How we use your information & Privacy notice

DATA SHARING DURING COVID-19

During these exceptional circumstances we want to make it easier for you to understand and provide you with more information about how our GP Practice may seek to collect, use, share and hold information about you in relation to the unprecedented challenges we are facing during the Coronavirus pandemic (COVID-19).

We may collect, use and share your information in response to the Coronavirus which is above and beyond what would ordinarily be collected used, accessed and shared. This is because it will allow front line services to manage and contact the virus. Such information will be limited to what is proportionate and necessary.

PLEASE READ BELOW:

This practice is supporting vital coronavirus (COVID-19) planning and research by sharing your data with NHS Digital. This transparency notice supplements our main practice privacy notice.

The health and social care system is facing significant pressures due to the coronavirus (COVID-19) outbreak. Health and care information is essential to deliver care to individuals, to support health, social care and other public services and to protect public health. Information will also be vital in researching, monitoring, tracking and managing the coronavirus outbreak. In the current emergency it has become even more important to share health and care information across relevant organisations. This practice is supporting vital coronavirus planning and research by sharing your data with NHS Digital, the national safe haven for health and social care data in England. 

Our legal basis for sharing data with NHS Digital

NHS Digital has been legally directed to collect and analyse patient data from all GP practices in England to support the coronavirus response for the duration of the outbreak. NHS Digital will become the controller under the General Data Protection Regulation 2016 (GDPR) of the personal data collected and analysed jointly with the Secretary of State for Health and Social Care, who has directed NHS Digital to collect and analyse this data under the COVID-19 Public Health Directions 2020 (COVID-19 Direction).

All GP practices in England are legally required to share data with NHS Digital for this purpose under the Health and Social Care Act 2012 (2012 Act). More information about this requirement is contained in the data provision notice issued by NHS Digital to GP practices.

Under GDPR our legal basis for sharing this personal data with NHS Digital is Article 6(1)(c) - legal obligation. Our legal basis for sharing personal data relating to health, is Article 9(2)(g) – substantial public interest, for the purposes of NHS Digital exercising its statutory functions under the COVID-19 Direction.

The type of personal data we are sharing with NHS Digital

The data being shared with NHS Digital will include information about patients who are currently registered with a GP practice or who have a date of death on or after 1 November 2019 whose record contains coded information relevant to coronavirus planning and research. The data contains NHS Number, postcode, address, surname, forename, sex, ethnicity, date of birth and date of death for those patients. It will also include coded health data which is held in your GP record such as details of:

  • diagnoses and findings
  • medications and other prescribed items
  • investigations, tests and results
  • treatments and outcomes
  • vaccinations and immunisations

How NHS Digital will use and share your data

NHS Digital will analyse the data they collect and securely and lawfully share data with other appropriate organisations, including health and care organisations, bodies engaged in disease surveillance and research organisations for coronavirus response purposes only. These purposes include protecting public health, planning and providing health, social care and public services, identifying coronavirus trends and risks to public health, monitoring and managing the outbreak and carrying out of vital coronavirus research and clinical trials. The British Medical Association, the Royal College of General Practitioners and the National Data Guardian are all supportive of this initiative.

NHS Digital has various legal powers to share data for purposes relating to the coronavirus response. It is also required to share data in certain circumstances set out in the COVID-19 Direction and to share confidential patient information to support the response under a legal notice issued to it by the Secretary of State under the Health Service (Control of Patient Information) Regulations 2002 (COPI Regulations).

Legal notices under the COPI Regulations have also been issued to other health and social care organisations requiring those organisations to process and share confidential patient information to respond to the coronavirus outbreak. Any information used or shared during the outbreak under these legal notices or the COPI Regulations will be limited to the period of the outbreak unless there is another legal basis for organisations to continue to use the information. 

Data which is shared by NHS Digital will be subject to robust rules relating to privacy, security and confidentiality and only the minimum amount of data necessary to achieve the coronavirus purpose will be shared. Organisations using your data will also need to have a clear legal basis to do so and will enter into a data sharing agreement with NHS Digital. Information about the data that NHS Digital shares, including who with and for what purpose will be published in the NHS Digital data release register.

For more information about how NHS Digital will use your data please see the NHS Digital Transparency Notice for GP Data for Pandemic Planning and Research (COVID-19).

National Data Opt-Out

The application of the National Data Opt-Out to information shared by NHS Digital will be considered on a case by case basis and may or may not apply depending on the specific purposes for which the data is to be used. This is because during this period of emergency, the National Data Opt-Out will not generally apply where data is used to support the coronavirus outbreak, due to the public interest and legal requirements to share information.

