Privacy notice
As data controllers, GPs have fair processing responsibilities under the Data Protection Act and GDPR law 2018. This means ensuring that your personal confidential data (PCD) is handled in ways that are safe, transparent and what you would reasonably expect. Please find documents and links below.
Overarching Privacy Policy Version 3
Supplementary COVID-19 Privacy Information
Practice Policy for Patient Online Access
Privacy Notice Care Quality Commission
Privacy Notice for Direct Care inc referral
Privacy Notice Risk Stratification
Privacy Notice for Staff Vaccination Information
Data Protection Officer: Umar Sabat, Data Protection Officer Umar.sabat@ig-health.co.uk
Minuteful Kidney service for patients with diabetes (and/or other conditions)
The data is being processed for the purpose of delivery of a programme, sponsored by NHS Digital, to monitor urine for indications of chronic kidney disease (CKD) which is recommended to be undertaken annually for patients at risk of chronic kidney disease e.g., patients living with diabetes.
The programme enables patients to test their kidney function from home. We will share your contact details with Healthy.io to enable them to contact you and send you a test kit. This will help identify patients at risk of kidney disease and help us agree any early interventions that can be put in place for the benefit of your care. Healthy.io will only use your data for the purposes of delivering their service to you.
If you do not wish to receive a home test kit from Healthy.io we will continue to manage your care within the Practice. Healthy.io are required to hold data we send them in line with retention periods outlined in the Records Management code of Practice for Health and Social Care. Further information about this is available at:
https://minuteful.com/.
Confidentiality
Everyone working for the NHS has a legal duty to keep information about you confidential.
You may be receiving care from other people as well as the NHS. So that we can all work together for your benefit we may need to share some information about you.
We only ever use or pass on information about you if people have a genuine need for it in your and everyone’s interests. Whenever we can we shall remove details that identify you.
The sharing of some types of very sensitive personal information is strictly controlled by law.
Anyone who receives information from us is under a legal duty to keep it confidential.
Under 16s
The duty of confidentiality owed to a person under 16 is as great as the duty owed to any other person. Young people aged under 16 years can choose to see health professionals, without informing their parents or carers. If a GP considers that the young person is competent to make decisions about their health, then the GP can give advice, prescribe and treat the young person without seeking further consent.
However, in terms of good practice, health professionals will encourage young people to discuss issues with a parent or carer. As with older people, sometimes the law requires us to report information to appropriate authorities in order to protect young people or members of the public.
How we share your data – Local & National Schemes
Provision of Information to Third Parties
The practice may share your personal information with other NHS organisations where this is appropriate for your healthcare.
In other circumstances we may approach you for specific consent to release personal information to third parties.
In some circumstances there are statutory or ethical obligations to disclose information to others (such as public health issues) which may not require your consent. However you will be consulted about these in advance unless there is an over-riding public interest in not doing so.
Summary Care Record
What is a Summary Care Record (SCR)?
Your Summary Care Record is an electronic summary of key information from your GP medical record. If you need healthcare away from your usual doctor’s surgery, your SCR will provide those looking after you with this information to help them give you better and quicker care.
This can be especially useful:
- in an emergency
- when you are on holiday
- when your surgery is closed
- at out-patient clinics
- when you visit a pharmacy
Summary Care Record – your 3 options:
You can choose how much information is shared through your Summary Care Record. You are much more likely to reap the benefits of SCR if you choose the enhanced version (option 2).
You can choose to have a ‘core’ Summary Care Record
All patients, unless they have opted out, have a ‘core’ Summary Care Record including basic information about their current medications, allergies, and bad reactions they have had to medicines.
You can choose to have an ‘enhanced’ Summary Care Record
This means your record will contain the ‘core’ information plus extra information that you think would be helpful for the healthcare staff who treat you. You must give your explicit consent for this.
That extra information could include:
- Information about your long term health conditions – such as asthma, diabetes, heart problems or rare medical conditions.
- Your relevant medical history – clinical procedures that you have had, why you need a particular medicine, the care you are currently receiving and clinical advice to support your future care.
- Your healthcare needs and personal preferences – you may have particular communication needs, a long term condition that needs to be managed in a particular way, or you may have made legal decisions or have preferences about your care that you would like to be known.
- Immunisation information – details of previous vaccinations, such as tetanus and routine childhood jabs.
You can choose not to have a Summary Care Record.
