We as a practice are covered by the Data Protection Act 2018. The act covers paper and computer records. We as a practice use both. All our administration and clinical staff have signed a confidentiality statement.
Anything discussed with a doctor is kept private except on a need to know basis with fellow health care professionals.