SCR for patients
If you are registered with a GP practice in England your SCR is created automatically, unless you have opted out. 98% of practices are now using the system. You can talk to your practice about opting out of including Additional Information to do with long term conditions, care preferences or specific communications needs.
Read more patient information on SCR
GP information on creating SCRs and including Additional Information
The SCR is created automatically through clinical systems in GP practices and uploaded to the Spine. It will then be updated automatically. When new patients are registered the practice should check they are happy to have an SCR. An SCR consent preference form is available. Additional Information will be added to the SCR, unless a patient wishes to opt out.
When viewing SCRs, if a health care professional already has access to view SCRs then they require no further RBAC activities or smartcard changes to view SCRs which have Additional Information included.
How to record medicines prescribed elsewhere into the GP practice record
This guidance explains why medicines prescribed elsewhere to a patient’s GP practice must be recorded into their GP practice record and the implications to the Summary Care Record when this has not been done. It also explains what steps GP practices can take to ensure that this information is recorded correctly.
Read more on recording medicines prescribed elsewhere into the GP practice record
The SCR can be viewed by health and care staff, and viewing is also available to community pharmacies. SCRs can be viewed through clinical systems or through the Summary Care Record application (SCRa) on the Spine web portal, from a machine logged in to the secure NHS network, using a smartcard with the appropriate Role Based Access Control codes set.
Read more on viewing SCR and implementing viewing in your organisation
Read more on SCR in community pharmacies
Security and the SCR
Data within the SCR is protected by secure technology. Users must have a smartcard with the correct codes set. Each use is recorded. A patient can make a Subject Access Request to NHS Digital to find out the organisation that accessed their SCR and the date/time of the access. A report is produced and sent to the requester which details Business Message Types including SCR views via SCRa and SCR retrievals via 3rd party viewing systems. The requester is directed to the organisations from which the accesses were made, should they have any concerns with the users who accessed their SCR or if they would like confirmation that a SCR retrieval via a 3rd party viewing system resulted in an end user viewing the SCR.
Patient data is protected by strict information governance rules and procedures. Each organisation using the SCR has at least one privacy officer who is responsible for monitoring access and can generate audits and reports.
A patient can also opt out of having an SCR by returning a completed opt-out form to their GP practice.