GDPR/Privacy

What is GDPR

The United Kingdom General Data Protection Regulation (UKGDPR) is the UKs data privacy law that governs the processing of personal data from individuals inside the UK.

Under data protection law we must tell you about how we use your personal information. This includes the personal information that we share with other organisations and why we do so.  This additional privacy notice provides details about the personal information that we are sharing with NHS Digital for its General Practice Data for Planning and Research data collection

OPT OUT Form

The mandatory implementation of the National Data Opt-Out (NDOO), deadline of 31 March 2022, has been extended until 31 July 2022. It’s not intended to extend implementation of the deadline any further.

 As set out in the Operational Policy Guidance, the opt-out applies to the disclosure of confidential patient information for purposes beyond an individual’s direct care across the health and care system in England, unless an exemption has been granted. 

 Applications that need to be considered for exemption should contact the Confidentiality Advisory Group by 30 June 2022 at the latest cag@hra.nhs.uk.   If you have any further questions, please contact nationaldataopt-out@nhsx.nhs.uk.

If you do not want your personally identifiable patient data to be shared outside of your GP practice for purposes except your own care, you can register an opt-out with your GP practice. Please complete the attached form to register your choice. Opt-out form

Wirral Care Record

What is the Wirral Care Record (WCR)?

The Wirral Care Record (WCR) is a new confidential digital care record that is being developed and will include patient health and social care information.

Why do we need a WCR?

Currently, every health and social care organisation holds a different set of patient records. Information in different records may be duplicated or even incomplete. The WCR brings data from different organisations together, so the same information can be viewed. Allowing authorised health and social care professionals to have access to the WCR will improve decision making by care professionals. This will provide patients with safer, more consistent care whether they are in hospital, at a GP surgery or any other place where care is accessed.

Who owns the WCR?

Each partner organisation which includes; Wirral University Hospital NHS Foundation Trust, Wirral GPs, Wirral Community NHS Trust, Cheshire and Wirral Partnership NHS Foundation Trust, Wirral Clinical Commissioning Group, and Wirral Council each has their own patient records and are solely accountable for their patient data. Each organisation will share and disclose data to each other as part of the WCR, but will still remain responsible for their own patient data. The WCR is simply a way of viewing the information held by these organisations.

Is this the same as ‘care.data’ or the ‘summary care’ record?

No, the Wirral Care Record is a completely separate initiative, led by the Wirral Partner organisations, outlined above.

What is the difference between the Wirral Care Record, Health Information Exchange and the Summary Care Record?

Summary Care Record (SCR) – a national system provided by the Health and Social Care Information Centre (HSCIC). It provides a copy of key information extracted from compliant GP systems, specifically demographics, medications, allergies, and adverse reactions to drugs. SCR is updated when the source system is updated.

It can be accessed by healthcare staff who are directly involved in a patient’s care e.g. staff in ED, Out of Hours services. There is currently no access to SCR at Wirral University Teaching Hospital. Users have to have an NHS Smartcard to access the system and there is an audit log kept of each access to patients records. Users have to confirm that they have a patient’s permission to see their SCR. If this is impossible then the users has to record this and provide a reason why access was needed.

Patients can opt out of the SCR via their GP practice. They can also decide to have additional information e.g. long term conditions, relevant medical history, healthcare needs and preferences, immunisations, included in their SCR by discussing this with their GP and giving their permission for the information to be included.

Health Information Exchange (HIE) – a system that works on the basis of an Medical Interoperability Gateway (MIG) system. It is used to make a summary of GP information available to be viewed in the Hospital system. This includes demographics, medical history, test results, procedures, diagnoses, medications and allergies. This is a real time view of the data in the GP system.

It is accessed by healthcare staff who are directly involved in a patient’s care e.g. staff in ED, Consultants who have received referrals etc. It will be available to all clinical practitioner and nursing roles in hospitals. Access is controlled by the level of a healthcare professional’s role. There is a full audit log kept. Users have to confirm permission to view the record or provide reason by access was needed in emergency. Opt outs are controlled in same way as in the SCR.

Hospital data is sent to the HIE repository as its updated and is then made available through a summary view on the GP system. Access is controlled by Smartcards.

Wirral Care Record (WCR) – data is extracted from GP systems, WUTH and the other partner organisations typically once every 24 hours. Data from the hospital and the other organisations will be taken but a summary record will only be created if the GP record is present (and the patient is registered with a Wirral GP and has a Wirral post code). Organisations can determine which data items they consider to be sensitive so that these are not visible in the front end.

There are two main ways of accessing the summary record and the registries – either via a link within the local system or via a web portal.

Audit trails are kept.

Is this a Wirral only initiative?

