What is GDPR?
GDPR stands for General Data Protection Regulations and is a new piece of legislation that will supersede the Data Protection Act. It will not only apply to the UK and EU; it covers anywhere in the world in which data about EU citizens is processed.
The GDPR is similar to the Data Protection Act (DPA) 1998 (which the Practice already complies with), but strengthens many of the DPA’s principles. The main changes are:
- Practices must comply with subject access requests (please see the Subject Access Request Form);
- Where we need your consent to process data, this consent must be freely given, specific, informed and unambiguous;
- There are new, special protections for patient data;
- The Information Commissioner’s Office must be notified within 72 hours of a data breach;
- Higher fines for data breaches – up to 20 million euros.
For further information please see our Patient Information Sheet
Privacy Notices
In line with the new GDPR, New Southgate Surgery has produced privacy notices. These can be accessed below :
Patient Privacy Notice – easy read version for children
Patient Access Policy
This document sets out how New Southgate Surgery ensures that all patients are able to access timely and appropriate clinical care. Please select the link below to view the policy.