Privacy Notice: Summary
Update: Covid-19 and the use of your information
To look after your healthcare needs during the current coronavirus pandemic, we may need to share your personal information including health and care records with clinical and nonclinical staff who belong to organisations that are permitted to use your information and need to use it to help deal with the Covid-19 pandemic. This means that we may need to share your personal information for the purposes of treating you or a member of your family, and to allow us and other healthcare organisations to monitor the disease, assess risk, track and manage the spread of the disease. We may also need to use your information and health data to enable digital consultations and diagnoses, although we will always do this with your security in mind. We will only share your personal information when it is necessary to meet your needs or to meet public healthcare needs. It may also take us longer to respond to Subject Access requests whilst we focus our efforts on responding to the outbreak. During this period of emergency, opt-outs will not generally apply to the data used to support the Covid-19 outbreak, due to the public interest in sharing information. This includes National Data Opt-Outs. However, in relation to the Summary Care Record, existing choices will be respected.
Some of our staff may need to work from home during this time and may have access to any necessary personal and/or medical information in order to look after your healthcare needs. All staff are required to follow the necessary security policies of the Practice to ensure that all information is kept safe, secure and confidential.
If you are experiencing Covid-19 symptoms we may need to collect specific health data about you. Where we need to do so, we will not collect more information than we require and we will ensure that any information collected is treated with the appropriate safeguards.
Please note that the data protection and electronic communication laws do not stop us from sending public health messages to you, either by phone, text or email, as these messages are not direct marketing.
What type of information do we hold about our patients?
We collect and process the following information about our patients:
- identity details – name, date of birth, NHS number
- contact details – address, telephone, email address
- ‘next of kin’ details – the contact details of a close relative or friend
- details of any carer you may have, or anyone you care for
- details of any appointments with the GPs and nursing staff
- reports from secondary care of any A&E visits, inpatient stays or clinic appointments
- results of any scans, X-rays and pathology tests requested
- details of any diagnosis and treatments given
- details of any longstanding health concerns and conditions;
- details about your health, treatment and care and other relevant information from health professionals, care providers or relatives who care for you
- information about any allergies
- information about any DNAR decisions and any living wills that we know of
- correspondence from other Health and Social Care providers that provide you with services.
We work with a number of Health and Social care organisations and independent treatment centres in order to provide you with the best possible care and options for treatment. Your information may therefore be shared securely to provide continuity of care.
Sharing patient information
We know that good communication with other healthcare professionals involved in your care is beneficial to you, and so we work closely with many organisations in order to provide you with the best possible care. This means that if another healthcare professional or service is involved in your care, it might be appropriate to share information with them in order for you to receive the necessary care.
Your information will be shared between those involved in providing health care services and treatments to you. This includes doctors, nurses and allied health professionals, but may also include administrative staff who deal with booking appointments or typing clinic letters.
Access to information is strictly controlled and restricted to those who need it in order to do their jobs. All of our staff receive annual mandatory training on confidentiality and data security and also have strict contractual clauses within their employment contracts which oblige them to respect data protection and confidentiality.
For more information about who we share information with, the purpose of information sharing, our lawful basis for processing data, and information about your rights as a data subject, please see the full Privacy Notice on our website. You may also ask our reception team for a copy.