Information from your GP record concerning your current medications, allergies and bad reactions to medicines will not be readily available to other services treating you. Fewer than 5% of patients have chosen to opt out.
For more information, or to request an enhanced Summary Care Record, please talk to the staff at your GP practice. You can change your mind about what information you share at any time.
How will having a Summary Care Record help me?
Essential details about your healthcare can be very difficult to remember, particularly when you are unwell. Having an enhanced Summary Care Record means that healthcare professionals treating you will be better informed about you, which will increase the quality of your care.
You may already have seen the benefits of having a core Summary Care Record. One common benefit is when a patient is admitted to hospital and the Clinician treating them is able to see they are allergic to a particular medication and so prescribe an alternative.
How will my information be kept safe?
Your Summary Care Record can only be viewed by authorised staff who have an NHS smartcard with a chip and PIN. They must also ask for your consent to view your Summary Care Record, unless you are unconscious or otherwise unable to communicate and they believe that accessing your record is in your best interest. All access to your Summary Care record is documented and audited by the Privacy Officer of the organisation to ensure it is appropriate.
An enhanced Summary Care Record is not a copy of your whole record. Sensitive information such as fertility treatments, sexually transmitted infections, pregnancy terminations or gender reassignment will not be included, unless you specifically ask for it to be.
Risk stratification
What is risk stratification?
There are two kinds of risk stratification:
The first kind is a process for identifying some patients within a Practice who might benefit from extra assessment or support with self-care because of the nature of their health problems. The process is a mixture of analysis of information by computer followed by review of the results by a clinical team at the Practice.
The analysis can, for example, help predict the risk of an unplanned hospital Admission so that preventative measures can be taken as early as possible to try and avoid it. In the end, it is the clinical team of the GP Practice that will decide how your care is best managed.
The second kind is a process for identifying patterns of ill health and needs across our local population. This will be done by pulling together all the information in an anonymised file (where your identity has been removed) to look at patterns and trends of illness across Leicester, Leicestershire and Rutland as a whole. This will help our Public Health Department and those in the NHS who are responsible for planning and arranging health services across Leicester, Leicestershire and Rutland (known as commissioners) better understand the current and possible future health needs of the local population. This will help them make provision for the most appropriate health services for the people of this area. This group of staff will not be able to identify you as an individual under any circumstances.
In both cases secure NHS systems and processes will protect your health information and patient confidentiality at all times
What information about me will be analysed?
The minimum amount of information about you will be used. The information included is:
- Age
- Gender
- GP Practice and Hospital attendances and admissions
- Medications prescribed
- Medical conditions (in code form) and other things that may affect your health such as height, weight for example.
How will my information be kept secure and confidential?
Information from your GP record will be sent via a secure computer connection to a special location called a ‘safe haven’ at NHS Arden and Greater East Midlands Commissioning Support Unit (NHS Arden & GEM CSU) in Leicester This safe haven carries special accreditation from the NHS. It is designed to protect the confidentiality of your information. There are strict controls in place. It enables information to be used in a way that does not identify you. The GP Practice remains in control your information at all times.
Before any analysis starts, any information that could identify you will be removed and replaced by a number. The analysis is done by computer. The results are returned to the GP Practice. Only your GP Practice can see the results in a way that identifies you.
What will my GP Practice do with the analysis?
The results can help the clinical team decide on some aspects of your future care. For example, if the clinical team at the Practice think that you might benefit from a review of your care, they can arrange this. You may then be invited in for an appointment to discuss your health and treatment. If the Practice thinks you might benefit from referral to a new service, this will be discussed with you firstly.
What if I want to opt out?
If you do not wish this to happen then it is important that you let us know.
How do I enhance my Summary Care Record with additional information?
Patient Information leaflet
How we use your personal records
Access to Records
Request access to your medical records:
Application Form for Online Access
Request copies of your medical records:
iGPR
We use a processor, iGPR Technologies Limited (“iGPR”), to assist us with responding to report requests relating to your patient data, such as subject access requests that you submit to us (or that someone acting on your behalf submits to us) and report requests that insurers submit to us under the Access to Medical Records Act 1988 in relation to a life insurance policy that you hold or that you are applying for. iGPR manages the reporting process for us by reviewing and responding to requests in accordance with our instructions and all applicable laws, including UK data protection laws. The instructions we issue to iGPR include general instructions on responding to requests and specific instructions on issues that will require further consultation with the GP responsible for your care.