Health records are strictly confidential and information is only passed on with your consent, within the confines of the NHS or by law. Some details are held on computer and the practice is registered under the Data Protection Act. All staff are bound by strict rules of confidentiality.