General Data Protection Regulation

 

BACK TO MAIN INDEX

 

The General Data Protection Regulation (GDPR) is a new law that determines how your personal data is processed and kept safe, and the legal rights that you have in relation to your own data.

The regulation applies from 25th May 2018, and will continue to apply after the UK leaves the European Union.

The GDPR sets out the key principles about processing personal data for patients and staff:

  • Data must be processed lawfully, fairly and transparently
  • It must be collected for specific, explicit and legitimate purposes
  • It must be limited to what is necessary for the purposes for which it is processed
  • Information must be accurate and kept up to date
  • Data must be held securely
  • It can only be retained for as long as is necessary for the reasons it was collected
 

Your GDPR Rights

  • You have the right to be given a copy of your medical record
  • You have the right to object to your medical records being shared with those who provide you with care
  • You have the right to object to your information being used for medical research and to plan health services
  • You have the right to have any mistakes corrected and to complain to the Information Commissioner’s Office

 You can view the short form and full versions or our privacy notice below.

 

HavensHealth Privacy Notice – short form

Your data, privacy and the Law. How we use your medical records

  • This practice handles medical records according to the laws on data protection and confidentiality.
  • We share medical records with health professionals who are involved in providing you with care and treatment. This is on a need to know basis and event by event.
  • Some of your data is automatically copied to the Shared Care Summary Record
  • We share some of your data with local out of hours / urgent or emergency care services
  • Data about you is used to manage national screening campaigns such as Flu, Cervical cytology and Diabetes prevention.
  • Data about you, usually de-identified, is used to manage the NHS and make payments.
  • We share information when the law requires us to do, for instance when we are inspected or reporting certain illnesses or safeguarding vulnerable people.
  • Your data is used to check the quality of care provided by the NHS.
  • Sometimes your information may be requested to be used for research purposes – the surgery will always gain your consent before releasing the information for this purpose.

You can request a copy of our full privacy notice via our secure online form

 

GPDPR Update

This practice is supporting vital health and care planning and research by sharing your data with NHS Digital. For more information about this see the GP Practice Privacy Notice for General Practice Data for Planning and Research.

 

More privacy notices are available from the surgery, please ask a member of our team for help.