Yes, the WCR will only include information from health and social care services located on the Wirral. This means that services in Liverpool and Chester such as; The Royal Liverpool University Hospital, Broadgreen Hospital, Liverpool Walk in Centres or Countess of Chester Hospital will not be able to access the WCR. They will still be able to access the information they need in order to deliver care, but this information will be shared exactly how it is now.

Wirral Care Record

Summary Care Record

There is a new Central NHS Computer System called the Summary Care Record (SCR). It is an electronic record which contains information about the medicines you take, allergies you suffer from and any bad reactions to medicines you have had.

Why do I need a Summary Care Record?

Storing information in one place makes it easier for healthcare staff to treat you in an emergency, or when your GP practice is closed.

This information could make a difference to how a doctor decides to care for you, for example which medicines they choose to prescribe for you.

Who can see it?

Only healthcare staff involved in your care can see your Summary Care Record.

How do I know if I have one?

Over half of the population of England now have a Summary Care Record. You can find out whether Summary Care Records have come to your area by looking at our interactive map or by asking your GP

Do I have to have one?

No, it is not compulsory. If you choose to opt out of the scheme, then you will need to complete a form and bring it along to the surgery. You can use the form at the foot of this page.

More Information

For further information visit the NHS Care records website

Download the opt out form >>>>

Sharing Patient Information

Your medical record is a life-long history of your consultations, illnesses, health tests, prescriptions, and other treatments. This information is important for your care and is also a record of your relationship with health care staff, doctors, nurses and others, over the years. This relationship is based on mutual trust and confidence and we continue to do everything possible to protect that trust. The NHS asks for information about you and this page will help explain what information is collected and the reasons why it is needed.

Coronavirus Update – Due to the Coronavirus (COVID-19) outbreak NHS Digital will and have been planning and researching using shared patient information. Please click on the following link to see how your medical data is being used during this pandemic.NHS Digital COVID-19 Shared Data

What information do we collect about you?

The information we collect from you helps ensure that you receive the best possible care from us. It is important that the details you provide are accurate and you let us know of any changes, for example, if you change your address. Information may be written down (manual records), or held on computer (electronic records). The information we hold will include:

  • Basic details about you, such as name; date of birth; address; NHS number and next of kin.
  • Contacts we have had with you, such as clinic visits.
  • Notes and reports about your health and any treatment and care you receive.
  • Results of investigations such as laboratory and x-ray results.
  • Relevant information from other health professionals, relatives, or those who care for you and know you well.

How do we use the information?

Your records are used to guide and administer the care you receive and this will ensure that:

  • Your doctor, nurse or any other healthcare professionals involved in your care have accurate and up-to-date information to assess your health and make decisions about the care you need.
  • We can contact you for health checks (for example, immunization, cervical smears, breast screening or other preventative treatment).
  • Information is available if you see another doctor, or are referred to a specialist in another part of the NHS.
  • Your GP practice and the hospital have enough information to ensure continuity of care; therefore information will be passed from your GP practice to the hospital providing care and back again. In some cases, this is an automatic process.
  • There is a good basis for assessing the type and quality of care you have received.
  • Your concerns can be properly investigated if you need to complain.

Who has access to the information?

Doctors, nurses, dentists, pharmacists and other healthcare professionals need access to your records. However, this is on a strict need-to-know basis and only includes those directly involved in your care. Secretaries, receptionists, and other clerical staff will need limited access in order to carry out administrative tasks such as typing letters and booking appointments. All staff employed by the NHS organisations have a legal duty to keep information about you confidential and secure. Wirral NHS staff work to a Code of Conduct for handling personal information.


What else do we do with the information?

Your information may also be used for one of the purposes listed below. This would normally be anonymised so that your name, address and anything else which could identify you are not visible.

  • To pay your GP, dentist and hospital for the care they provide
  • To review the care we provide to ensure this is of the highest quality
  • To plan services to meet future healthcare needs
  • To prepare statistics on NHS performance
  • To teach and train other health professionals
  • To conduct health research and development. You will be specifically asked for consent to any research project in which you participate directly
  • To help plan your ongoing care with other agencies, for example, Social Services
  • To audit NHS accounts and services, which may be carried out by external quality assurance teams.

The NHS is also required to have processes in place to manage patient information (e.g. keeping and updating records) and your medical information will be included within these processes.

The NHS is required by law to report certain information to the relevant authorities. Examples of this are:

  • Certain infectious diseases such as, measles and meningitis must be notified (this does not include HIV/AIDS)
  • Notification of births and deaths, and
  • A court of law can insist that medical information be disclosed to them in certain circumstances and they will guide you through the process. There may be a fee charged for this.

Please see our Patient Privacy Notices. Leaflets are available at reception.

Patient Privacy Notice

Please see information on how to access your medical records.

Access to Health Records