Data Protection, Privacy and Confidentiality

Dulais Valley Primary Care Centre is committed to being open and honest about the way we use and process your data. All members of staff are bound by a strict confidentiality agreement and have received the relevant information governance training. The practice submits an annual Information Governance Toolkit to our Data Protection Officer, to demonstrate competence and adherence to information security policy. Below is a list of policies currently in effect at the practice. (Links will open as a PDF)

Data Protection

Data Protection Policy
Information Governance Policy
Records Management Policy
Practice Privacy Notice

Accessing your Medical Records

Under GDPR, patients may request copies of their medical records free of charge from the practice. A request can be made verbally, in writing, via AskMyGP, or by completing a Subject Access Request Form. The practice aims to respond to the request within the statutory timeframe of 30 days. Records are available in printed format or by PDF, delivered via the NHS Secure Portal. Identification must be presented at time of collection of medical records. In the event of PDF format, the requestor must provide ID confirmation before the file will be sent.

The practice takes no responsibility for loss or damage to medical records once they have been collected by the requestor.

Confidentiality

Dignity and Respect Policy
Confidentiality and the Caldicott Guardian

Practice Publication Scheme

Practice Publication Scheme