Data Protection :: Turriff Medical Practice

Obtaining Test ResultsData Protection

What GDPR means for Patients

Your Data: Your Medical Records Are Processed for Direct Patient Care

  • Must be processed lawfully, fairly and transparently
  • Collected for specific, explicit and legitimate purposes
  • Limited to what is necessary for the purposes for which it is processed
  • Must be accurate and kept up to date
  • Must be held securely
  • Retained for as long as is necessary for the reason it was collected

Your Rights:

  • To be informed about how your own data is used
  • Have the right to request access to your own data
  • Have the right to request incorrect information is changed
  • To restrict how your data is used within reason
  • The right to object to personal information being processed

How we use your medical records

  • This practice handles medical records according to the laws on data protection and confidentiality.
  • We share medical records with health professionals who are involved in providing you with care and treatment. This is on a need to know basis and event by event.
  • Some of your data is automatically copied to the Emergency Care Summary.
  • We may share some of your data with local out of hours / urgent or emergency care service.
  • Data about you is used to manage national screening campaigns such as Flu, Cervical cytology and Diabetes prevention.
  • Data about you, usually de-identified, is used to manage the NHS and make payments.
  • We share information when the law requires us to do, for instance when we are inspected or reporting certain illnesses or safeguarding vulnerable people.
  • Your data is used to check the quality of care provided by the NHS.
  • We may also share medical records for medical research.

Further Information

A Folder containing the following information is available in the waiting area at Turriff and Cuminestown.

  • Who can Access your GP Record
  • Confidentiality
  • The Right to Access
  • The Right To Object
  • The Right to Rectification
  • Privacy Statements

Subject Access Requests


  • 28 Days from time of ID and Consent confirmed
  • Can be extended 2 - 3 months in certain circumstances but we will keep you informed of our progress


  • No fee for initial request
  • Fee may apply if repeated or excessive requests


  • Complete Form at Reception or click here to download our form
  • Provide consent and Identification
  • Return completed form to Reception
  • Our Receptionist will check your ID and consent
  • The Information you require will be printed / copied as appropriate
  • Our GPs will review the information and redact third party info and anything they feel may be detrimental to the patient
  • Our Reception Staff will contact you to advise your documents are ready for collection
  • Patients must collect the documents themselves
  • ID will be required at collection time
  • Signature will be required confirming the security of the information is the patients responsibility once collected

Young People Under 16 - Confidentiality Your Rights

Young people with capacity have the legal right to access their own health record and can allow or prevent access by others, including their parents. Scottish law deems 12 to be the legal age of capacity. A child might of course achieve capacity earlier or later. An NHS guide for young people under 16 confidentiality - your rights can be accessed by clicking on the the following link:

NHS Inform - Confidentiality of Under 16s (English) [PDF]

Contact Details
Turriff Medical Practice
Balmellie Road
AB53 4DQ
Tel: 0345 337 6320
Fax: 01224 661659
NHS Grampian
NHS Grampian NHS services for the half-million people who live in Grampian are provided by NHS Grampian, and are overseen by one single NHS Board.