Higham Hill Medical Centre Privacy Notice
What is a Privacy Notice?
This privacy notice, which is a requirement of General Data Protection Regulation (GDPR), gives a better explanation on how we use any personal information we collect about you when you register with us. Also this privacy notice is part of our commitment to ensure that we process your information/data fairly, transparently and lawfully.
What Information will be collected and how will it be collected?
The information that would be collected about you would include, but not restricted to: personal details, past and current medical history, results of x-rays and blood tests, and information from people who previously treated and cared for you, such as health professionals and relatives.
Also sensitive information (also known as Special Category) such as race, beliefs, whether you have a disability, health issues, allergies and etc. will be collected. This would give us a better picture, so that staff that are directly treating you, can deliver and provide appropriate treatment and care plans to care for you effectively.
Information will be collected via registration forms and when the medical records are received from your previous GP.
How will we use your information?
We may ask for and hold personal confidential information about you, which would be used for direct patient care as per “Articles 6(1)(e) and 9(2)(h)” of the GDPR.
The below two circumstances, where it is not practical to obtain your explicit (written) consent, we are informing you through this notice, which is referred as a Privacy Notice, under the Data Protection Act.
In order to comply with its legal obligation, this practice contributes to national clinical audits and may send data to NHS Digital when directed by the Secretary of State for Health under the Health and Social Care Act 2012, as per “Articles 6(1)(c) and 9(2)(h)” of GDPR.
Also, this practice contributes in medical research and may send relevant information to medical research databases, such as the Clinical Practice Research Datalink, when the law allows, under GDPR Article 9(2)(j), and when research is carried out for the public interest, under GDPR Article 6(1)(e).
Dealing with requests regarding your confidential Information
From time to time, we may receive requests from non-NHS organisations (including, though not restricted to: social services, the police, solicitors and private sector providers) asking to share information about you. However, we will not disclose any health information to them without your explicit (written) consent (via hand written letter given to practice or through the non-NHS organisations), unless there are exceptional circumstances, such as when the health or safety of others is at risk or where the law requires the disclosure of information (Articles 6(1)(c) and 9(2)(h)” of GDPR).
Your rights to withdraw consent for us to share your information
You have the right to refuse/withdraw your consent to sharing information at any time. This right applies unless the staff can demonstrate compelling, legitimate grounds for processing your information.
Your right to access your medical record
Under the GDPR, you are able to view your records via registration for access to medical records online. However due to high demand, if you request to see the full paper and electronic medical records. Then for these requests, we have to charge an administration fee. Please enquire more at reception.
You also have the right to have inaccurate information corrected, where a note would be written/typed in the record to explain what needs to be corrected. Please enquire more at reception.
How long information is retained
Your records will be retained until your death.
Other Privacy Notices
We will have privacy notices made available via leaflets and websites: NHS Choices and Www.HighamHillMedicalCentre.nhs.uk.
Right to make a complaint
We try our best to meet the high standards of collecting and using personal information to give you the best direct patient care. We encourage people to bring their concerns to our attention and we take them seriously. You can submit your complaint on our website or write to the address shown above.
If you still remain dissatisfied with practice’s decision following your complaint, you may wish to contact:
Information Commissioner's Office
Their website is www.ico.gov.uk.
The information commissioner will not normally consider an appeal until you have exhausted your rights of redress and complaint to the practice.