General Data Protection Regulation (GDPR) - Privacy Notice


The Data Protection Act 2018 became law on the 25 May 2018. It explicitly brought the EU General Data Protection Regulation (GDPR) 2016/EU679 into UK law as the "Applied GDPR"; we refer to these and other acts as "the data protection legislation".

A requirement of the data protection legislation is that we inform individuals about whom we hold data (data subjects) about our processing. A Privacy Notice is information given to ensure data subjects are aware of how their data is being used or shared.

What is this Privacy Notice about?

Privacy Notice is the conditions which have to be met for any activity involving personal data or special categories of personal data to be lawful. Being transparent and providing accessible information to individuals about how an organisation will use their personal information is a key element of Data Protection Legislations. The most common way to provide this information is in a Privacy Notice.

This Privacy Notice is part of our programme to make the data processing activities we are carrying out in order to meet our healthcare obligations transparent.

The Privacy Notice tells you about information we collect and hold about you, the legal basis for collecting and holding the information, what we do with it, how we keep it secure (confidential), who we might share it with and what your rights are in relation to your information.

Who we are

Andover Medical Centre is a single-site Practice, all on one level. The practice has three GP Partners who are supported by a strong clinical and admin team.

Identity and Contact details of the Data Controller and Data Protection Officer

Data Controller:

Andover Medical Centre
270-282 Hornsey Road
London N7 7QZ
020 7281 6956

Data Protection Officer: Steve Durbin

Organisations we share your personal information with

We share information about you other GPs, NHS acute or mental health Trusts, local authority, community health providers, pharmacists, commissioning organisations, medical research organisations and some specific non NHS organisations for the purposes of  direct and indirect delivery of care.

Privacy Notice.docx