In accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and NHS confidentiality requirements, the Practice may only disclose a patient’s personal or medical information to a third party where appropriate authority has been provided.
For most requests, the patient must give explicit written consent, clearly authorising the Practice to share their information with a named individual. Without written consent, we are unable to release confidential information, except where disclosure is permitted or required by law.
Power of Attorney (PoA)
Where an individual holds a valid Lasting Power of Attorney (LPA) for Health and Welfare, or other relevant legal authority, this must be provided in writing and include a copy of the registered documentation. The Practice will review the scope of the authority to confirm that it permits access to health information.
Please note that a Property and Financial Affairs LPA does not automatically grant access to medical information unless health‑related authority is clearly specified.
All requests are handled in line with NHS confidentiality guidance to ensure patient information is protected appropriately.