how we use your personal information
this notice explains why the practice collects information about you and how that information may be used.
the health care professionals who provide you with care maintain records about your health and any treatment or care you have received previously (e.g. hospital, gp surgery, walk-in clinic, etc.). these records help to provide you with the best possible healthcare.
nhs health records may be electronic, on paper or a mixture of both, and we use a combination of working practices and technology to ensure that your information is kept confidential and secure. Records which this gp practice holds about you may include the following information;
details about you, such as your address, legal representative, emergency contact details
any contact the surgery has had with you, such as appointments, clinic visits, emergency appointments, etc.
notes and reports about your health
details about your treatment and care
results of investigations such as laboratory tests, x-rays etc
relevant information from other health professionals, relatives or those who care for you
in accordance with the nhs codes of practice for records management, your healthcare records will be retained for 10 years after death, or if a patient emigrates, for 10 years after the date of emigration.
to ensure you receive the best possible care, your records are used to facilitate the care you receive. Information held about you may be used to help protect the health of the public and to help us manage the nhs.
information may be used within the gp practice for clinical audit to monitor the quality of the service provided. Some of this information will be held centrally and used for statistical purposes.where we do this, we take strict measures to ensure that individual patients cannot be identified.
sometimes your information may be requested to be used for research purposes – the surgery will always gain your consent before releasing the information for this purpose.
how do we maintain the confidentiality of your records?
we are committed to protecting your privacy and will only use information collected lawfully in accordance with:
the general data protection regulations/data protection act 2018
human rights act 1998
common law duty of confidentiality
records management code of practice for health and social care 2016.
the health and social care act 2012
nhs codes of confidentiality and Information security
information: to share or not to share review -
every member of staff who works for the Practice or another nhs organisation has a legal obligation to keep information about you confidential.
we will only ever use or pass on information about you if others involved in your care have a genuine need for it. we will not disclose your information to any 3rd party without your permission unless there are exceptional circumstances (i.e. life or death situations), where the law requires information to be passed on for example child//adult protection and serious criminal activity.
who are our partner organisations?
we may also have to share your information, subject to strict agreements on how it will be used, with the following organisations or receive information from the following organisations:-
nhs trusts / foundation trusts
nhs commissioning support units
independent contractors such as dentists, opticians, pharmacists
private sector providers
voluntary sector providers
clinical commissioning groups
social care services
nhs digital- health and social care Information centre (hscic)
fire and rescue services
police & judicial services
voluntary sector providers
private sector providers
other ‘data processors’ which you will be informed of
as part of a local initiative, participating GP practices are working more closely with stockport foundation trust. this will involve clinical information being shared between your gp practice and stockport foundation trust community services. patients would normally be informed who your data will be shared with and in some cases asked for explicit consent for this to happen when this is required. this will be done at the point of care and you have an option whether or not your information is accessed. if you change your mind at a later date then you should inform us
we may also use external companies to process personal information, such as for archiving purposes. these companies are bound by contractual agreements to ensure information is kept confidential and secure
high lane medical centre is one of many organisations working in the health and care system to improve care for patients and the public
whenever you use a health or care service, such as attending accident & emergency or using community care services, important information about you is collected in a patient record for that service. collecting this information helps to ensure you get the best possible care and treatment
the information collected about you when you use these services can also be used and provided to other organisations for purposes beyond your individual care for instance to help with:
improving the quality and standards of care provided
research into the development of new treatments
preventing illness and diseases
this may only take place when there is a clear legal basis to use this information. all these uses help to provide better health and care for you, your family and future generations. confidential patient information about your health and care is only used like this where allowed by law.
most of the time, anonymised data is used for research and planning so that you cannot be identified in which case your confidential patient information isn’t needed.
you have a choice about whether you want your confidential patient information to be used in this way. If you are happy with this use of information you do not need to do anything. If you do choose to opt out your confidential patient information will still be used to support your individual care.
to find out more or to register your choice to opt out, please visit www.nhs.uk/your-nhs-data-matters. on this web page you will:
see what is meant by confidential patient information
find examples of when confidential patient information is used for individual care and examples of when it is used for purposes beyond individual care
find out more about the benefits of sharing data
understand more about who uses the data
find out how your data is protected
be able to access the system to view, set or change your opt-out setting
find the contact telephone number if you want to know any more or to set/change your opt-out by phone
see the situations where the opt-out will not apply
you can also find out more about how patient information is used at:
https://www.hra.nhs.uk/information-about-patients/ (which covers health and care research); and
https://understandingpatientdata.org.uk/what-you-need-know (which covers how and why patient information is used, the safeguards and how decisions are made)
you can change your mind about your choice at any time.
data being used or shared for purposes beyond individual care does not include your data being shared with insurance companies or used for marketing purposes and data would only be used in this way with your specific agreement.
health and care organisations have until 2020 to put systems and processes in place so they can be compliant with the national data opt-out and apply your choice to any confidential patient information they use or share for purposes beyond your individual care.
access to personal information
you have a right under the gdpr/dpa 2018 act to request access to view or to obtain copies of what information the surgery holds about you and to have it amended should it be inaccurate. In order to request this, you need to do the following:
your request must be made in writing, - for information from the hospital you should write direct to them
there may be a charge to have any copies of the information held about you
we are required to respond to you within 28 days
you will need to give adequate information (for example full name, address, date of birth, nhs number and details of your request) so that your identity can be verified and your records located
objections / complaints
should you have any concerns about how your information is managed at the surgery, please contact the practice manager. if you are still unhappy following a review by the gp practice, you can then complain to the information commissioners office (ico) via their website (www.ico.org.uk).
change of details
it is important that you tell the person treating you if any of your details such as your name or address have changed or if any of your details such as date of birth is incorrect in order for this to be amended. You have a responsibility to inform us of any changes so our records are accurate and up to date for you.
the gdpr/dpa 2018 requires organisations to register a notification with the information commissioner to describe the purposes for which they process personal and sensitive information.
this information is publicly available on the information commissioners Office website www.ico.org.uk
the practice is registered with the information commissioners ofice (ico).
who is the data controller?
the data controller, responsible for keeping your information secure and confidential is;
dr rcl mathewson.