Privacy Notice - How We Use Your Medical Records
Important Information for Patients
- This practice handles medical records in-line with laws on data protection and confidentiality
- We share medical records with those who are involved in providing you with care and treatment
- In some circumstances we will also share medical records for medical research; for example to find out more about why people get ill
- We share information when the law requires us to do so; for example, to prevent infectious diseases from spreading or to check the care being provided to you is safe
- You have the right to be given a copy of your medical record
- You have the right to object to your medical records being shared with those who provide you with care
- You have the right to object to your information being used for medical research and to plan health services
- You have the right to have any mistakes corrected and to complain to the Information Commissioners Office
- For more information on the above, please see our practice Privacy Notice in full, which is available at reception and on our website by clicking this link Fair Processing & Privacy Notice (full)
The Partnership is registered as a data controller under the Data Protection Act 1998. Registration number Z9940741. Our registration can be viewed on-line in the public register at ICO.gov.uk.
Eric Balki is the Data Protection Officer (DPO)
Privacy Notice for children
What is GDPR?
The General Data Protection Regulation is new and it helps us to keep information about you safe.
We have always looked after your information safely but GDPR helps us check we are doing the best job we can.
Who looks after my information?
A person is called a ‘Data Controller’ if they look after your information
Who uses my information?
A person who uses your information for their work is called a ‘Data Processor’
Consent – what’s that?
Consent is where you tell us that you are happy for us to use your data to care for you. If you are under 16, a parent must give your consent for you.
Can anyone see or use my information at the Doctors?
No, only someone who needs your data to care for you is allowed to see or use it. This can be the doctors, nurses or people who support the doctors and nurses in their work.
Do you share my information with anyone else?
We only share your information with other people who might need to care for you (like the hospital) without asking you first.
If someone who isn’t responsible for your care asks for your information, we will ask your parent if it is ok to give it. An example of this might be when someone is organising an activity you would like to do and needs to check if you are well enough to do it.
Can I see the information you have about me?
If you are 13 years old or over, you can ask to see your information. Speak to a receptionist to arrange this.
If you still have a question, please ask the friendly receptionist who will do their best to help you.
Click on the following link for our notice in more detail
COVID-19 and your information
Supplementary Privacy Notice
This notice describes how we may use your information to protect you and others during the Covid-19 outbreak. This is to be read alongside our main Privacy Notice above.
The Health and Social Care system is facing significant pressures due to the Covid-19 outbreak. Healthcare information is essential to deliver care to individuals, to support Health and Social Care services and to protect public health. Information is also vital in researching, monitoring, tracking and managing the outbreak and in the current emergency it has become even more important to share health and care information across relevant organisations.
Existing law which allows confidential patient information to be used and shared appropriately and lawfully in a public health emergency is being used during this outbreak.
Using this law the Secretary of State requires ALL NHS services including, Public Health England, local authorities, health organisations and GPs to share confidential patient information to respond to the Covid-19 outbreak. Any information used or shared during the Covid-19 outbreak will be limited to the period of the outbreak unless there is another legal basis to use the data.
Summary Care Records
All patients registered with a GP have a Summary Care Record, unless they have chosen not to have one. The information held in your Summary Care Record gives registered and regulated healthcare professionals, away from your usual GP practice, access to information to provide you with safer care, reduce the risk of prescribing errors and improve your patient experience.
Your Summary Care Record contains basic (Core) information about allergies and medications and any reactions that you have had to medication in the past.
Some patients, including many with long term health conditions, previously have agreed to have Additional Information shared as part of their Summary Care Record. This Additional Information includes information about significant medical history (past and present), reasons for medications, care plan information and immunisations.
Change to information held in your Summary Care Record
In light of the current emergency, the Department of Health and Social Care has removed the requirement for a patient’s prior explicit consent to share Additional Information as part of the Summary Care Record.
This is because the Secretary of State for Health and Social Care has issued a legal notice to healthcare bodies requiring them to share confidential patient information with other healthcare bodies where this is required to diagnose, control and prevent the spread of the virus and manage the pandemic. This includes sharing Additional Information through Summary Care Records, unless a patient objects to this.
If you have already expressed a preference to only have Core information shared in your Summary Care Record, or to opt-out completely of having a Summary Care Record, these preferences will continue to be respected and this change will not apply to you. For everyone else, the Summary Care Record will be updated to include the Additional Information. This change of requirement will be reviewed after the current coronavirus (COVID-19) pandemic.
Why we have made this change
In order to look after your health and care needs, health and social care bodies may share your confidential patient information contained in your Summary Care Record with clinical and non-clinical staff in other health and care organisations, for example hospitals, NHS 111 and out of hours organisations. These changes will improve the healthcare that you receive away from your usual GP practice.
Your rights in relation to your Summary Care Record
Regardless of your past decisions about your Summary Care Record preferences, you will still have the same options that you currently have in place to opt out of having a Summary Care Record, including the opportunity to opt-back in to having a Summary Care Record or opt back in to allow sharing of Additional Information.
You can exercise these rights by doing the following:
- Choose to have a Summary Care Record with all information shared. This means that any authorised, registered and regulated health and care professionals will be able to see a detailed Summary Care Record, including Core and Additional Information, if they need to provide you with direct care.
- Choose to have a Summary Care Record with Core information only. This means that any authorised, registered and regulated health and care professionals will be able to see limited information about allergies and medications in your Summary Care Record if they need to provide you with direct care.
- Choose to opt-out of having a Summary Care Record altogether. This means that you do not want any information shared with other authorised, registered and regulated health and care professionals involved in your direct care. You will not be able to change this preference at the time if you require direct care away from your GP practice. This means that no authorised, registered and regulated health and care professionals will be able to see information held in your GP records if they need to provide you with direct care, including in an emergency.
To make these changes, you should inform your GP practice or complete this form and return it to your GP practice.
National Data Opt-Out
During this period of emergency, patient opt-outs will not generally apply to the data used to support the Covid-19 outbreak, due to the public interest in sharing information. This includes National Data Opt-out.
In order to look after your health and care needs we may share your confidential patient information including health and care records with authorised clinical and non-clinical staff in other
care settings, for example neighbouring GP practices, hospitals and NHS 111. In order to do this we are using a secure NHS Digital service called GP Connect. The NHS 111 service will also be able to book appointments for you into your GP practice or other specialised services that may be available in your area.
Research for COVID 19
Under the current changes to law we are required to take part in Research for COVID 19.
We may also use the details we have to send public health messages to you, either by phone, text or email.
We are also required to share personal/confidential patient information with health and care organisations and other bodies engaged in disease surveillance for the purposes of protecting public health, providing healthcare services to the public, monitoring and managing the outbreak.
During this period of emergency we may also offer you a consultation via telephone or videoconferencing. By accepting the invitation and entering the consultation you are consenting to this. Your personal and confidential patient information will be safeguarded in the same way it would with any other consultation.
NHS England and Improvement and NHSX have developed a single, secure store to gather data from across the health and care system to help with the Covid-19 response. This includes data already collected by NHS England, NHS Improvement, Public Health England and NHS Digital.
New data will include 999 call data, data about hospital occupancy and A&E capacity data as well as data provided by patients themselves. All the data held in the platform is subject to strict controls that meet the requirements of data protection legislation.
In such circumstances where you tell us you are experiencing Covid-19 symptoms we may need to collect specific health data about you. Where we need to do so, we will not collect more information than we require and we will ensure that any information collected is treated with the appropriate safeguards.
Changes to this privacy notice
This notice may be amended at any time, so please review it frequently. The date at the top of this page will be amended each time this notice is updated.