Increasingly, patient medical data is shared e.g. between GP surgeries and District Nursing, in order to give clinicians access to the most up to date information when attending patients.

The systems we operate require that any sharing of medical information is consented to by patients beforehand. Patients must consent to sharing of the data held by a health provider out to other health providers and must also consent to which of the other providers can access their data.

e.g. it may be necessary to share data held in GP practices with district nurses but the local podiatry department would not need to see it to undertake their work. In this case, patients would allow the surgery to share their data, they would allow the district nurses to access it but they would not allow access by the podiatry department. In this way access to patient data is under patients' control and can be shared on a 'need to know' basis.

There is a Central NHS Computer System called the Emergency Care Summary (ECS). The Emergency Care Summary is meant to help emergency doctors and nurses help you when you contact them when the surgery is closed. It will contain information on your medications and allergies.

Your information will be extracted from practices such as ours and held securely on central NHS databases.   

As with all systems there are pros and cons to think about. When you speak to an emergency doctor you might overlook something that is important and if they have access to your medical record it might avoid mistakes or problems, although even then, you should be asked to give your consent each time a member of NHS Staff wishes to access your record, unless you are medically unable to do so.

On the other hand, you may have strong views about sharing your personal information and wish to keep your information at the level of this practice. If you don’t want an Emergency Care Summary to be made for you, tell your GP surgery. Don’t forget that if you do have an Emergency Care Summary, you will be asked if staff can look at it every time they need to. You don’t have to agree to this.

Patients will be informed of how to register for online services and access their medical records through the online services system. For patients who do not register for online services will be informed of how to request access to their medical record.

As your GP practice, we have been asked to provide you with, no later than 31 October 2023, access to your full medical record going forward via the NHS app (and NHS website) if you have a suitable NHS login.

Your GP medical record contains consultation notes based on conversations between you, your GP and their team: medicines prescribed to you; all test results including hospital investigations; allergies; vaccines; and your medical conditions along with documents that may have been sent from local hospitals, clinics or other agencies, eg the police. There is likely to be sensitive and personal information within your medical record.

We are supportive of providing you with access to your record, but we wish to do this safely and make you aware that this is happening so that you can opt out, if you so wish. You may wish to speak with us first to understand what it is that you will see, and the risks which may be involved in having such confidential data either on your smartphone with the NHS app installed or online if other people might have access to that information through your devices. If you are in a difficult or pressured relationship for example, you may prefer your records to remain accessible only to those treating you, with them not appearing on your smartphone or online. Government has been clear that if a patient does not wish to have access, then we do not have to provide it. This is one reason why we have asked if you wish to opt out, or have it switched off for the time being.

For those who would like access, we are happy to explain the different levels you might like. Everyone can have access to their medication history and allergies, for example, and will be able to order their repeat prescriptions. It’s also possible to request access to what we call your ‘coded record’ where you can see a list of medical problems and results. You can also request access to the ‘full’ record where you will be able to see everything, including the notes which have been written by doctors, nurses and others involved in your care, at the GP surgery, and elsewhere.

It’s important to remember that these documents may, at times, contain information that could be upsetting, especially if they contain news of a serious condition. It can also be a cause for worry seeing results online when it isn’t clear what the results might mean, and no one is available to ask, as can be the case during the evening or at weekends, for example.

Sometimes people with a mental health condition might prefer not to see documents that remind them of difficult times in their life. Letters from mental health teams sometimes go into detail about past events, and great care would be needed in deciding whether you would want to see these letters. It is possible for individual items to be hidden at your request and your GP would be happy to talk about any concerns you may have.

Great care is also needed in case private details might cause harm at home, should people in a difficult or pressured relationship be forced to show their medical record to an abusive partner. Anyone in such a position should make this clear to us at the practice, so we can take steps to keep you safe. This might mean removing access through the NHS app for the time being, or through a careful process where we hide sensitive things. We would talk this through with you.

Requesting access – what do I need to do?

The easiest way to get access is to create an NHS login through the NHS app. Although you can also access your GP records via the internet on a computer, the first bit is easiest if done through a smartphone. If you don’t have one, you may have a family member or friend you trust who can help you. You can also ask your practice receptionist, but you’ll need some proof of who you are, eg a passport or driving licence.

If you use the NHS app, you’ll have to set up an account using a unique e-mail address and then ‘authenticate’ yourself to the NHS system to prove you are who you say you are. This will involve confirming your name, date of birth and contact details. The NHS login has several levels of authentication and to gain access to your records you’ll need the highest level of authentication. This generally involves you recording a short video of yourself to prove you are a real person as well as uploading a copy of a suitable identification document.

Once you have suitably authenticated yourself to the NHS app and created your NHS login you can approach your practice and ask for access, being mindful of the risks associated with access and the importance of not sharing passwords or having them stored in your smartphone if you think other people might want to see them without your permission. If you have any concerns, you should explain these to your GP practice team who can guide you.

Your GP practice will have a form they will ask you to complete, with your NHS login (this will be the email address you used to sign up) and then you will have a chat about access and your agreement and understanding will be requested. Once you are happy to get online access, your request will be passed to the clinical team to review. It may be that the practice wishes to contact you to discuss your request if there are any concerns raised so that access can be given safely. We’re not sure how many people will ask for access all at once so there may be a wait, but we will do our best to get you online access as soon as we can.

The form to request access can be downloaded from the practice website or copies are available at Reception. Please remember photo ID will be required.