Fair Processing Notice – Data Protection Act 1998 Your Information and How We Use It
Why we collect information about you
This organisation keeps records about the health care and treatment you receive. These help ensure that you receive the best possible care from us.
How we keep your records confidential
Everyone working for the NHS is subject to the Common Law Duty of Confidence. Information provided in confidence will only be used for the purposes stated and consented to by the patient, unless there are other circumstances covered by the law.
Under the NHS Confidentiality Code of Conduct, all of our staff are also required to protect your information, inform you of how your information will be used, and allow you to decide if and how your information can be shared. This will be recorded in your records.
Other NHS organisations with whom we share your Personal Information
We may share your information, if it contributes directly to your healthcare, with Health Commissioners, NHS Clinical Commissioning Groups, General Practitioners (GPs), Ambulance Services and other NHS Common Services Agencies such as Hospitals, Community Health Teams, etc.
Information Sharing with Non-NHS Organisations
For your benefit, we may also need to share information from your health records with other non-NHS organisations, from which you are also receiving care, such as Social Services. However, we will not disclose any health information to third parties without your explicit consent, unless there are exceptional circumstances, such as when the health or safety of others is at risk or where the law requires it.
If we are asked to share information with a non-NHS organisation that does not directly relate to your care, we will always seek consent prior to any information being shared. If you choose not to consent to this when asked, then that decision will be recorded and respected.
Your right to withdraw consent for us to share your personal information
At any time you have the right to refuse/withdraw consent to information sharing. The possible consequences will be fully explained to you and could include delays in receiving care.
May 2018
Your rights under the Data Protection Act
Patients, as data subjects, have a number of rights under the Data Protection Act, including a general right of access to personal data (electronic or paper) held about them.
Right of Access
You can make your own application to see your records, or you can authorise someone else to make an application for you. A parent or guardian, a patient representative, or a person appointed by the Court may also apply. If you wish to access your personal data, then please contact:
Hatfield Practice
In order to fulfil our responsibilities under the Act, you may be asked to provide proof of your identity, and any further information required to locate the record you have requested.
Withholding information about you
Information may be withheld if the Practice believes that releasing the information to you could cause serious harm to your physical or mental health. We do not have to tell you that information has been withheld.
Information may also be withheld if another person (i.e. third party) is identified in the record, and they do not want their information disclosed to you. However, if the other person was acting in their professional capacity in caring for you, in normal circumstances they could not prevent you from having access to that information.
Correcting inaccurate information
We have a duty to ensure your information is accurate and up to date to make certain we have the correct contact and treatment details about you.
If your information is not accurate and up-to-date, you can ask us to correct the record. If we agree that the information is inaccurate or incomplete, it will be corrected. If we do not agree that the information is inaccurate, we will ensure that a note is made in the record of the point you have drawn to the Practice’s attention.
Further Information
If you would like to know more about how we use your information, or if (for any reason) you do not wish to have your information used in any of the ways described above, please speak to the health professionals concerned with your care.
The Data Controller is the practice
Our contact details are 01302 897600
The Data Protection Officer is:
Caroline Million - CM Associates
email: Caroline.million@nhs.net
How can you lodge a privacy related complaint and how will the complaint be handled at our practice?
We take complaints and concerns regarding privacy seriously. You should express any privacy concerns you may have in writing. We will then attempt to resolve it in accordance with our resolution procedure.
Please read the How We Use Your Information leaflet (DOCX, 22KB)