The GDPR requires practices to process data fairly and in a transparent manner which is easily accessible and easy to understand.  This means that practices must provide information to patients about how the practice processes patient data in the form of a 'privacy notice'. 

What is GDPR - Patient Information Sheet

Maynard Court Surgery Privacy Notice

Children's Privacy Notice

Subject to access medical information form

Patient consent form to release medical information

Information Governance Policy