to medical information stored on GP systems. NHS digital also holds data about you from hospital and Community Care providers. If you do not want this information to be used for research and planning processes you also need to complete a National Data Opt-out via a website - digital.nhs.uk/services/national-data-opt-out or via the NHS app - www.nhs.uk/nhs-services/online-services/nhs-app/nhs-app-help-and-support/choose-your-data-sharing-preferences. Anyone aged 12yrs or younger, or acting on behalf of another individual (i.e. as a proxy, perhaps with lasting power of attorney authority), cannot do this online but will have to ring 0300 303 5678, or by filling in and posting a form – assets.nhs.uk/nhsuk-cms/documents/Make_and_manage_your_choice_or_your_childs_choice_PDF_224kb.pdf (EXTERNAL PDF LINK)
The GP practice cannot complete the National Data Opt Out for patients, this must be done by the patient.
This is a complex area and more detailed information about data sharing and opt outs can be found in our practice patient data opt out policy (DOCX, 174KB)
In addition, this useful chart gives an overview of the opt outs and what they do - www.nhsdatasharing.info/NDOO/OptOuts.pdf (EXTERNAL PDF LINK)
We will update our privacy notice in due course as we get more information from NHS digital. Full information on practice data privacy and data sharing policies can be found on our Privacy and Information Sharing page.