GP Connect
Published on: 22nd June 2020 | Updated on: 25th June 2026
GP Connect (also known as NHS Direct Care APIs) is an NHS service that helps pharmacy teams and other authorised healthcare staff safely share and view electronic health records.
It allows different NHS IT systems to connect, so you can access key information when you need it and support better patient care.
What GP Connect does
GP Connect includes:
- Access Record: lets authorised staff view a patient’s GP record;
- Update Record: lets authorised staff send information back to the patient’s GP record; and
- Appointment Management: allows appointment information to be shared and managed across systems.
How this affects pharmacy teams
GP Connect is being used to support services such as Pharmacy First.
IT system suppliers are developing solutions that use:
- Access Record, to view relevant patient information; and
- Update Record, to share consultation outcomes with GP practices.
Some IT system suppliers have already started rolling out Update Record functionality.
Data security responsibilities
Your responsibilities as a data controller do not change when using GP Connect.
You must continue to meet data protection requirements, including:
- being transparent about how patient data is used;
- ensuring patients understand their information may be shared for their care; and
- following all relevant legal and regulatory requirements.
GP Connect is approved nationally as a safe and secure way to share clinical information.
Patients’ data is shared under the legal basis of implied consent for direct care. This means you should make sure patients:
- know how their data is being used; and
- can access clear privacy information.
Privacy notice alignment with GP Connect
To use GP Connect, you must also:
- complete the Data Security and Protection Toolkit each year; and
- ensure your pharmacy processes meet data protection standards.
Our patient privacy notice template explains how information may be shared with the NHS and other healthcare professionals. You can use this template to cover GP Connect.
Available versions:
- Privacy or transparency notice wording (for websites or patient leaflets);
- Large-print version; and
- A4 version.
The template includes wording such as:
“Your care: providing pharmacy services and care to you and, as appropriate, receiving service and health records information if you have selected our pharmacy and sharing your information with your GP and others in the wider NHS.”
Joint sign-up for Pharmacy First and GP Connect (up to 2025)
Pharmacy owners who signed up to the Pharmacy First service during 2025 or before through the Manage Your Service (MYS) system have already confirmed they will use GP Connect where required.
Joint sign-up for GP Connect (2026 onwards): Eight-step process
To use GP Connect, your pharmacy must sign the National Data Sharing Arrangement (NDSA).
You should only complete this when your system supplier asks you to.
They will use this to activate GP Connect in your system.
Before you start
Take a few minutes to check you are ready. This will prevent delays later.
Read the NHS guidance:
You should have:
- A valid DSPT submission
- A published privacy notice (for patients)
- Your ODS code
- Agreement from a senior signatory (e.g. DPO or Caldicott Guardian)
Step-by-step process
- Start your application
Go to:
Select Apply now once you have reviewed the guidance.
- Select your system supplier
Choose your pharmacy IT system supplier from the list.
✔ Only approved suppliers will appear
✔ If your supplier is not listed, contact them before continuing
- Select GP Connect services
Choose the GP Connect services your pharmacy will use.
For example:
- Access Record (HTML)
- Send Document
Your choices will depend on what your system supports.
- Enter your pharmacy details
Enter your ODS code and select Find organisation.
✔ Make sure this matches:
- Your NHS Spine configuration
- Your DSPT submission
If unsure, check your ODS code:
- Select your reason for access
Choose why your pharmacy needs GP Connect.
Most pharmacies will select:
- Pharmacy / Primary Care
If you select Shared Care Record, you must provide extra details. Missing this is a common cause of delays.
- Add your privacy notice
Enter the link to your pharmacy’s privacy notice.
✔ This must be accessible to patients
✔ This is a DSPT requirement
You can find guidance here:
- Confirm your compliance
You will be asked to confirm that your pharmacy:
- Meets data protection requirements
- Has completed DSPT
- Will use GP Connect for direct care only
Review carefully before continuing.
- Sign and submit
A senior responsible person must sign on behalf of your pharmacy.
This is usually your:
- Data Protection Officer (DPO)
- Caldicott Guardian
- Senior Information Risk Owner (SIRO)
Submit the form to complete your application.
What happens next
- You will receive an acknowledgement email
- NHS England will review your application
- You will receive:
- Approval confirmation, or
- Feedback if changes are needed
Most applications are processed within a few working days.
Your supplier will then enable GP Connect.
Guidance for IT system suppliers and developers is available from NHS England’s Transformation Directorate website.
For more information on this topic please email it@cpe.org.uk
