on ‘Our Documents’ page is a copy of our privacy notice which explains how we collect, look after and use your data.
A summary of this information can be found below.
How we Collect, Look After and Use Your Data?
This notice explains how Oakwood Lane Medical Practice will collect, look after, use or otherwise process your personal data. “Personal data” is information relating to you as a living, identifiable individual.
How is the Information Collected and Looked After?
Who is responsible for my information? Oakwood Lane Medical Practice is the data controller for your information and is responsible for looking after your record while you are a registered patient. The person with the key responsibility for data protection and security is Dr Anne Weston.
The Data Protection Officer for Oakwood Lane Medical Practice is Paul Couldrey, PCDC, NBV Enterprise Centre, 6 David Lane, Nottingham, Nottinghamshire. NG6 0JU T: 0115 838 6770 firstname.lastname@example.org . Any queries or concerns should be raised with the practice first.
Why do we Collect Information About You?
As health professionals, we maintain records about you in order to support your care. By registering with the practice, your existing records will be transferred to us from your previous practice so that we can keep them up to date while you are our patient. If you do not have a previous medical record (a new-born child or coming from overseas, for example), we will create a medical record for you. We take great care to ensure that your information is kept securely, that it is up to date, accurate and used appropriately. All of our staff are trained to understand their legal and professional obligations to protect your information and will only look at your information if they need to.
What Information do we Hold About You?
Details about you, such as your name, address, carers, biological gender, gender identity, ethnic origin, date of birth, legal representatives and emergency contact details.
- Any contact the surgery has had with you, such as appointments, clinic visits, emergency appointments, etc.
- Notes and reports about your health.
- Details about your treatment and care.
- Results of investigations such as laboratory tests, x-rays, etc.
- Relevant information from other health professionals, relatives or those who care for you.
How is My Information Stored?
Our practice uses a clinical records programme called SystmOnline which is where any electronic information about you will be stored. Any information held in paper records is stored securely at the practice. We use a combination of working practices and technology to ensure that your information is kept confidential and secure.
What is the Legal Basis That we use to Process Your Information?
We are required to tell you the legal basis that is used for the various ways we process and use your data. The following table sets the main ways your personal data may be used and the corresponding legal basis and category of data. Each purpose is covered in more detail within the document below to explain what these mean in more practical terms.
When is my Information Shared?
We are committed to protecting your privacy and will only use information collected lawfully in accordance with:
- Data Protection legislation.
- Human Rights Act of 1998.
- Common-Law Duty of Confidentiality Health and Social Care Act 2012.
- NHS Codes of Confidentiality, Information Security and Records Management.
- Information: To Share or Not to Share Review.
How Long Does the Practice Hold my Information?
As long as you are registered as a patient with Oakwood Lane Medical Practice your paper records are held at the practice along with your GP electronic record. If you register with a new practice, they will initiate the process to transfer your records. The electronic record is transferred to the new practice across a secure NHS data-sharing network and all practices aim to process such transfers within a maximum of 8 working days. The paper records are then transferred via Primary Care Services England (operated on behalf of NHS England by Capita) which can take longer.
Primary Care Services England also look after the records of any patient not currently registered with a practice and the records of anyone who has died. Once your records have been forwarded to your new practice (or after your death forwarded to Primary Care Services England), a cached version of your electronic record is retained in the practice and classified as “inactive”.
If anyone has a reason to access an inactive record, they are required to formally record that reason and this action is audited regularly to ensure that all access to inactive records is valid and appropriate. We may access this for clinical audit (measuring performance), serious incident reviews, or statutory report completion (e.g., for HM Coroner).
Change of Details
It is important that you tell the person treating you if any of your details such as your name or address have changed or if any of your details such as date of birth is incorrect in order for this to be amended. You have a responsibility to inform us of any changes so our records are accurate and up to date for you.
How can I see What Information You Hold About me?
You have a right under data protection legislation to request to see what information the practice holds about you. You also have the right to ask for inaccuracies to be corrected and in some circumstances, you have the right to request that we stop processing your data. Some of these rights are not automatic and we reserve the right to discuss with you why we might not comply with a request from you to exercise them. If you make a Subject Access Request, we will:
- Describe the information we hold about you,
- Tell you why we are holding that information,
- Tell you who it might be shared with,
- At your request, provide a copy of the information in an easy to read form.
In order to request this, you need to do the following:
- Your request must be made in writing – for information from the hospital you should write directly to them.
