Personal Data

The following IT systems are in use at the practice:

  • Referral Management (using NHS numbers in referrals)
  • Electronic Appointment Booking (the facility to book routine appointments online and, similarly, to cancel appointments
  • Online booking of repeat prescriptions
  • Summary Care Record (uploading details of your current medication and allergies to the national “spine” so that these are available for doctors involved in your care elsewhere)
  • GP to GP transfers (the electronic transfer of records from practice to practice when you re-register
  • Patient Access to records (the facility to view your medical records online).

If you are not already registered for online access and would like to be please complete our online form.

If you would like access to your medical records enabled or would like to opt out of the local or national summary care record, please contact reception.

DPO Update

Technical Solution

Pseudonymisation

Purpose: Personal confidential and special category data in the form of medical record, is extracted under contract for the purpose of pseudonymisation. This will allow no patient to be identified within the data set that is created. SCWCSU has been commissioned to provide a data processing service for the GPs, no other processing will be undertaken under this contract.

 

Legal Basis: Under UKGDPR the legitimate purpose for this activity is under contract to provide assistance.

Article 6(1)(e); “necessary… in the exercise of official authority vested in the controller’ And Article 9(2)(h) Health data as stated below

 

Processor: SCW CSU

Shared Care Record

Purpose: In order for the practice to have access to a shared record, the Integrated Care Service has commissioned a number of systems including GP connect, which is managed by NHS Digital, to enable a shared care record, which will assist in patient information to be used for a number of care related services. These may include Population Health Management, Direct Care, and analytics to assist with planning services for the use of the local health population. Where data is used for secondary uses no personal identifiable data will be used.

Where personal confidential data is used for Research explicit consent will be required.

 

Legal Basis: Under UK GDPR Article 6(1)(e); “necessary… in the exercise of official authority vested in the controller’

And Article 9(2)(h) Health data as stated below

 

Processor: Plexus, NHS Digital, ESHT, ICS member providers