There is a requirement for every NHS organisation and provider to publish a practice privacy notice on their websites which sets out why the General Practice collects information about each patient and how the information is used.
Please see our practice privacy policies below:
Under data protection law we must tell you about how we use your personal information. This includes the personal information that we share with other organisations and why we do so.
This additional privacy notice provides details about the personal information that we are required to share with NHS Digital for its General Practice Data for Planning and Research data collection. There is an associated transparency notice and details of how to opt out are here. Your individual care will not be affected if you choose to opt out.
NHS England has directed NHS Digital to collect and analyse data in connection with physical health checks for people with severe mental illness. The details and the relevant Data Provision Notice can be found here. NHS Digital has also been directed to collect data that will allow the identification of the clinically extremely vulnerable in the context of Covid-19. The details can be found here and the Transparency Notice is also available from this link.
The national data opt-out – Note that this scheme is currently paused nationally and so the following does not yet apply
The practice has been invited to share the following information with our patients:
Information about your health and care helps the NHS to improve your individual care, speed up diagnosis, plan your local services and research new treatments.
The NHS cannot analyse all information on its own, so NHS Digital safely and securely share some with researchers, analysts and organisations who are experts in making sense of complex information.
NHS Digital will collect:
- Data about diagnoses, symptoms, observations, test results, medications, allergies, immunisations, referrals, recalls and appointments, including information about physical, mental and sexual health
- Data on sex, ethnicity, and sexual orientation
- Data about staff who have treated patients
NHS Digital does not collect:
- Name and address (except for postcode, protected in a unique coded form)
- Written notes (free text), such as the details of conversations with doctors and nurses
- Images, letters and documents
- Coded data that is not needed due to its age – for example medication, referral and appointment data that is over 10 years old
- Coded data that GPs are not permitted to share by law – for example certain codes about IVF treatment, and certain information about gender re-assignment
Any other data that could directly identify patients (such as NHS number, date of birth, full postcode) is replaced with unique codes which are produced by de-identification software before the data is shared with NHS Digital.
The process is called pseudonymisation and means that patients will not be identified directly in the data. NHS Digital will be able to use the software to convert the unique codes back that could directly identify patients in certain circumstances, and where there is a valid reason.
If you don’t want your identifiable patient data to be shared for purposes except for your own care, you can register an-opt out with your GP practice by 1 September 2021 which can be found in the links below.
Note that the scheme has been paused nationally and we are not able to provide any further clarification on when/if it will be relaunched.
Patients without internet access can call 0300 303 5678.
The decision to opt-out is down to each individual patient and we like to confirm that your opt-out choices will not affect the care you receive from your surgery.
Websites for further information:
- Your NHS data matters
- Collecting GP data – advice for the public
- General Practice Data for Planning and Research: NHS Digital Transparency Notice
- General Practice Data for Planning and Research (GPDPR)
- Your data matters – British Sign Language
Accessing your GP record
The Data Protection Act gives you the right to see your health records. This is known as the right of access.
You can sign up for secure online Patient Access to view your full GP electronic record.
You can fill in the Subject Access Request form and email it to NHCCG.reports@nhs.net
For more information please read:
Access to medical records policy
Your health and care information is used to manage and improve your personal care. It may also be shared to help in research, planning and the development of better ways of working. Patients are able to control how their information is used and a new national data opt-out process takes effect in October 2021.
Coronavirus (COVID-19) pandemic and your information
The Information Commissioner’s Office (ICO) recognises the unprecedented challenges the NHS and other health professionals are facing during the Coronavirus (COVID-19) pandemic. The ICO also recognise that ‘Public bodies may require additional collection and sharing of personal data to protect against serious threats to public health.’
The Government have also taken action in respect of this and on 20th March 2020 the Secretary of State for Health and Social Care issued a Notice under Regulation 3(4) of The Health Service (Control of Patient Information) Regulations 2002 requiring organisations such as GP Practices to use your information to help GP Practices and other healthcare organisations to respond to and deal with the COVID-19 pandemic.
In order to look after your healthcare needs during this difficult time, we may urgently need to share your personal information, including medical records, with clinical and non-clinical staff who belong to organisations that are permitted to use your information and need to use it to help deal with the Covid-19 pandemic. This could (amongst other measures) consist of either treating you or a member of your family and enable us and other healthcare organisations to monitor the disease, assess risk and manage the spread of the disease.
Please be assured that we will only share information and health data that is necessary to meet yours and public healthcare needs.
The Secretary of State for Health and Social Care initally stated that these measures were temporary and would expire on 30th September 2020. They have now been extended until the end of March 2022.
Please also note that the data protection and electronic communication laws do not stop us from sending public health messages to you, either by phone, text or email as these messages are not direct marketing. It may also be necessary, where the latest technology allows us to do so, to use your information and health data to facilitate digital consultations and diagnoses and we will always do this with your security in mind.
If you are concerned about how your information is being used, please contact our DPO using the contact details provided in this privacy notice.