Access to all patient identifiable information including health records is on a strict need to know basis in accordance with the Caldicott principles, Data Protection Act 1998, NHS Scotland Information Governance Standards and various codes of professional conduct. In July 2006, the Scottish Government issued, NHS HDL: (2006) 41 NHSScotland information sec...