Skip to main content

Patient Data

A female nurse on the left talks to a male patient on the right about his condition

Under the EU's General Data Protection Regulation (GDPR) and the UK's Data Protection Act 2018, we are committed and legally bound to manage your information in a secure and confidential manner.

Why do we collect your information?

When you come into hospital, your information may be recorded on paper or on a computer to help us to take care of you. We obtain the information we hold on you from your GP and from you directly, or from others involved in your care elsewhere within the health board or externally. The information is used as part of your health record and will be kept in case we need to see you again. We collect information so that health professionals involved in your care have accurate and up-to-date information to assess your health and decide what care you need. This will lead to better care both for you and for other patients in the future. If you ever need to complain about the care you receive, your case can be properly investigated if we have more information.

How your records are used

To help you: Your information will be used to keep accurate, up-to-date information about you. This helps staff to assess your health and care for you in the best way possible. To help others: Your information will help us provide high quality care and meet all our patients’ needs, train healthcare professionals and support future medical research and development. Your information will also contribute towards national NHS statistics and audit, helping the health service to better review and improve care.

Sharing your information

We share your information between departments within the health service to take better care of you. Sometimes we have to pass on information by law, for example to notify a birth or where a formal court order has been issued. We may share your information to improve public service provision. We may need to share information about you to non-NHS staff, for example social services. We will only do this if it is absolutely necessary, and we would discuss this with you at the time as required.

If you are a Welsh resident who has received treatment by an NHS care provider in England, your information will be shared back into NHS Wales in order to verify and combine with your information held in Wales. That information will be used by the Health Board/Trust to identify you and validate what care was provided.

Your rights

You have many rights when it comes to your health records as it is your personal information. For example you have the right to know how we will use your personal information, the right to see your health record, the right to object to us using your information for certain purposes, and the right to ask for your information to be changed or erased if it is factually incorrect. If you want to access your own clinical information, please contact the access to health records department by email at 

More information

Whether you are a patient or a member of staff, if you would like to know more about how we safeguard your information, please email

Your Information, Your Rights

Information Commissioner's Office
Data Protection Act 2018



Share this page
Find us on