As you maybe aware The General Data Protection Regulation (GDPR) becomes law on 24th May 2018. This is a regulation protecting confidentiality and sensitive information.
Please see these two documents for further information
How we use your information
GDPR Privicy notice for patients
Additional information on the use of your records due to the COVID outbreak can be found here