DATA SHARING DURING COVID-19
During these exceptional circumstances we want to make it easier for you to understand and provide you with more information about how our GP Practice may seek to collect, use, share and hold information about you in relation to the unprecedented challenges we are facing during the Coronavirus pandemic (COVID-19).
We may collect, use and share your information in response to the Coronavirus which is above and beyond what would ordinarily be collected used, accessed and shared. This is because it will allow front line services to manage and contact the virus. Such information will be limited to what is proportionate and necessary.
PLEASE READ BELOW:
This practice is supporting vital coronavirus (COVID-19) planning and research by sharing your data with NHS Digital. This transparency notice supplements our main practice privacy notice.
The health and social care system is facing significant pressures due to the coronavirus (COVID-19) outbreak. Health and care information is essential to deliver care to individuals, to support health, social care and other public services and to protect public health. Information will also be vital in researching, monitoring, tracking and managing the coronavirus outbreak. In the current emergency it has become even more important to share health and care information across relevant organisations. This practice is supporting vital coronavirus planning and research by sharing your data with NHS Digital, the national safe haven for health and social care data in England.
Our legal basis for sharing data with NHS Digital
NHS Digital has been legally directed to collect and analyse patient data from all GP practices in England to support the coronavirus response for the duration of the outbreak. NHS Digital will become the controller under the General Data Protection Regulation 2016 (GDPR) of the personal data collected and analysed jointly with the Secretary of State for Health and Social Care, who has directed NHS Digital to collect and analyse this data under the COVID-19 Public Health Directions 2020 (COVID-19 Direction).
All GP practices in England are legally required to share data with NHS Digital for this purpose under the Health and Social Care Act 2012 (2012 Act). More information about this requirement is contained in the data provision notice issued by NHS Digital to GP practices.
Under GDPR our legal basis for sharing this personal data with NHS Digital is Article 6(1)(c) - legal obligation. Our legal basis for sharing personal data relating to health, is Article 9(2)(g) – substantial public interest, for the purposes of NHS Digital exercising its statutory functions under the COVID-19 Direction.
The type of personal data we are sharing with NHS Digital
The data being shared with NHS Digital will include information about patients who are currently registered with a GP practice or who have a date of death on or after 1 November 2019 whose record contains coded information relevant to coronavirus planning and research. The data contains NHS Number, postcode, address, surname, forename, sex, ethnicity, date of birth and date of death for those patients. It will also include coded health data which is held in your GP record such as details of:
- diagnoses and findings
- medications and other prescribed items
- investigations, tests and results
- treatments and outcomes
- vaccinations and immunisations
National Data Opt-Out
The application of the National Data Opt-Out to information shared by NHS Digital will be considered on a case by case basis and may or may not apply depending on the specific purposes for which the data is to be used. This is because during this period of emergency, the National Data Opt-Out will not generally apply where data is used to support the coronavirus outbreak, due to the public interest and legal requirements to share information.
Your rights over your personal data
To read more about the health and care information NHS Digital collects, its legal basis for collecting this information and what choices and rights you have in relation to the processing by NHS Digital of your personal data, see:
General Data Protection Regulation
New contractual requirements come into force from 25th May 2018 requiring that all GP Practices should set out key principles about how they hold and process data.
The following documents detail how we use your personal information and what GDPR means for you as a patient:
Fair Processing Notice
Using Health Records, Patient Information Leaflet
The Data Protection Officer for the GP Practice is: Dr Jillian Lowe, Partner.
If you have any queries regarding how we use your data, please speak to the Reception Supervisor in the first instance.
National Data Opt-out
Your Data Matters to the NHS
Information about your health and care helps the NHS to improve your individual care, speed up diagnosis, plan your local services and research new treatments.
In May 2018, the strict rules about how this data can and cannot be used were strengthened. The NHS is committed to keeping patient information safe and always being clear about how it is used.
You can choose whether your confidential patient information is used for research and planning.
If you’re happy for your medical records to be extracted and shared, you don’t need to do anything.
Type 1 Opt-out: medical records held at your GP practice
You can tell your GP practice if you do not want your confidential patient information held in your GP medical record to be used for purposes other than your individual care. This is commonly called a type 1 opt-out. This opt-out request can only be recorded by your GP.
If you choose a Type 1 opt-out, please request an opt out form from Reception
Type 2 Opt-out: information held by NHS Digital
A Type 2 opt-out is an objection that prevents an individual’s personal confidential information from being shared outside of NHS Digital for research and planning.
Previously you could tell your GP surgery if you did not want NHS Digital to share confidential patient information that is collected from across the health and care service for purposes other than your individual care. This was called a type 2 opt-out.
From 25 May 2018 the type 2 opt-out has been replaced by the national data opt-out. Type 2 opt-outs that have been recorded previously have been automatically converted to national data opt-outs.
If you are choosing a type 2 opt-out you are able to record this using one of the following methods:
Telephone: 0300 303 5678
To find out more view the NHS Digital patient Leaflet (https://digital.nhs.uk/services/national-data-opt-out/supporting-patients-information-and-resources)
Patient On-line Services
Bramhall Health Centre currently offers patients’ facilities to:
Book, view, amend,& cancel appointments online.
View and order their repeat prescriptions for drugs, medicines or appliances.
If you do not already have a user name and password for this system – please register for them by collecting an information pack from reception to opt in and consent to this service. After submission of the application and consent forms, you will be given access to the system, and ID will need to be provided for verification purposes. This is a very quick process. If you wish to request access to your full medical record, then this needs to be passed to a GP for review prior to access being given, please allow longer for this to be actioned.
NHS England require practices to utilise the GP2GP messaging technology, which will enable the practice to receive patients clinical records electronically, very quickly, as new patients join the practice. For information follow this link: http://systems.hscic.gov.uk/gp2gp
Summary Care Record
NHS England require that practices enable accurate automated uploads of any changes to a patient’s summary information on a daily basis, to the Summary Care Record (SCR).
Having your Summary Care Record (SCR) available will enable any authorised clinician to treat you without having your full medical record. They will have access to information about any medication you may be taking, and any drugs that you may have a recorded sensitivity or allergy to.
The core SCR record contains such information on the basis of implied patient consent. Additional information can only be uploaded with explicit patient consent and should only be used when required to support patient care in an emergency or urgent situation.
This information should only be viewed in such emergency situations, with the explicit consent of the patient unless the patient is unable to give such consent, (eg: if they are unconscious.)
Bramhall Health Centre makes use of new Summary Care Record. A Summary Care Record is an electronic record, which contains information about the medicines you take, allergies you suffer from and any bad reactions to medicines you have had. Having this information stored in one place makes it easier for specific permitted healthcare staff to treat you in an emergency, or when your GP practice is closed.
If you do not want your medical records to be available in this way then you will need to let us know so that we can update your record.
More information on the Summary Care Record can be seen on our website: www.bramhallhealthcentre.co.uk and at: http://www.nhscarerecords.nhs.uk