As a practice we take the safety and security of all personal data very seriously. The protection of the personal data of our patients is of the utmost of importance in every interaction our GPs and staff have. Inevitably, however we are required to share data for a range of reasons including; statutory requirements, referral to outside organisations (such as the hospital or community providers) and other obligations under data protection regulation. All data remains safe and confidential. All staff and external contractors are held to a high confidentiality standard. Please discuss any questions or concerns that you may have with the practice.
From the 25th May 2018, the General Data Protection Regulation (GDPR) come into force in the UK. How we manage your personal data is outlined in our privacy notice that is available by clicking this link: Privacy Notice - Direct Care
There are a number of organisations that we as a practice share patient data with for a range of reasons. To access privacy notices for each area please see below:
Privacy Notice CQC
Privacy Notice - Data Sharing during an Emergency
Privacy Notice for Data Sharing with National Screening Programmes
Privacy Notice for Data Sharing for Payment Processing
Privacy Notice for Sharing for Summary Care Record
Privacy Notice Sharing with NHS Digital
Privacy Notice for Sharing with Public Health England
Privacy Notice for Sharing Data with for Risk Assessment (Stratification)
Privacy Notice for Sharing for Research Purposes
Privacy Notice for Recording of Telephone Calls
Privacy Notice for Sharing Data with UKmail
Surrey Care Record
The Surrey Care Record is a new sharing initiative throughout the county of Surrey. You may have have received a leaflet through the post about this. The Surrey Care Record Leaflet is available here. The new record officially goes live on the 29th August 2018.
Initially the Surrey Care Record will include basic information from your GP practice including the medications you are taking, any allergies you may have and any bad reactions you may have had in the past. Initially this will only be shared with local A and E departments such as Redhill, Epsom, The Royal Surrey and St Peters.
Information from the A and E departments will also be shared with GP Practices including test results.
Over time we expect more relevant information from hospitals and GPs practices as well as information from other organisations will be added to the Surrey Care Record including some social care and mental health service records. The aim of the Surrey Care Record is to improve communication between organisations involved in your care. Professionals will only be able to access your Surrey Care Record if they have genuine involvement in your care and this access is carefully controlled and audited.
Caterham Valley Medical Practice have signed a robust Data Sharing agreement with Patient Knows Best (PKB) the company who host the care record.
Dr Sharpe from Surrey Heartlands STP tells you more about it below:
Patients can opt out of sharing via the Surrey Care Record at any time. They can contact us whether by telephone,or by completing this Surrey Care Record Opt Out form and returning it to reception. In most cases before your record is accessed by a professional involved in your care they will also ask you again whether you are happy for them to access this record. You can say yes or no at this point too.
Much more information is available is at http://surreyheartlands.uk/the-surrey-care-record or email specific queries to firstname.lastname@example.org.
Your NHS Data Matters
Some patients may have received letters in the post about Your NHS Data Matters, a campaign which launched on the 25th May 2018. This is the national data opt out. This letter went to every patient who had previously opted out of a national programme (such as the Summary Care Record, or Care.data). This direct contact by NHS Digital is to ensure that patients understand what services they may have opted out of and understand any risks or benefits of opting back in to sharing. If you would like to remain 'opted out' of sharing services then you do not need to do anything. If you would like the professionals caring for you to have access to certain parts of your medical record then please contact the practice to opt back in.
Individual GP-level data to NHS Digital
As directed by the Department of Health, the practice is mandated by law to release individual level data on a number of indices that may include NHS number, the number of patients admitted as an emergency, the uptake of screening (such as cervical screening and bowel cancer screening) and appointments etc. NHS Digital are legally permitted to receive identifiable patient data. More information is available here, including how this data is used http://content.digital.nhs.uk/article/7754/Privacy-Notice---individual-Gp-level-data
Clinical Practice Research Datalink (CPRD)
The practice contributes data to the CPRD as the Department of Health approved research service that has been developed in conjunction with the Medicines and Healthcare products Regulatory Authority (MHRA). The practice contributes to the data link by providing completely anonymised versions of GP practice data through a secure link for public health research reasons. More information is available here https://www.cprd.com/intro.asp
Summary Care Record (SCR)
The Summary Care Record is a summary of a patient record that is accessible only to authorised NHS staff in case of emergency, or where a person is seeking treatment elsewhere, away from the practice. More information is available here https://digital.nhs.uk/summary-care-records. An example where a Summary Care Record may be used is if a person is admitted into hospital and the emergency doctor may need to know what medication the person is taking or whether they are allergic to any medication, prior to treating them. With your permission, the Summary Care Record may also be 'enhanced' by your GP to include other useful information including diagnosis (such as Dementia) and pre-decisions that you have made about care you would or wouldn't want to receive (such as receiving blood products). All patients will be automatically enrolled in to the programme upon registration, however can opt out at any time by completing an opt out form http://www.unhs.co.uk/documents/scr-optoutform.pdf. Please contact the practice for further information or if you think you may benefit from an 'Enhanced' Summary Care Record.
It is important to note that all data that leaves the practice is carefully protected. However you may not wish your data to leave the practice. Should that be the case, you will need to record a national data opt-out that offers you a new way to prevent your confidential patient information from being used for research and planning. You can also find out more about the national data opt-out online at: www.nhs.uk/your-nhs-data-matters The national data opt-out cannot be set at the practice. You can record your opt-out online following the link above or by contacting 0300 303 5678.
Please Note: This is not a comprehensive list of all methods by which data may leave the practice. All other personal data is under the practice policies on data protection, confidentiality and the sharing of personal data.