GDPR is a piece of legislation that superseded the Data Protection Act. It covers anywhere in the world in which data about EU citizens is processed.

The changes in GDPR mean that we must get explicit permission from patients when using their data for certain purposes. This is to protect your privacy and we may ask you to provide consent to do certain things. Individuals also have the right to withdraw their consent at any time.

Under GDPR, you are allowed to request copies of your medical records. We need the request in writing and once received, we must action it within one calendar month.