GDPR

Privacy Notice

GDPR - Everything you need to know

General Practice Privacy Notice

The information we hold on you

Our Practice keeps data on you relating to who you are, where you live, contact details, what you do, your family, possibly your friends, your employers, your problems and diagnoses, the reasons you seek help, your appointments, if you have a carer, where you are seen and when you are seen, who by, referrals to specialists and other healthcare providers, tests carried out here and in other places, investigations and scans, treatments and othercomes of treatments, your treatment history, the observations and opinions of other healthcare workers, within and without the NHS as well as comments and aide memories reasonably made by healthcare professionals in this practice who are appropriately involved in your health care.

When registering for NHS care, all patients who receive NHS care are registered on a national database, the database is held by NHS Digital, a national organisation which has legal responsibilities to collect NHS data.

Identifying patients who might be at risk of certain diseases

• Your medical records will be searched by a computer programme so that we can identify patients who might be at high risk from certain diseases such as heart disease or unplanned admissions to hospital.
• This means we can offer patients additional care or support as early as possible.
• This process will involve linking information from your GP record with information from other health or social care services you have used.
• Information which identifies you will only be seen by this practice.

Who we share information with

As GPs, we cannot handle all your information ourselves, so we need to delegate this responsibility to others within the practice and sometimes with other organisations.

If you care requires treatment outside the practice, we will exchange with those providing such care and treatment whatever information may be necessary to provide safe, high quality care.

Once you have seen the care provider, they will normally send us details of the care they have provided you with, so that we can understand your health better.

Your consent to this sharing of data, within the practice and with those others outside the practice is assumed and is allowed by the Law, however we will gladly discuss this with you in detail if you would like to know more.

The Practice Team (clinicians, administration and reception staff), only access the information they need to allow them to perform their function and fulfill their roles.

You have the right to object to our sharing your data in these circumstances but we have an overriding responsibility to do what is in your best interests.

We are required by Articles in the General Data Protection Regulations to provide you with the information in the following following 9 subsections (PDF, 321KB)

London Care Record

This practice uses a shared record system called the London Care Record. The London Care Record is a secure view of your health and care information and lets health and care professionals involved in your care see important details about your health when and where they need them. Having a single, secure view of your information helps speed up communication between care professionals across London, improves the safety of care and can save lives.

London Care Record can only be lawfully looked at by staff who are directly involved in your care. Your information isn’t available to anyone who doesn’t need it to provide treatment, care and support to you. Your details are kept safe and won’t be made public, passed on to a third party who is not directly involved in your care, used for advertising or sold. For more information please read the London Care Record privacy notice for South East London here: The London Care Record - South East London ICS (selondonics.org)

Opting out of the London Care Record

You have the right to object to your information being available through London Care Record. Although patients have the right to object and request restrictions on sharing their records, there may be instances where this request will not be upheld due to a clinical need as determined by the direct care giver. Please discuss this with your GP/ health and social care worker and you can find further information in this London Care Record (EXTERNAL DOWNLOAD LINK) leaflet.

For further information and advice about data protection or your right to object to sharing your data you can contact the team at Lewisham and Greenwich Trust who manage the London Care Record for South East London www.lewishamandgreenwich.nhs.uk/london-care-record or you can call 020 3192 6011 and leave your name and number for someone to contact you.

If you have already requested to stop sharing on ConnectCare/Local Care Record in South East London, then you will not have to request this again for London Care Record.

Hayes Wick PCN Enhanced Access

The surgery is working with Hayes Wick Primary Care Network to offer enhanced services providing patients access to extended hours appointments at other GP surgeries in the area. As part of this we are required to provide all patients with a privacy notice of how their data will be used by these services. Please review the below document to learn more about the PCN and view the Enhanced Access Privacy Notice.

Privacy Notice Enhanced Access (DOCX, 33KB)

Privacy Notice - Research

Identifiable data will be shared with researchers with either explicit consent or, where the law allows, without consent.

The lawful justifications are.

Article 6(1) (a) “the data subject has given consent to the processing of his or her personal data for one or more specific purposes”.

Article 6(1 )(e) may apply “necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.”

Article 9(2) (a) – ‘the data subject has given explicit consent…’

or

Article 9(2) (j) – ‘processing is necessary for… scientific or historical research purposes or statistical purposes in accordance with Article 89(1) based on Union or Member States law which shall be proportionate to the aim pursued, respect the essence of the right to data protection and provide for suitable and specific measures to safeguard the fundamental rights and interests of the data subject’.

or

Article 9(2)(h) – ‘processing is necessary for the purpose of preventative medicine the provision of health or social care or treatment or the management of health or social care systems and services.