General Data Protection Regulation (GDPR) & Practice Privacy Notice

The Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR) govern the way organisations handle personal and sensitive information.

Barnsbury Medical Practice handles your data in line with the above laws and also in line with the Common Law Duty of Confidentiality and the 8 Caldicott Principles.

We are committed to maintaining the confidentiality of your data and only share your data for direct care or where we are required to by law or in order to fulfil our NHS contract or on the rare occasion when not sharing the data is deemed to be more harmful than sharing the data.

View our Data Protection and Cyber Security Policy

Our Privacy Notice contains an in depth description of how we handle your data.

View our Summary Privacy Notice

View our Privacy Notice

View our Privacy Notice for Children


You have the right to object to the sharing of your personal health data concerning your GP medical record for research purposes. This is exercised via the National Data Opt-out; see the NHS Your Data Matters page.

British Sign Language Version:

Access to your medical record

You can gain access to some aspects of your medical record online. Please contact reception for a form. You will need to provide photo proof of identity such as a passport.

If necessary you can gain a copy of your record by submitting a Subject Access Request using this form

You can also access new information on your medical records by signing up to the NHS App. In some cases you may also need to ask the GP practice to switch on the data flow to the App.