We have a legal responsibility to keep confidential all of the information held about you. The obligation that the NHS has, together with the rights that every individual enjoys, are set out in the Data Protection Act 2018 and General Data Protection Regulation (GDPR). Information about you may however need to be shared with others involved in your care from time to time – for example, with a hospital consultant or a district nurse. The sharing of medical information is specifically covered by the Act.