Direct Medical Care and Administration Recipients or categories of recipients of the personal or special categories of personal data Purpose of the processing Data Retention Period Lawful basis General Data Protection Regulation - Article 6 - - Article 9 – Your Rights NHS Trusts – Hospitals, Community or Mental Health Trusts. Personal data concerning your GP medical record may be shared with NHS Trusts in order to enable their healthcare professionals make the best informed decision about your health needs, and provide you with the best possible care if you visit the hospital for routine care and referrals. Your personal information may also be processed for local administrative purposes such as: Waiting list management; local clinical audit; Performance against local targets; activity monitoring; production of datasets to submit for commissioning purposes and national collections. The source of the information shared in this way is your electronic GP record. All records held by the Practice will be kept for the duration specified in the . The processing of personal data is permitted under the following paragraphs: The processing of special categories of personal data concerning health is permitted under the following paragraphs: . Related Legislation: ; You have the right to: To access, view or request copies of your personal information; request rectification of any inaccuracy in your personal information; restrict the processing of your personal information where: accuracy of the data is contested, the processing is unlawful or, where we no longer need the data for the purposes of the processing. Right to object: In line with the GDPR Article 21, you have a general right to raise an objection to the processing of your personal data in some particular circumstances. This right only applies where we cannot demonstrate compelling legitimate grounds for continued processing of your personal data for the purposes of direct provision of care, and compliance with a legal obligation to which we are subject. If you wish to exercise any of your rights please
contacted at: Information Commissioner’s Office Wycliffe House Water Lane Wilmslow Cheshire Tel: 0303 123 1113 or 01625 545 745 Email: Care Homes Personal data concerning your GP medical record may be shared with Care Homes and other Multidisciplinary Team (MDT) delivering care in order to enable their care professionals make the best informed decision about your care needs, and provide you with the best possible care if you visit a Care Home. The source of the information shared in this way is your electronic GP record. All records held by the Practice will be kept for the duration specified in the The processing of personal data is permitted under the following paragraphs: The processing of special categories of personal data concerning health is permitted under the following paragraphs: . Related Legislation: You have the right to: To access, view or request copies of your personal information; request rectification of any inaccuracy in your personal information; restrict the processing of your personal information where: accuracy of the data is contested, the processing is unlawful or, where we no longer need the data for the purposes of the processing. Right to object: In line with the GDPR Article 21, you have a general right to raise an objection to the processing of your personal data in some particular circumstances. This right only applies where we cannot demonstrate compelling legitimate grounds for continued processing of your personal data for the purposes of direct provision of care, and compliance with a legal obligation to which we are subject. If you wish to exercise any of your rights please contact the Practice (data controller) or the DPO
permitted under the following paragraph: Related Legislation: Tel: 0303 123 1113 or 01625 545 745 Email: NHS Digital (previously known as the Health and Social Care Information Centre) is a national information and technology partner to the health and social care system. NHS Digital use digital technology to transform the NHS and social care. NHS Digital carries out from the GP record. These include: National Diabetes Audit (NDA) - A national monitoring system, auditing the care of patients with diabetes. The data extracted for the purpose of NDA includes NHS Number, date of birth and postcode, as well as clinical parameters related to diabetes. NDA is a mandatory data extraction under section , this means that we are compelled by law to share your data Individual GP Level Data (IGPLD) - A national monitoring system to enable NHS Digital to provide GPs with clinical information on the care provision for their patients. The data extracted includes the NHS number. IGPLD is a mandatory data extraction under , this means All records held by the Practice will be kept for the duration specified in the The processing of personal data is permitted under the following paragraph: The processing of special categories of personal data concerning health is permitted under the following paragraph: Related Legislation: S You have the right to: To access, view or request copies of your personal information; request rectification of any inaccuracy in your personal information; restrict the processing of your personal information where: accuracy of the data is contested, the processing is unlawful or, where we no longer need the data for the purposes of the processing. Right to object: You do not have the right to object as the sharing is a legal and professional requirement under the law. Whilst there is no right to object under 6(1)(c), NHS Digital respects Type 1 objections (9Nu0) present in the GP record and no data will be extracted and uploaded if so. Right to complain: If you are dissatisfied with the way Keats Group Practice process your data, you have the right to appeal/complain to the Information Commissioner (IC). The IC can be contacted at:
In order to enable Camden CCG carry out its statutory responsibilities effectively, efficiently and safely, we may share personal data about you with the CCG for the following purposes: Individual Funding Requests; Continuing Health Care; appeals, queries or compliments; safeguarding concerns; commissioning purposes such as payment for target achievement known as Quality and Outcomes Framework (QOF); and where the Practice is participating in agreed national or local enhanced services. The source of the information shared in this way is your electronic GP record. permitted under the following paragraph: Right to object: You have a general right to raise an objection to your personal data being shared with the recipient. If you wish to exercise any of your rights please contact the Practice (data controller) or the DPO and your request will be carefully considered. Right to complain: If you are dissatisfied with the way Keats Group Practice process your data, you have the right to appeal/complain to the Information Commissioner (IC). The IC can be contacted at: Information Commissioner’s Office Wycliffe House Water Lane Wilmslow Cheshire Tel: 0303 123 1113 or 01625 545 745 Email: “Risk Stratification" (Population Health Management and Case Finding) Recipient: Insert the name of your Risk Stratification Provider Keats Group Practice performs computerised searches of some or all of our records to identify individuals who may be at increased risk of certain conditions or diagnoses i.e. Diabetes, heart disease, risk of falling). Your records may be amongst those searched. This is often called “risk stratification” or “case finding”. These searches are sometimes carried out by Data Processors who link our records to other records that they access, such as hospital attendance records. The results of these All records held by the Practice will be kept for the duration specified in the The processing of personal data is permitted under the following paragraph: The processing of special categories of personal data concerning health is You have the right to: To access, view or request copies of your personal information; request rectification of any inaccuracy in your personal information; restrict the processing of your personal information where: accuracy of the data is contested, the processing is unlawful or, where we no longer need the data for the purposes of the processing.
