Direct Medical Care and Administration

In this category, these are the organisations we share information about you with:

Direct Medical Care and Administration

Recipients or categories of the recipients of the personal or special categories of personal data

Purpose of the processing and data retention periods

 

Lawful basis

General Data Protection Regulation
- Article 6, Article 9 –
Data Protection Act
- Section 8, Section 10, Part 1 of Schedule 1 -

Your rights

 

NHS Trusts – Hospitals, Community or Mental Health Trusts 

Personal data concerning your GP medical record may be shared with NHS Trusts in order to enable their healthcare professionals make the best informed decision about your health needs, and provide you with the best possible care if you visit the hospital for routine care and referrals.

Your personal information may also be processed for local  administrative purposes such as:

  • Waiting list management;
  • local clinical audit;
  • Performance against local targets;
  • activity monitoring;
  •  production of datasets to submit for commissioning purposes and national collections.

The source of the information shared in this way is your electronic GP record.

In accordance with DPA Part 1, Schedule 1 (2) health or social care purposes means the purposes of preventive or occupational medicine; medical diagnosis; the provision of health care or treatment; the provision of social care, or the management of health care systems or services or social care systems or services.

Data Retention Period

All records held by the Practice will be kept for the duration specified in the Records Management Codes of Practice for Health and Social Care.

 

The processing of personal data is permitted under the following GDPR and DPA conditions:

GDPR Article 6(1) (e) - public interest or in the exercise of official authority;

DPA Section 8 (d) - processing is necessary for the exercise of statutory functions;

The processing of special categories of personal data concerning health is permitted under the following GDPR and DPA conditions:

GDPR Article 9 (2) (h) - processing is necessary for medical or social care treatment or, the management of health or social care systems and services;

DPA Section 10 (1) (c) – processing is necessary for health and social care purposes;

In accordance with DPA Schedule 1, Part 1, (2) health or social care purposes means the purposes of preventive or occupational medicine; medical diagnosis; the provision of health care or treatment; the provision of social care, or the management of health care systems or services or social care systems or services.

Related Legislation:

Common Law of Duty of Confidentiality

You have the right to:

  • To access, view or request copies of your personal information;
  • request rectification of any inaccuracy in your personal information;
  • restrict the processing of your personal information where:
  • accuracy of the data is contested,
  • the processing is unlawful or,
  • where we no longer need the data for the purposes of the processing.

Right to object: In line with the GDPR Article 21 and DPA Section 99, you have a general right to raise an objection to the processing of your personal data in some particular circumstances. This right only applies where we cannot demonstrate compelling legitimate grounds for continued processing of your personal data for the purposes of direct provision of care, and compliance with a legal obligation to which we are subject.

If you wish to exercise any of your rights please contact the Practice (data controller) or the DPO and your request will be carefully considered.

Right to complain: If you are dissatisfied with the way Otford Medical Practice process your data, you have the right to appeal/complain to the Information Commissioner (IC). The IC can be contacted at:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
Tel: 0303 123 1113 or 01625 545 745
Email:
https://ico.org.uk/global/contact-us/ 

Emergency Services (Ambulance trusts, police, A&E departments, out of hours services, 111)

There are circumstances when intervention is necessary in order to save or protect a patient’s life or to prevent them from serious immediate harm, for example, during a collapse or diabetic coma or serious injury or accident. In many of these circumstances the patient may be unconscious or too ill to communicate.

Medical professionals have a duty of care to share data in emergencies to protect their patients or other persons. In these circumstances, your GP medical record will be shared with emergency healthcare services, the police or fire service in order to enable you receive the best treatment or service.

The source of the information shared in this way is your electronic GP record.

Data Retention Period

All records held by the Practice will be kept for the duration specified in the Records Management Codes of Practice for Health and Social Care.

 

The processing of personal data is permitted under the following GDPR and DPA conditions:

GDPR Article 6(1) (e) - public interest or in the exercise of official authority;

DPA Section 8 (d) - processing is necessary for the exercise of statutory functions;

The processing of special categories of personal data concerning health is permitted under the following GDPR and DPA conditions:

GDPR Article 9 (2) (h) - processing is necessary for medical or social care treatment or, the management of health or social care systems and services;

Article 9 (2) (C) – the processing is necessary to protect the vital interests of the data subject;

DPA Section 10 (1) (c) – processing is necessary for health and social care purposes;

In accordance with DPA Schedule 1, Part 1, (2) health or social care purposes means the purposes of preventive or occupational medicine; medical diagnosis; the provision of health care or treatment; the provision of social care, or the management of health care systems or services or social care systems or services.

