Just used it for the first time at my new surgery - old surgery you were given the entire list of options for day, month and year of birth so you had to get them right to be shown your appointment time and check in. Also it was just first name initial and then surname AFTER you had put in your day, month and year from the full list.
New surgery asks you to select day and month only and then gives you a list of several different years. I misclicliked today and saw a full name, postcode and already had entered their full date of birth.
Do you think that’s quite a big potential to get a lot of personal details belonging to someone else?