Email: EMIS Systems Local Record Sharing – Integrated Care EMIS Local Record Sharing enables your GP medical record held on our secure EMIS Web clinical system to be shared with other healthcare Providers (e.g. acute hospitals, mental and community health and other GPs) who are commissioned to provide to provide health care services within your borough. This local sharing is used to provide direct patient care for services such as continued extended access, home visits, universal offers, musculoskeletal service, GP at front door and other neighbourhood services across Camden. The information is accessed in real time and on-demand, meaning that data from your GP record is neither extracted, nor uploaded, nor sent anywhere in real time and on-demand, meaning that data from your GP record is neither extracted, nor uploaded, nor sent anywhere. The source of the information shared in this way is your electronic GP record. All records held by the Practice and the EMIS Local Record Sharing system are be kept for the duration specified in the The processing of personal data is permitted under the following paragraphs: The processing of special categories of personal data concerning health is permitted under the following paragraphs: Related Legislation: ; You have the right to: To access, view or request copies of your personal information; request rectification of any inaccuracy in your personal information; restrict the processing of your personal information where: accuracy of the data is contested, the processing is unlawful or, where we no longer need the data for the purposes of the processing. Right to object: You have a general right to raise an objection to your personal data being shared with the recipients. If you wish to exercise any of your rights please contact the Practice (data controller) or the DPO and your request will be carefully considered. Right to complain: If you are dissatisfied with the way Keats Group Practice process your data, you have the right to appeal/complain to the Information Commissioner (IC). The IC can be contacted at: Information Commissioner’s Office Wycliffe House Water Lane Wilmslow Cheshire Tel: 0303 123 1113 or 01625 545 745 Email:
Email: Data Processors System/database Recipients or categories of recipients of the personal or special categories of personal data Purpose of the processing & Data Retention Period Data Retention Period Lawful basis General Data Protection Regulation - Article 6 - - Article 9 – Your Rights and and are responsible for the provision of a clinical system, software and IT services used by the Practice to securely store and process your medical record. All information about your personal health records are stored in your GP electronic record. This information is then available to practice staff & external bodies as outlined in this document. All records held in the Practice EMIS system be kept for the duration specified in the “GP records should be retained until 10 years after the patient's death or after the patient has permanently left the country, unless they remain in the European Union. Electronic patient records must not be destroyed or deleted for the foreseeable future.” The processing of personal data is permitted under the following paragraph: The processing of special categories of personal data concerning health is permitted under the following paragraph: You have the right to: To access, view or request copies of your personal information; request rectification of any inaccuracy in your personal information; restrict the processing of your personal information where: accuracy of the data is contested, the processing is unlawful or, where we no longer need the data for the purposes of the processing. Right to object: In line with the GDPR Article 21, you have a general right to raise an objection to the processing of your personal data in some particular circumstances. This right only applies where we cannot demonstrate compelling legitimate grounds for continued processing of your personal data for the purposes of direct provision of care, and compliance with a legal obligation to which we are subject.
cloud-based storage software for electronic patient document. This includes letters that we receive, scan and upload to the patient record, as well as letters that we receive in an electronic format. Generally, Docman enables primary health care organisations capture, file, workflow, view and manage primary care documents efficiently. Docmail enables primary health care organisations send letters, invoices and documents directly from computers and other portable devices. The source of the information shared in this way is your electronic GP record for the purposes of direct administrative patient care. Practice EMIS system and the Docman vault are kept for the duration specified in the “GP records should be retained until 10 years after the patient's death or after the patient has permanently left the country, unless they remain in the European Union. Electronic patient records must not be destroyed or deleted for the foreseeable future.” personal data is permitted under the following paragraph: The processing of special categories of personal data concerning health is permitted under the following paragraph: To access, view or request copies of your personal information; request rectification of any inaccuracy in your personal information; restrict the processing of your personal information where: accuracy of the data is contested, the processing is unlawful or, where we no longer need the data for the purposes of the processing. Right to object: In line with the GDPR Article 21, you have a general right to raise an objection to the processing of your personal data in some particular circumstances. This right only applies where we cannot demonstrate compelling legitimate grounds for continued processing of your personal data for the purposes of direct provision of care, and compliance with a legal obligation to which we are subject. If you wish to exercise any of your rights please contact the Practice (data controller) or the DPO and your request will be carefully considered. Right to complain: If you are dissatisfied with the way Keats Group Practice process your data, you have the right to appeal/complain to the Information Commissioner (IC). The IC can be contacted at: Information Commissioner’s Office Wycliffe House Water Lane Wilmslow