Maintenance of personal information

How do we maintain personal information that is held as a health and social care record?

Personal information is held in both paper and electronic format. This is in line with the NHS Records Management Code of Practice for Health and Social Care 2016 and National Archives Requirements

We hold and process information in accordance with the Data Protection Act 2018 (subject to parliamentary approval) as amended by the GDPR 2016.

In addition, everyone working for the NHS must comply with the Common Law Duty of Confidentiality and various national and professional standards and requirements

The Department of Health and the Information Governance Alliance have set out the current retention periods for maintaining a health and social care record.

The information is kept as long as necessary for your health needs and in line with the standards and you can find these on this link, NHS Record Management code of practice:

Non-urgent advice: Our duty

We have a duty to:

  • Maintain full and accurate records of the care we provide to you
  • Keep records about you confidential and secure
  • Provide information in a format that is accessible to you

Page last reviewed: 28 September, 2021