Privacy Notice (October 2016)
This Privacy Notice explains why North Beverley Medical Centre collects information about you, how that information may be used and which organisations the information will be shared with to ensure you receive the best possible care. North Beverley Medical Centre may change this policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes. This policy is effective from 1st October 2016.
What Information Do We Collect?
Your healthcare records contain information about your health and any treatment or care you have received previously (e.g. Hospital, GP surgery, Walk-In clinic etc.). NHS health records may be electronic, on paper or a mixture of both. At North Beverley Medical Centre we use an electronic medical records system called EMIS which has been accredited to the highest standards for use in GP Practices. We use a combination of working practices and technology to ensure that your information is kept confidential and secure. Your healthcare record may include the following information:
- Biographical details about you, such as address, date of birth and family details
- Details of your contact with us such as appointments with our GP’s and nurses
- Notes and reports about your health including diagnosis and treatment
- Details about your treatment and care including prescriptions
- Results on investigations, such as laboratory blood tests, x-rays, etc.
- Relevant information from other health professionals e.g. District Nurse, Health Visitor, Social Worker, relatives or those who care for you
Why Do We Collect This Information?
We record information to ensure you receive the best possible care. We are also legally required to record details of the care we give you. These records allow all members of our team to give you care if needed. Information held about you may be used to help protect the health of the public. Information may also be used for clinical Audit to monitor the quality of the service provided by us as a practice for example, the annual National Diabetes Audit. It is also used to make payments to the practice by NHS England for the services we provide.
In addition your information may be used to identify whether you are at risk of developing a condition like diabetes or dementia. Your information may also be used to assess if you are at risk of a future unplanned hospital Admission and/or require support to effectively manage a long term condition.
Information is also used to inform national campaigns regarding uptake of screening and immunisation programmes e.g. breast screening, cervical screening, childhood immunisation and the national Flu campaign.
What if I do not want to give my permission?
If you have any concerns or wish to opt out of health risk screening you should speak our staff. The practice will ensure your decision is recorded so your records will not be included in any screening process.
Who Will We Share Your Health Information With?
For the purposes of managing your health and Health Risk Screening we may need to share your information e.g. by making a referral with your consent to the following organisations :
- Hull & East Yorkshire Hospital Trust
- Humber Foundation Trust
- Other NHS Trusts and providers of services commissioned by NHS England such as:
- Community Nurses and/or Community Matrons from City Health Care Partnership or the Humber NHS Foundation Trust.
- Representatives from Adult Community Services in Hull City Council and East Riding of Yorkshire Council
- Voluntary Support Organisations commissioned by NHS Hull & NHS East Riding of Yorkshire
How Do We Maintain the Confidentiality of Your Records?
We are committed to protecting your privacy and will only use information collected lawfully in accordance with the Data Protection Act 1998 (which is overseen by the Information Commissioner's Office), Human Rights Act, the Common Law Duty of Confidentiality, and the NHS Codes of Confidentiality and Security.
Every member of staff who works for an NHS organisation has a legal obligation to keep information about you confidential. Anyone who receives information from an NHS organisation has a legal duty to keep it confidential.
We maintain our duty of confidentiality to you at all times. We will only ever use or pass on information about you if others involved in your care have genuine need for it.
We will not disclose your information to any third party without your permission unless there are exceptional circumstances or the law requires information to be passed on e.g. the Public Health (Control of Disease) Act 1984, the Public Health (Infectious Diseases) Regulations 1988 and the Road Traffic Act 1988. Anyone who receives information from us is also under a legal duty to keep this information confidential.
We may also be obliged to reveal information about you if we believe you are a risk to yourself or others or if we believe a child or a vulnerable adult would be harmed if we did not reveal the information. We may also have to disclose information to prevent disorder or crime or if we are instructed to by a Court order.
How your records are used to help the NHS
Your information may be used to help assess the health needs of the general population and make informed decisions about the Commissioning of future NHS services. Information can also be used to conduct health research and development, monitor NHS performance and to investigate complaints.
We will not publish any information that identifies you or routinely disclose any information about you without your express permission. At any time you have the right to refuse/withdraw consent to information sharing. The possible consequences will be fully explained to you, such as potential delays in receiving care.
Summary Care Record
A summary of your basic details along with information about your medication is updated daily from the practice to the Summary Care Record on the NHS Spine. This is to allow other health professionals with access to the NHS Spine e.g. in A&E to have easy access to this information if they need it. You can opt out of the summary care record if you wish, please contact our reception team if you wish to do this.
The Health and Social Care Act 2013 brought in a legal obligation for GP practices to share patient data with the Health & Social Care Information Centre. Care.Data was designed to make a wealth of information from GP practices available to plan future NHS services and to Audit the effectiveness of existing ones. Problems with its introduction in 2014 have led to the suspension of Care.Data pending a national review. New pilots suggest it will be reintroduced following a public awareness campaign. You can opt out of Care.Data if you wish.
If you have received treatment within the NHS, the North Yorkshire and Humber Commissioning Support Unit (CSU) may require access to your personal information in order to determine which Clinical Commissioning Group or Council (such as the East Riding of Yorkshire) is responsible for paying for the treatment or procedure you have received. Information such as your name, address and date of treatment may be passed on to enable the billing process. These details are held in a secure environment and kept confidential. This information will only be used to validate invoices, and will not be shard for any further Commissioning purposes.
Access to Your Personal Information
You have the right under Data Protection Act 1998 to access, view what information the surgery holds about you, and to have it corrected should it be inaccurate. This is known as 'the right of subject access'. If we do hold information about you we will:
- Give you a description of it;
- Tell you why we are holding it;
- Tell you who it could be disclosed to; and
- Let you have a copy of the information in an intelligible form.
If you would like to make a 'subject access' request; please contact the Practice in writing. We are able under the Data Protection Act to charge you for a copy of the information.
Access to Records of the Deceased
The duty of confidentiality remains even after death. Access to the records of the deceased is NOT covered by the Data Protection Act 1998 but by the Access to Health Records Act 1990. A relative of the deceased who may have a claim arising from the patient’s death are permitted access to the records. Disclosure is usually limited to that which is relevant to the claim. Records of the deceased are returned promptly to Patient Data Services at NHS England so requests for access are usually directed to them NOT the practice.
When someone visits our website our website provider collects standard internet log information and details of behaviour patterns. This is done so we can identify the number of visitors to the various parts of the site. We collect this information in a way which does not identify anyone.
We do not make any other attempt to find out the identities of those visiting our website. We will not associate any data gathered from this site with any personally identifying information from any source.
If we do want to collect personally identifiable information through our website, we will make it clear when we collect the personal information and will explain what we intend to do with it. Security
Links to other websites
This privacy notice does not cover the links within our site linking to other websites. We encourage you to read the privacy statements on the other websites you visit.