Data Sharing and Partners

Updated 7th January 2023 to include reference to practices on the border with Suffolk.

Our practice routinely shares information with other health and social care organisations across the county.

We have signed an ‘Information Sharing Agreement’ to ensure that all sharing partners agree to secure practice when sharing your information.

The agreement is called My Care Record. Find out more about the My Care Record Agreement.

You can find a list of the organisations that share data under the My Care Record Agreement if you click here.

Here is a list of sharing partners across Norfolk.

Primary Care Networks

We are a member of a Primary Care Network (PCN).  This means we will be working closely with a number of Practices and health and care organisations to provide healthcare services to you.

During the course of our work we may share your information with these Practices and health care organisations/professionals.  We will only share this information where it is necessary for healthcare purposes.

When we do this, we will always ensure that appropriate agreements are in place to protect your information and keep it safe and secure. This is also what the Law requires us to do.

We work together on;

  • Reviewing medication across our network​

  • Improving Access to Primary Care

  • Enhancing the Care Provided in Care Homes

Below is a list of the Primary Care Networks across the county. You can find out which organisations (including your GP practice) have come together to form a network and share healthcare information in order to deliver services;

Breckland Alliance Primary Care Network

School Lane Surgery

Coastal Primary Care Network

Vida Healthcare

Great Massingham Surgery

Docking Surgery

Grimston Medical Centre

Heacham Group Practice

Burnham Market Surgery

Fens and Breck Primary Care Network

Feltwell Surgery

Boughton Surgery

Watlington Medical Centre

Upwell Health Centre

Terrington St John’s Surgery

Terrington St Clement’s Surgery

Great Yarmouth & Northern Villages Primary Care Network

East Norfolk Medical Practice

The Park Surgery

Coastal Villages

Fleggburgh Surgery 

Ketts Oak Primary Care Network

Wymondham Medical Centre

Humbleyard Practice

Windmill Hill Medical Centre

Hingham Surgery

East Harling & Kenninghall Medical Practice


Kings Lynn Primary Care Network

Vida Healthcare

St James Medical Practice

Gayton Road Health Centre

St Augustines Surgery

Fairstead Surgery

Southgates Medical Centre & Woottons Surgery


Mid Norfolk Primary Care Network

Elham Surgery

Mattishall Surgery

NN1 Primary Care Network

Fakenham Medical Practice

Holt Medical Centre

Sheringham Medical Practice

Wells Health Centre

NN2 Primary Care Network

Paston Surgery

Cromer Group Practice

Aldborough Surgery

Mundesley Medical Centre

Birchwood Surgery

NN3 Primary Care Network

Drayton Medical Practice

Market Surgery

Coltishall Medical Practice

Reepham and Aylesham Surgeries

NN4 Primary Care Network

Stalham Staithe Surgery

Blofield Surgery

Acle Medical Partnership

Brundall Medical Partnership

Ludham and Stalham Green Surgeries

Hoveton and Wroxham Medical Centre


Norwich Primary Care Network

Thorpewood Medical Group

Oak Street Medical Practice

Castle Partnership

East Norwich Medical Partnership
Old Catton Medical Practice  
Lionwood Medical Practice
Roundwell Medical Practice
Taverham Partnership
Hellesdon Medical Practice
Trinity & Bowthorpe Medical Practice
UEA Medical Centre
Wensum Valley Medical Practice
The Coastal Partnership
Bacon Road Medical Centre
Lakenham Surgery
Lawson Road Surgery
Magdalen Medical Practice
Prospect Medical Practice
St Stephens Gate Medical Practice
West Pottergate Medical Practice
Woodcock Road Surgery

SNhIP Primary Care Network


Chet Valley

Church Hill Pulham


Heathgate Medical Practice


Long Stratton Medical Practice

Old Mill and Mill Gates Medical Practice

Parish Fields Practice


South Waveney Alliance Network [SWAN]

Beccles Medical Centre

Bungay Medical Practice

Cutlers Hill Surgery

Longshore Surgery

Sole Bay Health Centre

Swaffham & Downham Market Primary Care Network

Vida Healthcare

The Hollies

Litcham Health Centre

Bridge Street Surgery

Howdale Group Practice

Campingland Surgery

The Plowright Medical Centre

Manor Farm Medical Centre​

If you would like to more information about Primary Care Networks and information sharing, please contact our Data Protection Officer on

Sharing for practices on the border with Suffolk.

