health and care providers, for example neighbouring GP practices, hospitals and NHS 111. We may also use the details we have to send public health messages to you, either by phone, text or email.

During this period of emergency we may offer you a consultation via telephone or videoconferencing. By accepting the invitation and entering the consultation you are consenting to this. Your personal/confidential patient information will be safeguarded in the same way it would with any other consultation.

We will also be required to share personal/confidential patient information with health and care organisations and other bodies engaged in disease surveillance for the purposes of protecting public health, providing healthcare services to the public and monitoring and managing the outbreak. Further information about how health and care data is being used and shared by other NHS and social care organisations in a variety of ways to support the Covid-19 response is here.

NHS England and Improvement and NHSX have developed a single, secure store to gather data from across the health and care system to inform the Covid-19 response. This includes data already collected by NHS England, NHS Improvement, Public Health England and NHS Digital. New data will include 999 call data, data about hospital occupancy and A&E capacity data as well as data provided by patients themselves. All the data held in the platform is subject to strict controls that meet the requirements of data protection legislation.

In such circumstances where you tell us you’re experiencing Covid-19 symptoms we may need to collect specific health data about you. Where we need to do so, we will not collect more information than we require and we will ensure that any information collected is treated with the appropriate safeguards.

#### Other ways we use your information

#### Call recording

All Telephone calls are routinely recorded for the following purposes:

- • make sure that staff act in compliance with Todmorden Group Practices • make sure that staff act in compliance with Todmorden Group Practices procedures.
- • ensure quality control. • ensure quality control.
- • monitoring and service improvement • monitoring and service improvement
- • prevent crime, misuse and to protect staff • prevent crime, misuse and to protect staff

#### Data Subject Rights Under the UK General Data Protection Regulation (UK GDPR)

- • right to confirmation that their personal data is being processed and access to a • right to confirmation that their personal data is being processed and access to a copy of that data which in most cases will be Free of Charge and will be available within 1 month (which can be extended to two months in some circumstances)
- • that data has or will be disclosed to. • that data has or will be disclosed to.
- • period of time the data will be stored for • period of time the data will be stored for
- • right in certain circumstances to have inaccurate personal data rectified, blocked, • right in certain circumstances to have inaccurate personal data rectified, blocked, erased or destroyed.
- • Portability – data provided electronically in a commonly used format • Portability – data provided electronically in a commonly used format