Otford Medical Practice Privacy Notice

Contents

1. Introduction
2. What is this Privacy Notice about?
3. Who we are
4. Types of information we use
5. What we use your personal data and special categories of personal data (known as sensitive personal) for
6. Our identity and contact details
7. Our Data Protection Officer
8. Organisations we share your personal information with
   1. Direct Medical Care and Administration
   2. Other Primary Care services delivered for the purposes of direct care
   3. Statutory Disclosures of Information
   4. Processing for the Purposes of Commissioning, Planning, Research and Risk Stratification
   5. Data Sharing Databases
   6. Data Processors
9. What is EMIS Systems Local Record Sharing?
10. What do we use anonymised data for?
11. Details of data linkage with other datasets
12. What safeguards are in place to ensure data that identifies me is secure?
13. What are your rights?
14. Gaining access to the data we hold about you
15. What is the right to know?
    1. What sort of information can I request?
    2. How do I make a request for information?
16. Glossary of Terms

 

 

 

1. Introduction

This Privacy Notice has been written in line with the EU General Data Protection Regulation (GDPR) 2016, Data Protection Act 2018 and guidance from the Information Commissioner (IC).

2. What is this Privacy Notice about?

Privacy Notice is the conditions which have to be met for any activity involving personal data or special categories of personal data to be lawful. Being transparent and providing accessible information to individuals about how an organisation will use their personal information is a key element of data protection legislations. The most common way to provide this information is in a Privacy Notice.

This Privacy Notice tells you about information we collect and hold about you, the legal bases for collecting and holding the information, what we do with it, how we keep it secure (confidential), who we might share it with and what your rights are in relation to your information.

3. Who we are

Otford Medical Practice provides a full range of primary care medical services under a GMS Contract. This includes general nursing services and chronic disease management. We offer family planning and contraceptive services including coil and implant fitting and cervical screening. Our nurses also provide child and adult immunisations. We also do minor surgery injections.

 

 

1. Types of information we use

We use the following types of information/data:

• Personal data or sensitive personal/special categories of personal data such as:

• demographics – name, address, date of birth, postcode, NHS number
• racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data, biometric data for the purpose of uniquely identifying a natural person, medical/health data, sexual life or sexual orientation data.

• Pseudonymised - about individuals but with identifying details (such as name or NHS number) replaced with a unique code.
• Anonymised - about individuals but with identifying details removed.
• Aggregated - anonymised information grouped together so that it doesn't identify individuals.

2. What we use your personal data and special categories of personal data (known as or sensitive personal) for

We use and share information about you in a number of ways. These include:

Primary uses - information from your GP medical record which can be made available to other NHS and public sector organisations, including doctors, nurses and care professionals in order to help them make the best informed decision, and provide you with the best possible direct care delivery.

Secondary uses - information from your GP medical record involves extracting identifiable data and (usually) sharing that data with other NHS organisations, for the purpose of indirect care. Examples include using your information for research, auditing, and healthcare planning (population health management).

3. Our identity and contact details

Otford Medical Practice, Leonard Avenue, Otford, Kent, TN14 5RB. Tel: 01959 523929.

4. Our Data Protection Officer 

Pamela Ashe

NHS Medway Clinical Commissioning Group,

Unit A, Compass Centre North, Pembroke Road,

Chatham Maritime, Kent, ME4 4YG

Tel: 03000 425100

 Email: mccg.northkentgpdataprotection@nhs.net

 

5. Organisations we share your personal information with

We share information about you with other GPs, NHS acute or mental health Trusts, local authority, community health providers, pharmacists, commissioning organisations, medical research organisations  and some specific non NHS organisations for the purposes of direct and indirect care delivery of care.

We are required under the law to provide you with the following information:

• How we process your personal data;
• the purpose of processing;
• recipient/categories of your personal data;
• the identity of our Data Protection Office;
• how long we retain personal information about you;
• the lawful bases for the sharing/processing and,
• your rights - to view, request access copies of your personal information, or object to the processing.

 

Included below is a table of the organisations we share information about you with split into the following categories. In all cases, Controller and Data Protection Officer are as listed in section 6 and 7 above:

. 56