If our practice is listed below, we may also be involved in sharing projects or arrangements in Suffolk.

  • Alexandra Road Surgery
  • Andaman Surgery
  • Beccles Medical Centre
  • Bridge Road Surgery
  • Bungay Medical Centre
  • Cutlers Hill Surgery
  • High Street Surgery
  • Kessingland Surgery
  • Kirkley Mill Health Centre
  • Rosedale Surgery
  • Sole Bay Surgery
  • Victoria Road Surgery
  • Grove Surgery
  • School Lane Surgery
  • Thetford Healthy Living Centre
  • Watton Medical Practice


To find out more go to Sharing in Suffolk

Norfolk and Waveney Integrated Care System - Privacy Notice for Secondary Use of Data

Who we are?


Norfolk and Waveney Integrated Care System (ICS) is a collaboration of local health and care organisations working together to improve the health, wellbeing and care of people living in Norfolk and Waveney. Many of these services are Commissioned by NHS Norfolk and Waveney Integrated Care Board (ICB).


Our partnership includes local GP practices, hospitals, community care providers, social services, urgent and emergency care teams, and mental health care providers.


This includes:


  • East Coast Community Healthcare Community Interest Company
  • Integrated Care 24 (IC24)
  • James Paget University Hospitals NHS Foundation Trust
  • NHS Norfolk and Waveney Clinical Commissioning Group
  • Norfolk and Norwich University Hospitals NHS Foundation Trust
  • Norfolk and Suffolk NHS Foundation Trust
  • Norfolk Community Health and Care NHS Trust
  • Norfolk County Council
  • Queen Elizabeth Hospital King’s Lynn NHS Foundation Trust


What is the ‘secondary use of data’?


One of our aims is to make better use of data and digital technology to help us manage the local health and social care system. As this use of data is not for your direct care, e.g., during an appointment with a doctor, this is called the secondary use of data. Examples of this include Population Health Management and Risk Stratification. This use allows us to provide the services that are needed, in the right areas, helping to promote good health and social care.


As part of providing the services that are needed, you are not subject to automated processing, including profiling, which may produce legal effects concerning you or similarly, affect you.


What is a Privacy Notice?


This Privacy Notice tells you about the data we collect and hold about you, what we do with it, how we look after it and our intentions on sharing your data to support your health and social care.


This notice is focused on how our local health and care system uses data collectively within Norfolk and Waveney. Specific details of how each organisation uses data can be found in their Privacy Notices, which can be found on their websites.



Our commitment to Data Protection and Confidentiality


UK data protection legislation grants individual’s certain information rights, designed to enable citizens to be informed about how their data will be used, and provide an opportunity to object, restrict, remove, or rectify any personal data about them.


This Notice describes how the Norfolk and Waveney integrated Care System intend to use your information, and provide assurance that your information will be:


  • Processed lawfully
  • Restricted to only the health and social care data that our partner organisations hold about you
  • Stored in a secure environment
  • Restricted to authorised health and social care staff
  • Only be used to inform care and how we manage our local health and social care system


If you would like more information about how a specific organisation within this partnership processes your personal data, including how you can exercise your privacy rights, please refer to Privacy Notices on their website. A list of our members’ websites may be found[insert link to main NWICS site].



How will the NWICS use your information?


Across the NWICS, our aim is to manage the secure transfer of the data it collects, processes and stores in an effective and efficient way that will be used to support the care we provide. NWHCP has developed a centralised data store called the Norfolk and Waveney Data Hub which will enable us to consolidate data in a single secure environment. We can then link data from an individual’s interactions with health and care professionals and create a single record that can be used for management of our health and social care system.


