Processing for the Purposes of Commissioning, Planning, Research and Risk Stratification
In this category, these are the organisations we share information about you with:
Processing for the Purposes of Commissioning, Planning, Research and Risk Stratification |
||||
|
System/database Recipients or categories of recipients of the personal or special categories of personal data |
Purpose of the processing and data retention period |
|
Lawful basis |
Your Rights |
|
Kent and Medway Clinical Commissioning Groups CCG (s) |
Clinical Commissioning Group (CCGs) are responsible for securing, planning, designing and paying for your NHS services, including planned and emergency hospital care, mental health, rehabilitation, community and primary medical care (GP) services. This is known as ‘Commissioning’. In order to enable Kent and Medway CCG(s) carry out its statutory responsibilities effectively, efficiently and safely, we may share personal data about you with the CCG for the following purposes:
The source of the information shared in this way is your electronic GP record. Data retention period: All records held by the Practice will be kept for the duration specified in the Records Management Codes of Practice for Health and Social Care. Data Retention Period All records held by the Practice will be kept for the duration specified in the Records Management Codes of Practice for Health and Social Care. |
|
The processing of personal data is permitted under the following condition: Article 6(1) (e) - public interest or in the exercise of official authority. The processing of special categories of personal data concerning health is permitted under the following paragraph: |
You have the right to:
Right to object: You have a general right to raise an objection to your personal data being shared with the recipient. If you wish to exercise any of your rights please contact the Practice (data controller) or the DPO and your request will be carefully considered. Right to complain: If you are dissatisfied with the way Otford Medical Practice process your data, you have the right to appeal/complain to the Information Commissioner (IC). The IC can be contacted at: |
|
“Risk Stratification" (Population Health Management and Case Finding) |
Otford Medical Practice performs computerised searches of some or all of our records to identify individuals who may be at increased risk of certain conditions or diagnoses i.e. Diabetes, heart disease, risk of falling). Your records may be amongst those searched. This is often called “risk stratification” or “case finding”. These searches are sometimes carried out by Data Processors who link our records to other records that they access, such as hospital attendance records. The results of these searches and assessment may then be shared with other healthcare workers, such as specialist, therapists, technicians etc. The information that is shared is to enable the other healthcare workers to provide the most appropriate advice, investigations, treatments, therapies and or care. Risk stratification can be grouped into two purposes namely: Direct Care – ‘Case Finding’ where carried out by a health professional (e.g. GPs and Provider) involved in an individual’s care or by a data processor acting under contract with such a provider, it is treated as direct care. Indirect Care - understand the local population needs and plan for future requirement. The source of the information shared in this way is your electronic GP record. Data Retention Period All records held by the Practice will be kept for the duration specified in the Records Management Codes of Practice for Health and Social Care. |
|
The processing of personal data is permitted under the following GDPR and DPA conditions: GDPR Article 6(1) (e) - public interest or in the exercise of official authority; DPA Section 8 (d) - processing is necessary for the exercise of statutory functions; The processing of special categories of personal data concerning health is permitted under the following GDPR and DPA conditions: DPA Section 10 (1) (c) – processing is necessary for health and social care purposes; Related Legislation: |
You have the right to:
Right to object: You have a general right to raise an objection to your personal data being shared with the recipient for the purpose of Indirect Care. If you wish to exercise any of your rights please contact the Practice (data controller) or the DPO and your request will be carefully considered. Right to complain: If you are dissatisfied with the way Otford Medical Practice process your data, you have the right to appeal/complain to the Information Commissioner (IC). The IC can be contacted at: |
|
Research Partners |
Otford Medical Practice participates projects ad will only agree to do so if there is an agreed clearly defined reason for the research that is likely to benefit healthcare and patients. Such proposals will normally have a consent process, ethics committee approval, and will be in line with the principles of Article 89(1) of GDPR. Research organisations do not usually approach patients directly but will ask us to make contact with suitable patients to seek their consent. Occasionally research can be authorised under law without the need to obtain consent. This is known as the Section 251 arrangement. We may also use your medical records to carry out research within the practice. We share information with the following medical research organisations with your explicit consent or when the law allows. The source of the information shared in this way is your electronic GP record. You have the right to object to the sharing of your personal health data concerning your GP medical for research purposes. Data Retention Period All records held by the Practice will be kept for the duration specified in the Records Management Codes of Practice for Health and Social Care. |
|
The processing of personal data is permitted under the following GDPR and DPA conditions: GDPR Article 6(1) (e) - public interest or in the exercise of official authority; DPA Section 8 (d) - processing is necessary for the exercise of statutory functions; The processing of special categories of personal data is permitted under the following GDPR and DPA conditions: |
You have the right to:
Right to object: You have a general right to raise an objection to your personal data being shared with the recipient. If you wish to exercise any of your rights please contact the Practice (data controller) or the DPO and your request will be carefully considered. Right to complain: If you are dissatisfied with the way Otford Medical Practice process your data, you have the right to appeal/complain to the Information Commissioner (IC). The IC can be contacted at: |
|
Employment Processing
|
The Practice ensures the protection of the rights and freedoms in respect of the processing of its employees’ personal data, in particular for the purposes of the recruitment, obligations performance contract of employment, rights and benefits management planning, health and safety, equality and diversity in the workplace, health and safety at work. The Practice ensures that personal data it collects from employees are used only for employment related purposes or where there is a statutory obligation to share the personal information with to regulatory bodies (e.g. courts, police or NHS England). Data Retention Period All records held by the Practice will be kept for the duration specified in the Records Management Codes of Practice for Health and Social Care.
|
|
The processing of personal data is permitted under the following GDPR and DPA conditions: GDPR Article 6(1) (e) - public interest or in the exercise of official authority; DPA Section 8 (d) - processing is necessary for the exercise of statutory functions; The processing of special categories of personal data is permitted under the following conditions: |
Employees have the right to:
Right to object: Employees have a general right to raise an objection to the sharing personal data. If an employee wishes to exercise his/her rights they can contact the Practice (data controller) or the DPO and their request will be carefully considered. Right to complain: If an employee is dissatisfied with the way Otford Medical Practice process his/her personal data, they have the right to appeal/complain to the Information Commissioner (IC). The IC can be contacted at: |
We use cookies to help provide you with the best possible online experience.
By using this site, you agree that we may store and access cookies on your device. Cookie policy.
Cookie settings.
Functional Cookies
Functional Cookies are enabled by default at all times so that we can save your preferences for cookie settings and ensure site works and delivers best experience.
3rd Party Cookies
This website uses Google Analytics to collect anonymous information such as the number of visitors to the site, and the most popular pages.
Keeping this cookie enabled helps us to improve our website.