This privacy notice explains why your GP practice collects information about you, and how that information may be used.
As data controllers, GPs have fair processing responsibilities under the Data Protection Act 1998. This means ensuring that your personal data are handled in ways that are transparent and that you would reasonably expect. The Health and Social Care Act 2012 changes the way that confidential data are processed it is important that you are made aware of these changes, understand that you can object to certain uses, and how to do so.
The health care professionals who provide you with care maintain records about your health and treatment. These records may be electronic, paper, or both and various measures are employed to ensure the security of your records. The information contained in the records is used for your direct care and kept confidential. However, we may be required to disclose your personal information if it is required by law, is justified in the public interest, or you consent for the use for other purposes.
Other reasons why your data may be disclosed are for use for statistical purposes where the information will not be able to identify you, or for research purposes for which your consent will be requested. Under the Health and Social Care Act 2012 the Health and Social Care Information Centre can request personal confidential information from your GP practice without asking for your consent first.
Your data may also be shared with other healthcare professionals who provide you with care through local integrated care services. Your permission to share your data between the services will be requested, although refusing permission may impact your care. If this is the case your doctor will be able to explain how this could affect your care.
Risk stratification is a process for identifying and managing patients who are at high risk of requiring emergency or urgent care. Typically this is because patients have a long term condition such as COPD, cancer or other medical condition at risk of sudden worsening. NHS England (the national Commissioning Board) encourages GPs to use risk stratification tools as part of their local strategies for supporting patients with long-term conditions and to provide care plans and planned care with the aim to prevent avoidable admissions or other emergency care.
Information about you is collected from a number of sources including NHS Trusts and from this GP Practice. A risk score is then arrived at through an analysis of your de-identified information using Johns Hopkins ACG software via GEMIMA as the data processor and is provided back in an identifiable form to your GP or member of your care team as data controller. Risk stratification enables your GP to focus on preventing ill health and not just the treatment of sickness. If necessary your GP may be able to offer you additional services.
Please note that you have the right to opt out of Risk Stratification.
Should you have any concerns about how your information is managed, or wish to opt out of any data collection at the Practice, please contact the practice, or your healthcare professional to discuss how the disclosure of your personal information can be limited. Patients have the right to change their minds and reverse a previous decision. Please contact the practice, if you change your mind regarding any previous choice.
We are committed to protecting your privacy and will only use data collected lawfully in accordance with the Data Protection Act 1998, Human Rights Act, the Common Law Duty of Confidentiality, and the NHS Codes of Confidentiality and Security. The only staff who have access to your data are those with a legitimate reason to do so, and is controlled by multiple levels of security.
The Data Protection Act 1998 gives you the right to view or access information that the GP practice holds about you. This is known as ‘the right of subject access’. Under this right you are entitled to have a description of the information, explanation of why it is held, who it could be disclosed to, and you are entitled to a copy of the information. If you would like to make a ‘subject access request’, please contact the practice manager in writing.
If you would like further information about how your information is used by the GP practice, please contact the practice manager, or view the Fair Processing Notice on the practice notice board or the practice website.
The practice is registered as a data controller under the Data Protection Act 1998 – the registration number is Z5594621 and can be viewed online in the public register at http://www.ico.gov.uk/