- We will provide electronic copies (via online access, by email or on CDROM) free of charge.
- We are required to respond to you within 1 month. You will need to give enough information (for example full name, address, date of birth, NHS number and details of your request) so that your identity can be verified and your records located.
In some circumstances, there may be a charge to have a printed copy of the information held about you. If this is the case, this will be discussed with you before any charge is made. If you would like to make a Subject Access Request or have any further questions, please contact the Practice’s Business Manager.
How is My Information Used?
For the provision of direct care: In the practice, individual staff will only look at what they need in order to carry out such tasks as booking appointments, making referrals, giving health advice or provide you with care. Sometimes your information may be used to run automated calculations. These can be as simple as calculating your Body Mass Index but they can be more complex and used to calculate some risks to your health that we should consider with you.
The ones we use in practice include Qrisk (cardiovascular risk assessment – usually following an NHS Healthcheck), Qdiabetes (diabetes risk assessment) and eFI (electronic frailty index). Whenever we use these profiling tools, we assess the outcome on a case-by-case basis.
No decisions about individual care are made solely on the outcomes of these tools but they are used to help us assess and discuss your possible future health and care needs with you. We share information about you with other health professionals where they have a genuine need for it to support your care, as follows
For Commissioning and Healthcare Planning Purposes:
In some cases, for example, when looking at population healthcare needs, some of your data may be shared (usually in such a way that you cannot be identified from it). The following organisations may use data in this way to inform policy or make decisions about the general provision of healthcare, either locally or nationally.
- Leeds City Council: Public Health, Adult or Child Social Care Services Embed Health Consortium (NHS commissioning support unit).
- Leeds Clinical Commissioning Group.
- NHS Digital (Formerly known as (HSCIC) – ResearchOne Database.
- Other data processors which you will be informed of as appropriate.
In order to comply with its legal obligations, we may send data to NHS Digital when directed by the Secretary of State for Health under the Health and Social Care Act 2012.
This practice contributes to national clinical audits and will send the data which are required by NHS Digital when the law allows. This may include demographic data, such as date of birth, and information about your health which is recorded in coded form, for example, the clinical code for diabetes or high blood pressure.
For Research Purposes:
Research data is usually shared in a way that individual patients are non-identifiable. Occasionally where research requires identifiable information you may be asked for your explicit consent to participate in specific research projects. The surgery will always gain your consent before releasing any information for this purpose.
Where specific information is asked for, such as under the National Diabetes Audit, you have the choice to opt for the audit.
Further details of these audits are available here: Oakwood Lane Medical Practice
For Safeguarding Purposes, Life or Death Situations or Other Circumstances When we are Required to Share Information:
We may also disclose your information to others in exceptional circumstances (ie life or death situations) or in accordance with Dame Fiona Caldicott’s information sharing review (Information to share or not to share). For example, your information may be shared in the following circumstances:
- When we have a duty to others e.g. in child protection cases.
- Where we are required by law to share certain information such as the birth of a new baby, infectious diseases that may put you or others at risk or where a Court has decided we must.
If you are happy for your data to be extracted and used for the purposes described in this notice then you do not need to do anything.
If you would like to see our data protection policies, these can be provided on request. Requests should be brought to the attention of the Business Manager. Should you have any concerns about how your information is managed at the practice, please contact the Business Manager at Oakwood Lane Medical Practice If you are still unhappy following a review by the GP practice, you can then complain to the Information Commissioner’s Office (ICO) via their website www.ico.org.uk, email@example.com, telephone: 0303 123 1113 (local rate) or 01625 545 745.
Primary Care Networks:
All practices in the UK are members of a Primary Care Network (PCN), which is a group of practices who have chosen to work together and with the local community, mental health, social care, pharmacy, hospital and voluntary services to provide care to their patients.
PCNs are built on the core of current primary care services and enable the greater provision of proactive, personalised, coordinated and more integrated health and social care.
We are members of Seacroft PCN along with Park Edge Practice, Foundry Lane Surgery and Windmill Health Centre. We are also associated members of Central PCN along with Alwoodley Medical Centre, Meanwood Group Practice, Oakwood Surgery, Rutland Lodge Medical Practice, Shadwell medical Centre, Street Lane medical Practice and The Avenue Surgery.
This arrangement means that practices within the same PCN may share data with other practices within the PCN, for the purpose of patient care (such as extended hours appointments and other services), Each practice within the PCN is part of a stringent data sharing agreement that means that all patient data shared is treated with the same obligations of confidentiality and data security.