Reasons and purposes for processing information
We process personal information to enable us to provide health services to our patients, to maintain our accounts and records, promote our services and to support and manage our employees.
Type and classes of information processed
We process information relevant to the above reasons/purposes. This information may include:
- personal details
- family details
- lifestyle and social circumstances
- goods and services
- financial details
- employment and education details
We also process sensitive classes of information that may include:
- physical or mental health details
- sexual life
- racial or ethnic origin
- religious or other beliefs of a similar nature
- offences and alleged offences
Who the information is processed about
We process personal information about our:
- customers and clients
- business contacts
- professional advisers
Who the information may be shared with
We sometimes need to share the personal information we process with the individual themself and also with other organisations. Where this is necessary we are required to comply with all aspects of the EU General Data Protection Regulation (GDPR) and any subsequently enacted UK regulation. Before May 2018 compliance with the Data Protection Act (DPA). What follows is a description of the types of organisations we may need to share some of the personal information we process with for one or more reasons.
Where necessary or required we share information with:
- healthcare professionals
- social and welfare organisations
- central government
- service providers
- suppliers and service providers;
- financial organisations
- current, past and prospective employers; employment agencies and examining bodies
- The Care Quality Commission. For more information about the CQC see: http://www.cqc.org.uk/
- NHS Digital, a national body which has legal responsibilities to collect information about health and social care services. More information about NHS Digital and how it uses information can be found at: https://digital.nhs.uk/home
- We will report the relevant information to to the local health protection team or Public Health England to prevent transmission of disease to the population as required by law . For more information about Public Health England and disease reporting see: https://www.gov.uk/guidance/notifiable-diseases-and-causative-organisms-how-to-report
Subject Access Requests
Subject Access Requests (SARs) are requests by an individual ,or legally appointed prersons acting on their behalf, to disclose to them the information we hold on them at the time of the request. A SAR may be made in writing, electronically or verbally. We will however require that an individual proves their identity befor disclosing information. SAR requests will be responded to within one month of receipt
The Right to Erasure
Individuals have the right to have personal data erased. This is also known as the ‘right to be forgotten’. The right is not absolute and only applies in certain circumstances.
The Right to Rectification
Individuals have the right to request rectification of factual errors in the data record. This does not however apply to matters of professional opinion where the applicant disagrees with that opinion.
National Clinical Audits- Checking the Quality of Care
Daniel Walsh FRCS contributes to national clinical audits so that healthcare can be checked and reviewed. Information from medical records can help doctors and other healthcare workers measure and check the quality of care which is provided to you. The results of the checks or audits can show where hospitals are doing well and where they need to improve. The data will include information about you, such as your NHS Number and date of birth and information about your health which is recorded in coded form - for example the code for diabetes or high blood pressure.
Daniel Walsh FRCS contributes data to the following national practice audits:
- The UK and Ireland Audit of Subarachnoid Haemorhage
- The British Spine Registry
- The National Neurosurgical Audit Programme
For more information about national clinical audits see the Healthcare Quality Improvements Partnership website: https://www.hqip.org.uk/ or phone 020 7997 7370. You have the right to object to your identifiable information being shared for national clinical audits. Please contact the practice if you wish to object.
Medical records will be kept in line with the law and national guidance. Information on how long records are kept can be found at: https://digital.nhs.uk/article/1202/Records-Management-Code-of-Practice-for-Health-and-Social-Care-2016 or speak to the practice.