- • right to be forgotten and erasure of data does not apply to an individual’s health • right to be forgotten and erasure of data does not apply to an individual’s health record or for public health purposes
- • right to lodge a complaint with a supervising authority • right to lodge a complaint with a supervising authority

#### Your right to object

You have the right to restrict how and with whom we share information in your records that identifies you. If you object to us sharing your information we will record this explicitly within your records so that all healthcare professionals and staff involved with your care are aware of your decision. If you choose not to allow us to share your information with other health or social care professionals involved with your care, it may make the provision of treatment or care more difficult or unavailable. Please discuss any concerns with the clinician treating you so that you are aware of any potential impact. You can also change your mind at any time about a disclosure decision.

#### SMS Text messaging

When attending the Practice for an appointment or a procedure you may be asked to confirm that the Practice has an accurate contact number and mobile telephone number for you. This can be used to provide appointment details via SMS text messages and automated calls to advise you of appointment times.

#### CCTV

We employ surveillance cameras (CCTV) on and around our practice in order to:

- • staff, patients, visitors and Practice property • staff, patients, visitors and Practice property
- • and prosecute offenders, and provide evidence to take criminal or civil • and prosecute offenders, and provide evidence to take criminal or civil court action
- • a deterrent effect and reduce unlawful activity • a deterrent effect and reduce unlawful activity
- • provide a safer environment for our staff • provide a safer environment for our staff
- • operational and safety related incidents • operational and safety related incidents
- • to provide improved services, for example by enabling staff to see patients and • to provide improved services, for example by enabling staff to see patients and visitors requiring assistance

You have a right to make a Subject Access Request of surveillance information recorded of yourself and ask for a copy of it. Requests should be directed to the address below and you will need to provide further details as contained in the section ‘How you can access your records’. The details you provide must contain sufficient information to identify you and assist us in finding the images on our systems. We reserve the right to withhold information where permissible by the UK General Data Protection Regulation (GDPR) 2018 and we will only retain surveillance data for a reasonable period or as long as is required by law. In certain circumstances (high profile investigations, serious or criminal incidents) we may need to disclose CCTV data for legal reasons. When this is done there is a requirement for the organisation that has received the images to adhere to the UK GDPR.

#### How you can access your health records

The UK GDPR gives you a right to access the information we hold about you on our records. Requests must be made in writing to the Practice. The Practice will provide your information to you within one month (this can be extended dependent on the complexity of the request) from receipt of your application.