Your rights over your personal data

To read more about the health and care information NHS Digital collects, its legal basis for collecting this information and what choices and rights you have in relation to the processing by NHS Digital of your personal data, see:


General Data Protection Regulation

New contractual requirements come into force from 25th May 2018 requiring that all GP Practices should set out key principles about how they hold and process data.

The following documents detail how we use your personal information and what GDPR means for you as a patient:

Fair Processing Notice

Using Health Records, Patient Information Leaflet

GDPR information

The Data Protection Officer for the GP Practice is: Dr Jillian Lowe, Partner. 

If you have any queries regarding how we use your data, please speak to the Reception Supervisor in the first instance.


National Data Opt-out

Your Data Matters to the NHS

Information about your health and care helps the NHS to improve your individual care, speed up diagnosis, plan your local services and research new treatments.

NHS Digital

In May 2018, the strict rules about how this data can and cannot be used were strengthened. The NHS is committed to keeping patient information safe and always being clear about how it is used.

You can choose whether your confidential patient information is used for research and planning.

If you’re happy for your medical records to be extracted and shared, you don’t need to do anything.

 

Type 1 Opt-out: medical records held at your GP practice

You can tell your GP practice if you do not want your confidential patient information held in your GP medical record to be used for purposes other than your individual care. This is commonly called a type 1 opt-out. This opt-out request can only be recorded by your GP.

If you choose a Type 1 opt-out, please request an opt out form from Reception

 

Type 2 Opt-out: information held by NHS Digital

A Type 2 opt-out is an objection that prevents an individual’s personal confidential information from being shared outside of NHS Digital for research and planning.

Previously you could tell your GP surgery if you did not want NHS Digital to share confidential patient information that is collected from across the health and care service for purposes other than your individual care. This was called a type 2 opt-out.

From 25 May 2018 the type 2 opt-out has been replaced by the national data opt-out. Type 2 opt-outs that have been recorded previously have been automatically converted to national data opt-outs.

If you are choosing a type 2 opt-out you are able to record this using one of the following methods:

Online: nhs.uk/your-nhs-data-matters 

Telephone: 0300 303 5678

To find out more view the NHS Digital patient Leaflet (https://digital.nhs.uk/services/national-data-opt-out/supporting-patients-information-and-resources)


 Patient On-line Services

Bramhall Health Centre currently offers patients’ facilities to: 

            Book, view, amend,& cancel appointments online.

View and order their repeat prescriptions for drugs, medicines or appliances.

 If you do not already have a user name and password for this system – please register for them by collecting an information pack from reception to opt in and consent to this service.  After submission of the application and consent forms, you will be given access to the system, and ID will need to be provided for verification purposes.  This is a very quick process.  If you wish to request access to your full medical record, then this needs to be passed to a GP for review prior to access being given, please allow longer for this to be actioned.

 GP2GP

NHS England require practices to utilise the GP2GP messaging technology, which will enable the practice to receive patients clinical records electronically, very quickly, as new patients join the practice. For information follow this link: http://systems.hscic.gov.uk/gp2gp

 

Summary Care Record

NHS England require that practices enable accurate automated uploads of any changes to a patient’s summary information on a daily basis, to the Summary Care Record (SCR).

Having your Summary Care Record (SCR) available will enable any authorised clinician to treat you without having your full medical record.  They will have access to information about any medication you may be taking, and any drugs that you may have a recorded sensitivity or allergy to. 

 

The core SCR record contains such information on the basis of implied patient consent.  Additional information can only be uploaded with explicit patient consent and should only be used when required to support patient care in an emergency or urgent situation. 

This information should only be viewed in such emergency situations, with the explicit consent of the patient unless the patient is unable to give such consent, (eg: if they are unconscious.)

 

Bramhall Health Centre makes use of new Summary Care Record.  A Summary Care Record is an electronic record, which contains information about the medicines you take, allergies you suffer from and any bad reactions to medicines you have had. Having this information stored in one place makes it easier for specific permitted healthcare staff to treat you in an emergency, or when your GP practice is closed.

If you do not want your medical records to be available in this way then you will need to let us know so that we can update your record.

More information on the Summary Care Record can be seen on our website:  www.bramhallhealthcentre.co.uk  and at:  http://www.nhscarerecords.nhs.uk



Call 111 when you need medical help fast but it’s not a 999 emergencyNHS ChoicesThis site is brought to you by My Surgery Website