In accordance with DPA Schedule 1, Part 3, (30) (b) the conditions for protecting individual’s vital interests is met where the data subject is physically or legally incapable of giving consent.

You have the right to:

  • Make pre-determined decisions about the type and extent of care you will receive in an emergency, these are known as “Advance Directives”;
  • access, view or request copies of your personal information;
  • request rectification of any inaccuracy in your personal information;
  • restrict the processing of your personal information where:
  • accuracy of the data is contested,
  • the processing is unlawful or,
  • where we no longer need the data for the purposes of the processing.

Right to object: You have the right to object to some or all of your personal information being shared with the recipients. You also have the right to have an “Advance Directive” placed in your records and brought to the attention of relevant healthcare workers or staff.

We will notify you at the earliest opportunity where we have shared your personal data in an emergency situation.

If you wish to exercise any of your rights please contact the Practice (data controller) or the DPO and your request will be carefully considered.

Right to complain: If you are dissatisfied with the way Otford Medical Practice process your data, you have the right to appeal/complain to the Information Commissioner (IC). The IC can be contacted at:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
Tel: 0303 123 1113 or 01625 545 745
Email:
https://ico.org.uk/global/contact-us/ 

GP Federations (groups of GP practices working together)

 

GP Federations are groups of GPs (patient centered organisation), working collaboratively and developing closer integration with other partners across health, social and third sector partners to facilitate an enhanced delivery of health and care services.

Through various hubs in the community the GP Federation provide direct health and care services such as continued extended access, home visits, universal offers, musculoskeletal service, GP at front door and other neighbourhood services across West Kent

If you visit receive treatment/consultation on any of these services, personal data concerning your GP medical record may be shared with the GP Federation and their Multidisciplinary Team (MDT) in order to enable them make the best informed decision about your health/care needs, and provide you with the best possible care.

The source of the information shared in this way is your electronic GP record.

Data Retention Period

All records held by the Practice will be kept for the duration specified in the Records Management Codes of Practice for Health and Social Care.

 

The processing of personal data is permitted under the following GDPR and DPA conditions:

GDPR Article 6(1) (e) - public interest or in the exercise of official authority;

DPA Section 8 (d) - processing is necessary for the exercise of statutory functions;

The processing of special categories of personal data concerning health is permitted under the following GDPR and DPA conditions:

GDPR Article 9 (2) (h) - processing is necessary for medical or social care treatment or, the management of health or social care systems and services;

DPA Section 10 (1) (c) – processing is necessary for health and social care purposes;

In accordance with DPA Schedule 1, Part 1, (2) health or social care purposes means the purposes of preventive or occupational medicine; medical diagnosis; the provision of health care or treatment; the provision of social care, or the management of health care systems or services or social care systems or services.

Related Legislation:

Section 251B Health and Social Care (Safety and Quality Act) 2015 (Duty to Share);

Common Law of Duty of Confidentiality

You have the right to:

  • To access, view or request copies of your personal information;
  • request rectification of any inaccuracy in your personal information;
  • restrict the processing of your personal information where:
  • accuracy of the data is contested,
  • the processing is unlawful or,
  • where we no longer need the data for the purpose of processing.

Right to object: In line with the GDPR Article 21, you have a general right to raise an objection to the processing of your personal data in some particular circumstances. This right only applies where we cannot demonstrate compelling legitimate grounds for continued processing of your personal data for the purposes of direct provision of care, and compliance with a legal obligation to which we are subject.

If you wish to exercise any of your rights please contact the Practice (data controller) or the DPO and your request will be carefully considered.

Right to complain: If you are dissatisfied with the way Otford Medical Practice process your data, you have the right to appeal/complain to the Information Commissioner (IC). The IC can be contacted at:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
Tel: 0303 123 1113 or 01625 545 745
Email:
https://ico.org.uk/global/contact-us/ 

Pharmacists - Medicines Optimisation

Medicines optimisation looks at the value which medicines deliver, making sure they are clinically-effective and cost-effective. It is about ensuring patients get the right choice of medicines, at the right time, and are engaged in the process by their clinical team.

Medicines optimisation enables community pharmacies to request medication electronically from the Practice and view relevant information from your GP record in order to provide you with the best medicines.

The source of the information shared in this way is your electronic GP record.

Data Retention Period

All records held by the Practice will be kept for the duration specified in the Records Management Codes of Practice for Health and Social Care.

