1 Introduction
The law determines how organisations can use the personal information they collect. This is underpinned by the Common Law Duty of Confidentiality together with legislation we must comply with including:
- Data Protection Act 1998
- Human Rights Act 1998
- Health and Social Care Act 2012
Ephedra holds and uses the personal and confidential information of its patients for a number of purposes. This notice sets out in general terms a summary of the type of information we hold about you, what we use if for and also who we may share your information with.
2 Information Held
The Ephedra collects personal confidential information about you. This information may include (but is not limited to):
- Your name, address telephone number, date of birth and next of kin
- Appointment details, associated admissions
- Correspondence, notes and reports
- Investigations and test results
Ephedra uses this information for the following reasons:
- to help inform the decisions that we need to make about your care
- to ensure that your treatment is safe and effective, including any advice that may be provided as part of your care
- to help us to work effectively with other organisations who may also be involved in your care
3 Inforamtion Sharing
Ephedra may share information held about you with other organisations to support the following purposes:
For patient care under My Care Record (identifiable information):
- to promote continuity of care by sharing your information with other professionals involved in your care
- to promote safe care by making available, where appropriate, your information to other health care professionals who might be involved in your care such as emergency departments, out of hours or extended access doctor services
- Further information on the My Care Record programme can be found on the CCG website at www.enhertsccg.nhs.uk/mcr or the locality Ephedra website at ephedrahealthcare.co.uk
For planning and assurance (information in anonymised format which does not include information from the patient written notes):
- to help protect the general health of the public
- to manage and plan services for the future
- to review the quality of care provided by the practice to ensure it remains effective
- to help our staff review the care that is provided to ensure it is of the highest standard and to enable the continual improvement of care
- to comply with a legal obligation
Further information on how the CCG uses your information for planning and assurance can be found at www.enhertsccg.nhs.uk/how-we-use-information-about-you-fair-processing-notice
Organisations with which information is routinely shared with for the reasons set out above include but are not limited to:
For patient care:
- Local hospitals
- Emergency and out of hours services
For planning and assurance:
- NHS England and East and North Herts CCG
4 Opting Out
All patients have the right to opt out of allowing their personal information to be shared with other healthcare organisations. If you wish to do this, please speak to a member of the practice staff. For more detailed information about your rights and our responsibilities in respect of data protection, we have a number of information leaflets that are available in our waiting areas and reception, as well as further resources on our website. Easy read format as well as information in other languages is available upon request.
5 Security of your Information
Ephedra has a range of security measures in place to ensure that your information is held, and where appropriate, shared in a secure way. Your patient record will only be accessed by those members of practice staff who are authorised to do so. If you have any concerns about the way we handle your information, please speak to a member of the practice staff.
6 NHS Constitution for England
All NHS organisations have to follow the principles and values set out in the NHS Constitution when using and sharing confidential personal information. The NHS Constitution sets out a series of patients' rights and NHS pledges. All NHS bodies and private and third sector providers supplying NHS services are required by law to take account of the Constitution in their decisions and actions.
The relevant rights for this requirement are:
- You have the right of access to your own health records and to have any factual inaccuracies corrected;
- You have the right to be informed about how your information is used;
- You have the right to request that your confidential information is not used beyond your own care and treatment and to have your objections considered, and where your wishes cannot be followed, to be told the reasons including the legal basis.
7 Contact Us
If you have any questions or concerns or wish to complain about how we use your information, please contact us at:
Wrafton House Surgery 01707 265454
For more information about your rights under the Data Protection Act, contact:
Information Commissioners Office,
Wycliffe House, Cheshire SK9 5AF
0303 123 1113
www.ico.org.uk