PCN Privacy Notice
Primary Care Network
We are a member of [5] Primary Care Network (PCN). This means we will be working closely with a number of other Practices and health and care organisations to provide healthcare services to you. During the course of our work we may share your information with these Practices and health care organisations/professionals. We will only share this information where it relates to your direct healthcare needs. When we do this, we will always ensure that appropriate agreements are in place to protect your information and keep it safe and secure. This is also what the Law requires us to do.
If you would like to see the information the PCN holds about you please contact the DPO [Daljeet Sharry at Dalheet.sharry-khan@bradford.nhs.uk[, daljeet.sharry-khan@nhs.net. See also your rights as a patient listed.
Patient Confidentiality
We are committed to protecting your privacy and will only use information collected lawfully in accordance with the Data Protection Act 1998 (overseen by the Information Commissioner’s Office), Human Rights Act, the Common Law Duty of Confidentiality and the NHS Codes of Confidentiality and Security.
All our staff and contractors receive appropriate and on-going training to ensure they are aware of their personal responsibilities and have contractual obligations to uphold confidentiality, enforceable through disciplinary procedure. Only a limited number of authorised staff have access to personal information where it is appropriate to their role and is strictly on a need-to-know basis.
We maintain our duty of confidentiality to you at all times. We will only ever use or pass on information about you if others involved in your care have a genuine need for it. We will not disclose your information to any third party without your permission unless where are exceptional circumstances or where the law requires information to be passed on.
Who are our partner organisations?
We may also have to share your information, subject to strict agreement on how it will be used, with the following organisations:
o NHS Trusts
o Specialist Trusts
o Independent Contractors eg. dentists, opticians, pharmacists
o Private Sector Providers
o Voluntary Sector Providers
o Ambulance Trusts
o Clinical Commissioning Groups
o Social Care Services
o Local Authorities
o Education Services
o Police, Fire and Rescue Services
o Other “data processors”
Risk Stratification
Risk stratification is a process for identifying and managing patients who are at high risk of requiring emergency or urgent care. Typically this is because patients have a long term condition such as COPD, cancer or other medical condition at risk of sudden worsening. NHS England (the national Commissioning Board) encourages GPs to use risk stratification tools as part of their local strategies for supporting patient with long-term conditions and to provide acre plans and planned care with the aim to prevent avoidable admissions to hospital or other emergency care.
Information about you is collected from a number of sources including NHS Trusts and from this Practice. A risk score is then arrived at through an analysis of your de-identified information using software and is only provided back in an identifiable form to your GP or member of your care team. Risk stratification enables your GP to focus on preventing ill health and not just the treatment of sickness, If necessary your GP may be able to offer your additional services.
You can opt out of Risk Stratification, just let us know (you can change your mind at any time by informing us).
Invoice Validation
If you have received treatment within the NHS your personal information may be shared within a strictly monitored, secure and confidential environment in order to determine which Clinical Commissioning Group should pay for the treatment or procedure you have received.
Information such as your name, address and date of treatment my be passed onto enable the billing process. These details are held in a secure environment and kept confidential. This information will only be used to validate invoices, and will not be shared for any other commissioning purposes.
Access to personal information
You have a right under the Data Protection Act 1998 to access/view what information the surgery holds about you, and to have it amended or removed should it be inaccurate. This is known as ‘the right of subject access’. If we do hold information about you we will:
o give you a description of it;
o tell you why we are holding it;
o tell you who it could be disclosed to; and
o let you have a copy of the information in an intelligible form.
If you would like to make a ‘subject access request’ please contact the practice manager in writing. If you would like further information about how we use your information, or if you do not want us to use your information in this way, please contact the Practice Manager.
Information Access and Rights
Data protection law provides you with a number of rights that the practice is committed to supporting you with;
Right to Access
You have the right to obtain:
- Confirmation that your information is being used, stored or shared by the practice
- A copy of information held about youWe will respond to your request within one month of receipt or will tell you when it might take longer.We are required to validate your identity including the identity of someone making a request on your behalf. We mainly use, store and share your information because we are permitted in order to deliver your healthcare but you do have a right to object to us doing this.Where we are using, storing and sharing your information based on explicit consent you have provided, you have a right to withdraw that consent at any time.Our Data Protection Officer will be happy to speak with you about any concerns you have.
- Right to Correction Right to Complain
- For more detailed information on your rights visit https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/
- You also have the right to make complaints and request investigations into the way your information is used. Please contact our Data Protection Officer or visit the link below for more information.
- We will respond to your request within one month of receipt or will tell you when it might take longer.
- There may be occasions, where we are required by law to maintain the original information – our Data Protection Officer will talk to you about this and you may request that the information is not used during this time
If information about you is incorrect, you are entitled to request that we correct it.
Right to Object or Withdrawn Consent
We mainly use, store and share your information because we are permitted in order to deliver your healthcare but you do have a right to object to us doing this.
Where we are using, storing and sharing your information based on explicit consent you have provided, you have a right to withdraw that consent at any time.
Our Data Protection Officer will be happy to speak with you about any concerns you have.
Right to Correction
If information about you is incorrect, you are entitled to request that we correct it
There may be occasions, where we are required by law to maintain the original information – our Data Protection Officer will talk to you about this and you may request that the information is not used during this time
We will respond to your request within one month of receipt or will tell you when it might take longer.
Right to Complain
You also have the right to make complaints and request investigations into the way your information is used. Please contact our Data Protection Officer or visit the link below for more information.
For more detailed information on your rights visit https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/