 

 

 

The processing of personal data is permitted under the following GDPR and DPA conditions:

GDPR Article 6(1) (e) - public interest or in the exercise of official authority;

DPA Section 8 (d) - processing is necessary for the exercise of statutory functions;

The processing of special categories of personal data concerning health is permitted under the following GDPR and DPA conditions:

GDPR Article 9 (2) (h) - processing is necessary for medical or social care treatment or, the management of health or social care systems and services;

DPA Section 10 (1) (c) – processing is necessary for health and social care purposes;

In accordance with DPA Schedule 1, Part 1, (2) health or social care purposes means the purposes of preventive or occupational medicine; medical diagnosis; the provision of health care or treatment; the provision of social care, or the management of health care systems or services or social care systems or services.

Related Legislation:

Common Law of Duty of Confidentiality

You have the right to:

  • To access, view or request copies of your personal information;
  • request rectification of any inaccuracy in your personal information;
  • restrict the processing of your personal information where:
  • accuracy of the data is contested,
  • the processing is unlawful or,
  • where we no longer need the data for the purpose of processing.

Right to object: In line with the GDPR Article 21, you have a general right to raise an objection to the processing of your personal data in some particular circumstances. This right only applies where we cannot demonstrate compelling legitimate grounds for continued processing of your personal data for the purposes of direct provision of care, and compliance with a legal obligation to which we are subject.

If you wish to exercise any of your rights please contact the Practice (data controller) or the DPO and your request will be carefully considered.

Right to complain: If you are dissatisfied with the way Otford Medical Practice process your data, you have the right to appeal/complain to the Information Commissioner (IC). The IC can be contacted at:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
Tel: 0303 123 1113 or 01625 545 745
Email:
https://ico.org.uk/global/contact-us/ 

Local Authority – Social Services

Otford Medical Practice works closely with Local Authorities to support and care for people of all ages to deliver the best possible social care.

Personal data concerning your GP medical record may be shared with Local Authorities and Multidisciplinary Team (MDT) delivering social care in order to enable them make the best informed decision about your social care needs if required.

The source of the information shared in this way is your electronic GP record.

Data Retention Period

All records held by the Practice will be kept for the duration specified in the Records Management Codes of Practice for Health and Social Care.

 

 

The processing of personal data is permitted under the following GDPR and DPA conditions:

GDPR Article 6(1) (e) - public interest or in the exercise of official authority;

DPA Section 8 (d) - processing is necessary for the exercise of statutory functions;

The processing of special categories of personal data concerning health is permitted under the following GDPR and DPA conditions:

GDPR Article 9 (2) (h) - processing is necessary for medical or social care treatment or, the management of health or social care systems and services;

GDPR Article 9(2) (b) – processing necessary in the field of employment, social security and social protection law;

In accordance with DPA Schedule 1, Part 1, (2) - health or social care purposes means the purposes of preventive or occupational medicine; medical diagnosis; the provision of health care or treatment; the provision of social care, or the management of health care systems or services or social care systems or services.

In accordance with DPA Part 1, Schedule 1, (1a) the the processing for employment, social security and social protection is met where it is for the purposes of performing or exercising obligations or rights which are imposed or conferred by law on the controller or the data subject in connection with employment, social security or social protection;

You have the right to:

  • To access, view or request copies of your personal information;
  • request rectification of any inaccuracy in your personal information;
  • restrict the processing of your personal information where:
  • accuracy of the data is contested,
  • the processing is unlawful or,
  • where we no longer need the data for the purpose of processing.

Right to object: In line with the GDPR Article 21, you have a general right to raise an objection to the processing of your personal data in some particular circumstances. This right only applies where we cannot demonstrate compelling legitimate grounds for continued processing of your personal data for the purposes of direct provision of care, and compliance with a legal obligation to which we are subject. 

If you wish to exercise any of your rights please contact the Practice (data controller) or the DPO and your request will be carefully considered.

Right to complain: If you are dissatisfied with the way Otford Medical Practice process your data, you have the right to appeal/complain to the Information Commissioner (IC). The IC can be contacted at:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
Tel: 0303 123 1113 or 01625 545 745
Email:
https://ico.org.uk/global/contact-us/ 

Care Homes

Personal data concerning your GP medical record may be shared with Care Homes and other Multidisciplinary Team (MDT) delivering care in order to enable their care professionals make the best informed decision about your care needs, and provide you with the best possible care if you visit a Care Home.

