We have been asked to set up a generic/shared account on our clinical system for use by a team of individuals, is this okay? 

No, generic accounts should not be used as it is not possible to audit these accounts. This can cause issues if there is any dispute in the information updated within the record or in cases of suspected inappropriate access. 

When making referrals WCCG automatically downloads a summary, are we okay to continue sharing this information? 

The summary generated by WCCG does not contain any sensitive health information and is for the purpose of providing direct patient care, therefore this is okay to continue. 

What information should we request on our new patient registration form? Is there a standard form? 

Your ‘Registration Form’ should be guided by your clinical system and the mandatory fields. There may be other optional fields within your system, which you will need to consider whether to collect and populate. Remember you must consider the Caldicott Principle “Use the minimum necessary personal confidential data” and the “Data Minimisation” principle of the UK GDPR when determining what information is required.