The purpose of this guidance is to inform you of the way in which NHS Surrey Heartlands Clinical Commissioning Group use information (including personal data) about you. It explains:
- who we are and what we do
- the types of information we hold about people
- how we use this information and why we need to do this
- who we may share your information with
- how you can object to the way we use information or complain about this
- how you can access a copy of the information we hold about you
- what other rights you may have in relation to this information
- how we keep your information secure and confidential
- where to go if you require further information.
This guidance applies to all individuals whose information is used by the CCG; including local NHS service users, our staff and suppliers, and visitors to our offices.
This information is known as a ‘Privacy Notice’ or ‘Fair Processing Notice’ and it is a legal obligation under data protection legislation that we provide you with this.
Information Governance provides a consistent way for employees to deal with the many different standards and legal rules that apply to information handling. This includes the Data Protection Act (DPA) 2018 - a United Kingdom Act of Parliament that updates data protection laws in the UK. It is a national law which complements the European Union's General Data Protection Regulation (GDPR). Therefore GDPR and the Data Protection Act 2018 should be read side by side.
Subject Access Request
Individuals have the right to access information that the CCG holds about them by making a Subject Access Request (SAR). The GDPR has removed the fees that could previously be charged for SARs and reduced the amount of time that organisations have to respond. This right applies to all individuals including staff, employees of other organisations, service users, visitors to offices, and attendees at events.
Each NHS organisation holds their own records and we can only supply Surrey Heartlands CCG records. If the CCG holds the data requested and it is not legally exempt from disclosure, the information must be supplied within one month (though this can be extended by up to a further two months in some circumstances).
The Information Commissioner’s Office (ICO) is the UK’s independent authority set up to uphold information rights in the public interest, promoting openness by public bodies and data privacy for individuals. A range of guidance for individuals and organisations is available via their website: http://ico.org.uk/
Privacy Notice for the public on Population Health and the use of data
The Surrey Heartlands Health and Care Partnership, which includes your GP practices, Surrey Heartlands CCG and Surrey Council, is working with partners to link local information together to see what the needs of the population are and so make better decisions on the care of our citizens. This will help all partners improve care for groups of people in the community and is known as a Population Health approach.
These partners will not be able to identify individuals as part of the approach as any identifiable data will be removed. If there is any need to identify individuals, for example in order to address an important health and care need, then this can only be done by the GP or other organisation that already holds that data.
This is an innovative approach to supporting our citizens, for more information please read the full notice.
NHS National data opt-out programme - Your Data Matters to the NHS
Information about your health and care helps us to improve your individual care, speed up diagnosis, plan your local services and research new treatments.
In May 2018, the strict rules about how this data can and cannot be used were strengthened. The NHS is committed to keeping patient information safe and always being clear about how it is used.
You can choose whether your confidential patient information is used for research and planning.
To find out more visit: www.nhs.uk/your-nhs-data-matters
Make your data choice online: www.nhs.uk/your-nhs-data-matters/manage-your-choice/
Surrey Care Record Update
The Surrey Care Record is an Electronic Health Record (EHR) linking system that brings together patient/client’s information across health and care systems in a secure manner, giving a real-time summary of your information which is held within a number of local records.
Benefits of such a system are:
- Improved quality of care – information about your care will be instantly available to clinicians for more accurate diagnosis and on-going treatment. Duplication of tests will be avoided.
- Improved patient safety – there will be greater visibility for your health and social providers about your current medications, allergies and adverse reactions.
- Reduced delays in care – test results will be readily available reduces patient waiting time.
The CCG is a data controller for patient data that is shared via the Surrey Care Record. Please see the full Privacy Notice for further information.
Privacy Notice: Surrey Care Record (via Surrey Heartlands ICS website).
COVID-19 and Your Information
This supplementary Privacy Notice describes how Surrey Heartlands CCG may use your information to protect you and others during the Covid-19 outbreak.