Data controller

Each GP Practice is a data controller as defined under the Data Protection Act 2018

Why and how we use the information?

Our main purpose is to deliver healthcare across the community. We collect the data we need to care for you in the best way possible.

What data is shared?

The current data that is shared would be your medical record contained within your healthcare record which is accessed for healthcare purposes and the management of your care.

Where does this data come from?

General Practice (GP) medical record only.

Does this contain sensitive data such as health information?

Yes, sensitive data is processed as described in GDPR section 9(2)h for the purpose of health or social care.

Who are recipients of this data?

Authorised health and care staff as part of the Primary Care Network and trusted parties we work with

Is data transferred outside the UK?

No

How long the data is kept?

Data is kept at your main GP Practice and never leaves.  It may be accessed by any of the Practices part of the Primary Care Network. There may third parties that we work with to deliver clinical services. They will be named as third parties accessing your information.

Our lawful basis for processing this data

Data is processed in the public interest under the Public Task basis as described in GDPR section 6(1)e

Your rights

 Be informed

 Get access to it

 Rectify or change it

 Erase or remove it

 Restrict or stop processing it

 Move, copy or transfer it

 Object to it being processed or used

 Know if a decision was made by a computer rather than a person

How can you restrict or object to data processing?

Patients should speak to their GP Practice about any concerns about how their information is accessed.

Is the data subject to decisions made solely by computers?

No

Who can I contact about this?

Please speak to any member of the Practice about how your information is shared and used.

More information

https://www.england.nhs.uk/primary-care/primary-care-networks/