The source of the information shared in this way is your electronic GP record.

Data Retention Period

All records held by the Practice will be kept for the duration specified in the Records Management Codes of Practice for Health and Social Care.

 

 

The processing of personal data is permitted under the following GDPR and DPA conditions:

GDPR Article 6(1) (e) - public interest or in the exercise of official authority;

DPA Section 8 (d) - processing is necessary for the exercise of statutory functions;

The processing of special categories of personal data concerning health is permitted under the following GDPR and DPA conditions:

GDPR Article 9 (2) (h) - processing is necessary for medical or social care treatment or, the management of health or social care systems and services;

DPA Section 10 (1) (c) – processing is necessary for health and social care purposes;

In accordance with DPA Schedule 1, Part 1, (2) -health or social care purposes means the purposes of preventive or occupational medicine; medical diagnosis; the provision of health care or treatment; the provision of social care, or the management of health care systems or services or social care systems or services.

You have the right to:

  • To access, view or request copies of your personal information;
  • request rectification of any inaccuracy in your personal information;
  • restrict the processing of your personal information where:
  • accuracy of the data is contested,
  • the processing is unlawful or,
  • where we no longer need the data for the purpose of processing.

Right to object: In line with the GDPR Article 21, you have a general right to raise an objection to the processing of your personal data in some particular circumstances. This right only applies where we cannot demonstrate compelling legitimate grounds for continued processing of your personal data for the purposes of direct provision of care, and compliance with a legal obligation to which we are subject.

If you wish to exercise any of your rights please contact the Practice (data controller) or the DPO and your request will be carefully considered.

Right to complain: If you are dissatisfied with the way Otford Medical Practice process your data, you have the right to appeal/complain to the Information Commissioner (IC). The IC can be contacted at:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
Tel: 0303 123 1113 or 01625 545 745
Email:
https://ico.org.uk/global/contact-us/

Healthy.io – ACR project for patients with diabetes

 The data is being processed for the purpose of delivery of a programme, sponsored by NHS Digital, to monitor urine for indications of chronic kidney disease (CKD) which is recommended to be undertaken annually for patients at risk of CKD e.g. patients living with diabetes. The programme enables patients to test their kidney function from home. Otford Medical Practice will share your contact details with Health.io to enable them to contact you and confirm that you wish them to send you a test kit. This will help identify patients at risk of kidney disease and help us agree any early interventions that can be put in place for the benefit of your care. Healthy.io will only use your data for the purposes of delivering their service to you. If you do not wish to receive a home test kit from Healthy.io we will continue to manage your care within the Practice. Healthy.io are required to hold data we send them in line with retention periods outlined in the Records Management code of Practice for Health and Social Care. Further information about this is available at: http://bit.ly/uACRtest

 

The processing of personal data is permitted under the following GDPR and DPA conditions:

GDPR Article 6(1) (e) - public interest or in the exercise of official authority;

DPA Section 8 (d) - processing is necessary for the exercise of statutory functions;

The processing of special categories of personal data concerning health is permitted under the following GDPR and DPA conditions:

GDPR Article 9 (2) (h) - processing is necessary for medical or social care treatment or, the management of health or social care systems and services;

DPA Section 10 (1) (c) – processing is necessary for health and social care purposes;

In accordance with DPA Schedule 1, Part 1, (2) health or social care purposes means the purposes of preventive or occupational medicine; medical diagnosis; the provision of health care or treatment; the provision of social care, or the management of health care systems or services or social care systems or services.

Related Legislation:

Common Law of Duty of Confidentiality

You have the right to:

  • To access, view or request copies of your personal information;
  • request rectification of any inaccuracy in your personal information;
  • restrict the processing of your personal information where:
  • accuracy of the data is contested,
  • the processing is unlawful or,
  • where we no longer need the data for the purpose of processing.​​​​​​​

Right to object: In line with the GDPR Article 21, you have a general right to raise an objection to the processing of your personal data in some particular circumstances. This right only applies where we cannot demonstrate compelling legitimate grounds for continued processing of your personal data for the purposes of direct provision of care, and compliance with a legal obligation to which we are subject.

If you wish to exercise any of your rights please contact the Practice (data controller) or the DPO and your request will be carefully considered.

Right to complain: If you are dissatisfied with the way Otford Medical Practice process your data, you have the right to appeal/complain to the Information Commissioner (IC). The IC can be contacted at:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
Tel: 0303 123 1113 or 01625 545 745
Email:
https://ico.org.uk/global/contact-us/