Privacy and Information Sharing

Patient Update On Data Sharing With NHS Digital - General Practice Data For Planning & Research Data Collection

Click here to download the Patient Update On Data Sharing With NHS Digital


Privacy Policy

This privacy notice explains why Thamesmead Medical Associates (TMA) collects information about you, how we keep it safe and confidential and how that information may be used. The first section provides a summary of these areas followed by a section that explains in more detail on why and how we process information in different ways.

The Practice is computerised and registered under the Data Protection Act. Personal information remains confidential to the NHS unless you have given prior written consent for disclosure. Patient records may be audited for quality & clinical compliance purposes.

We provide a confidential service to all our patients, including those under the age of 16. Everyone working for the NHS has a legal duty to maintain the highest level of confidentiality in regards to patient information. Anything you say to any member of our team will remain confidential and not be passed on to any other party - including other family members, parents or carers – without your permission.

Your visit to the outreach Contraception and Sexual Health clinic is confidential unless you are being harmed or abused.

Below we have attached a copy of our updated privacy policies for your information.

Please click here to download our Privacy Policy


Our Healthier South East London

Our Healthier South East London (OHSEL) is a partnership of health and social care providers and professionals who provide health and care services for people living in South East London & London. You can find further information on their website. Also please click here to view their privacy notice.



Information Sharing For COVID-19 Vaccination Programme

We have to share patient and staff details with the NHS COVID 19 vaccination programme team to ensure all relevant patients are offered the vaccination. This is a legal obligation.  Please click here for the privacy notice for patients. Please click here for the privacy notice for staff.


Subject Access Request Policy

The Subject Access Request Policy details how Thamesmead Medical Associates will meet its legal obligations concerning individual’s access to their information. The requirements within the Policy are primarily based upon the DPA 1998 and EU GDPR 2018 as they are the key legislations covering rights to personal information.

This Subject Access Request Policy has been written to ensure that all staff of Thamesmead Medical Associates are aware of their responsibilities to provide information if requested. This Policy also includes guidelines and information on how to request information of the deceased.

Click here to download the Subject Access Policy

Click here to download the Information Leaflet And Subject Access Request Form

Patient Data Opt Out Policy

This Policy and patient information leaflet describes the practice’s approach on Patients opting out of data sharing for direct care and secondary uses.

Click here to download the Patient Data Opt-Out Policy

Please click here to download our Type 1 Opt-Out form.


 Children and Vulnerable Adults

We have a professional, legal and moral obligation to report suspicions of neglect or abuse of children or vulnerable adults to the relevant authorities. We will do all we can to involve parents and carers in this process but there may be times when this proves impractical.


Computer Records

Your registration details and medical notes that we keep in the practice are held on our computer. We are registered under the Data Protection Act and no party outside the practice have access to data identifiable to you. If you wish to see your computer-held record, please complete a subject access request form, available at reception.


Connect Care

Connect care is a secure, local, electronic care record that ensures existing information about your health and care are more readily available anywhere you receive care.

Your health and care records usually move around by letter, secure encrypted email, fax or phone. At times this can delay information sharing which can impact decision making and slow down treatment. With connect care, authorised staff involved in your care will have faster access to important information about you, this is on a need to know basis.

This will help clinical staff provide you with the most timely and efficient care, especially when care is unplanned, such as an emergency, or during the evenings and weekends.

The GP surgery will upload information onto the connect care record. This will be diagnoses', medication, allergies, investigation reports and any other information that is coded onto your health record.

You are able to opt out from all organisations uploading your health information into connect care by completing the 'opt out' form at


Summary Care Record

Certain parts of patient medical records will be shared within the NHS to provide effective care to patients outside their GP practice.  This will enable health care professionals to have quicker access to information about any medicines or allergies/bad reactions a patient may have had. The summary care record will contain Name, Date of Birth, NHS number, repeat medications, this information can only be accessed by an NHS professional that holds an NHS smart card that is password protected.

Personnel accessing information can only see parts that are relevant to their job. Health care staff will ask for a patient's permission every time they need to look at the summary care record.

If the patient is unable to be asked, i.e. they are unconscious, the health care professional may look into the record if it is for the good of the patient but a note will be placed in the medical records to show this.

You can print and complete the form below and bring it to the practice.

      For more information please visit:


Freedom of Information Act Policy

Please click here for our Freedom of Information Act Policy