General Data Protection Regulation (GDPR)

The General Data Protection Regulation (GDPR) became law on 25th May 2018 and is a single EU wide regulation on the protection of confidential and sensitive information.

Mobile phone numbers and email addresses

If you provide us with your mobile phone number or email we will use this to send you reminders about your appointments or other health screening information, only if you have consented for us to do so. You can do this by contacting the surgery either by email or phone and explain whether you would like to consent or dissent to us sending you sms messages or emails about your care an appointment.

Access to medical records

The implementation of data protection legislation GDPR 2018 has updated patients' statutory rights of access to their health records. All manual and computerized health records about living people are accessible under the Data Protection Act 1998 If you require access to your health records this is called a Subject Access Request, please contact the Practice Manager to get the relevant form to complete.

You have a right of access to your health records. If at any time you would like to know more, or have any concerns about how we use your information, you can speak to Dr S Moss Telephone number: 01668213738

Data Extraction From Medical Records

NHS England is commissioning a modern data service from the Health and Social Care Information Centre (HSCIC) on behalf of the entire health and social care system. This is to be known as care data.

The General Practice Extraction Service (GPES) will be used to extract data monthly. The information they take will be NHS number, date of birth, postcode and gender. This will allow patients' GP data to be linked to any hospital data. Only coded information about referrals, NHS prescriptions and other clinical data will be taken.

All patients will be opted into this unless they inform the practice. If you do not want this information to be gathered then you must let us know and we will add a code of objection onto our clinical system.

You can find out more about the HSCIC by logging onto their website

How we use your medical records (Privacy Notice)

• This practice handles medical records in-line with laws on data protection and confidentiality.
• We share medical records with those who are involved in providing you with care and treatment.
• In some circumstances we will also share medical records for medical research, for example to find out more about why people get ill.
• We share information when the law requires us to do so, for example, to prevent infectious diseases from spreading or to check the care being provided to you is safe.
• You have the right to be given a copy of your medical record.
• You have the right to object to your medical records being shared with those who provide you with care.
• You have the right to object to your information being used for medical research and to plan health services.
• You have the right to have any mistakes corrected and to complain to the Information Commissioner's Office. Please speak to a member of staff for more information about your rights.

For more information ask at reception for a leaflet. There is a folder with all our GDPR Policies in both reception areas.

Downloads

Policies that are related to the new GDPR Laws are accessible via the following links

• Covid Privacy Notice on how we use your information
• How we use your information to provide you with healthcare
• The Practice Privacy Policy
• Practice Fair Processing Privacy Notice
• How we use your information for medical research
• National Screening Privacy Notice
• Patients leaflet to accessing medical records
• General Data Protection Regulations
• Physical Health Checks for people with severe Mental Illness
• General Practice Data for Planning and Research
• Data Provision Notice National Obesity Audit

Clinical Practice Research Datalink (CPRD)

We still carry this out and collect the necessary data as before. We also have linked in with CPRD which carries out research across the country, and if you are involved in any particular studies, they may need access to your health data.

Below are two links to the activity they undertake, with your rights to opt out if wished.
What we do with information about you
Data protection and processing notice

The CPRD is a well established body, overseen by the Medicine and Healthcare Products Regulatory Authority (MHRA), and has a good record of delivering research to monitor safety of medicines and other healthcare interventions.