The Data Hub is a Microsoft Azure cloud-based information system, hosted by Norfolk and Waveney ICB. It enables carefully authorised health and social care staff to securely access, process and store your data. The Data Hub does not create new information about you; it is a store to collate existing information created by individual health and social care providers.


What personal data will we use?


Participating organisations within the NWICS will securely transfer the following personal data into the Data Hub. The personal data will be the information which you have provided to these organisations along with any reports or reviews you have made following that information.


  • Demographic information such as: name, address, phone number
  • NHS number
  • Medical conditions
  • Treatment provided and contact the individual has had with the organisation
  • Care plans
  • Emergency department treatment
  • Discharge summaries
  • Medication reviews
  • Physical and mental health reports
  • Care and support plans, and reviews
  • Social care records
  • Results of investigations, such as x-rays, scans, and laboratory tests


Please note that this list is not exhaustive, and the data provided will vary between organisations depending upon the services they provide.


How will we process your data?


To better manage local health and social care services, the Data Hub helps us bring together data from all our member organisation into one place. Every request to use your data will require approval from an NWICS governance body. To ensure that we use this data responsibly, it will only be used with the following principles:


  • Anonymisation Where possible, data will be anonymised before it is used. We do not always need to identify you when using data to plan services. We need to know about the prevalence of health and social care needs – not who specifically needs it.


  • Pseudonymised Second. If we cannot use anonymised data, we will use data where a known reference number replaces your identifiable data. This reference number, and who it relates to, is only known by key members of staff. The advantage of pseudonymised data is that we can reidentify people when or if it is clinically necessary to do so. Where this happens, only staff involved in your care will be told of this.


  • Identifiable Last. In very exceptional circumstances, we may use your data for clinical research, subject to ethical review and This is granted by the Confidentiality Advisory Group, which is part of the NHS Health Research Authority, who have a legal authority under the NHS Act 2006.


Please note that Section 171 of the Data Protection Act 2018 states: It is an offence for a person knowingly or recklessly to re-identify information that is de-identified personal data without the consent of the controller responsible for de-identifying the personal data.


The lawful basis for processing your data


The NWICS will use the following GDPR Articles as the lawful reasons for processing your personal data:


  • 6(1)(d) – processing is necessary to protect the vital interests of the data subject or of another natural person
  • 6(1)(e) – Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller


  • 9(2)(h) – …the provision of health or social care or treatment or the management of health or social care systems and services


  • 9(2)(i) – processing is necessary for reasons of public interest in the area of public health


In addition to these lawful reasons, the NHS Act 2006 sets out the legal requirements of organisations delivering services under an NHS Standard Contract.


Overseas transfers of personal data


The Data Hub will be hosted on Microsoft Azure data centres located in London and Cardiff. Your personal data will not be transferred outside of the UK.


How long do we keep personal data?

Your personal data is kept securely and in line with the Records Management Code of Practice for Health and Social Care 2021.



National Data Opt-Out


The National Data Opt-Out was introduced on 25 May 2018, enabling people to opt out from the use of their data for research or planning purposes, in line with recommendations of the National Data Guardian in their Review of Data Security, Consent and Opt-Outs.

You can view or change your National Data Opt-Out choice at any time by using the online service at or by clicking on ‘Your Health’ in the NHS App and selecting “Choose if data from your health records is shared for research and planning”.


As your opt-out choice is recorded against your NHS Number, we can ensure that your choice is respected. The NWICS will not use your data where you have indicated that you do not want your data used for planning and research purposes.


Your information rights and further information

To find out more information about your information rights, please:


  • Contact the Data Protection Officer for our member
  • Email the NWHCP Information Governance Service Team
  • To make a complaint about how we process your data, please contact us If you are unhappy with our response or how we have used your data, you can make a complaint to the ICO via:
  • Contact the Information Commissioner’s Office

Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF Tel: 01625 545 740