Important Notice 20th July 2021
The current NHS Digital (NHSD) extract of GP data for Research purposes (known as the GPDPR) has been delayed due to NHSD wishing to review the way in which this data will be collected, to conduct more public involvement and information about the plans and change the way in which patients can opt out of the extract of their GP data.
Currently the only way to opt out is to complete a Type 1 opt out form and return this to the practice by the 1st September. However, this extract will not be taken until the NHSD have changed the way it will take the data and respect the patient’s choice for using their data. NHSD are introducing the following changes to the opt out process which will mean that patients will be able to change their opt-out status at any time::-
- Patients do not need to register a Type 1 opt-out by 1st September to ensure their GP data will not be uploaded.
- NHS Digital will create the technical means to allow GP data that has previously been uploaded to the system via the GPDPR collection to be deleted when someone registers a Type 1 opt-out.
- The plan to retire Type 1 opt-outs will be deferred for at least 12 months while we get the new arrangements up and running and will not be implemented without consultation with the RCGP, the BMA and the National Data Guardian.
This means that you can opt out at any time in the future and NHSD will delete data that they already have taken for research purposes, the deadline of the 01/09/2020 has been delayed until a new system of opt out is developed. Hopefully, this will be a simple centralised approach via the NHS app or NHS website to avoid paper form and administration work for your GP.
We will update you when we know more about the NHSD plans to change how you can control who has access to your data.
Providing healthcare services necessitates the collection of personal and confidential information about patients. The Practice is committed to protecting your privacy and will only use any information we collect in a lawful manner in accordance with:-
- General Data Protection Regulations (GDPR)
- Human Rights Act 1998
- Common Law Duty of Confidentiality
- Health and Social Care Act 2012
- NHS Codes of Confidentiality and Information Security.
1. Patient Privacy Notice.docx
2. Website Privacy Statement.docx
3. Practice Confidentiality Policy .doc
COVID-19 Privacy Notice
Due to the unprecedented challenges that the NHS and we, Bilston Family Practice face due to the worldwide COVID-19 pandemic, there is a greater need for public bodies to require additional collection and sharing of personal data to protect against serious threats to public health.
In order to look after your healthcare needs in the most efficient way the Practice may therefore need to share your personal information, including medical records, with staff from other GP Practices including Practices within our Primary Care Network, as well as other health organisations (i.e. Clinical Commissioning Groups, Commissioning Support Units, Local authorities etc.) and bodies engaged in disease surveillance for the purposes of research, protecting public health, providing healthcare services to the public and monitoring and managing the Covid-19 outbreak and incidents of exposure.
The Secretary of State has served notice under Regulation 3(4) of the Health Service (Control of Patient Information) Regulations 2002 (COPI) to require organisations to process confidential patient information in the manner set out below for purposes set out in Regulation 3(1) of COPI.
Purpose of this Notice
The purpose of this Notice is to require the Practice to process confidential patient information for the purposes set out in Regulation 3(1) of COPI to support the Secretary of State’s response to Covid-19 (Covid-19 Purpose). “Processing” for these purposes is defined in Regulation 3(2) and includes dissemination of confidential patient information to persons and organisations permitted to process confidential patient information under Regulation 3(3) of COPI. This Notice is necessary to require the Practice to lawfully and efficiently process confidential patient information as set out in Regulation 3(2) of COPI for purposes defined in regulation 3(1), for the purposes of research, protecting public health, providing healthcare services to the public and monitoring and managing the Covid-19 outbreak and incidents of exposure.
Requirement to Process Confidential Patient Information
The Secretary of State has served notice to recipients under Regulation 3(4) that requires the Practice to process confidential patient information, including disseminating to a person or organisation permitted to process confidential patient information under Regulation 3(3) of COPI.
The Practice is only required to process such confidential patient information:
· where the confidential patient information to be processed is required for a Covid-19 Purpose and will be processed solely for that Covid-19 Purpose in accordance with Regulation 7 of COPI
· from 20th March 2020 until 30th September 2020.
A Covid-19 Purpose includes but is not limited to the following:
· understanding Covid-19 and risks to public health, trends in Covid-19 and such risks, and controlling and preventing the spread of Covid-19 and such risks
· identifying and understanding information about patients or potential patients with or at risk of Covid-19, information about incidents of patient exposure to Covid-19 and the management of patients with or at risk of Covid-19 including: locating, contacting, screening, flagging and monitoring such patients and collecting information about and providing services in relation to testing, diagnosis, self-isolation, fitness to work, treatment, medical and social interventions and recovery from Covid-19
· understanding information about patient access to health services and adult social care services and the need for wider care of patients and vulnerable groups as a direct or indirect result of Covid-19 and the availability and capacity of those services or that care
· monitoring and managing the response to Covid-19 by health and social care bodies and the Government including providing information to the public about Covid-19 and its effectiveness and information about capacity, medicines, equipment, supplies, services and the workforce within the health services and adult social care services
· delivering services to patients, clinicians, the health services and adult social care services workforce and the public about and in connection with Covid-19, including the provision of information, fit notes and the provision of health care and adult social care services
· research and planning in relation to Covid-19.
Recording of processing
A record will be kept by the Practice of all data processed under this Notice.
Sending Public Health Messages
Data protection and electronic communication laws will not stop the Practice from sending public health messages to you, either by phone, text or email as these messages are not direct marketing.
It may also be necessary, where the latest technology allows the Practice to do so, to use your information and health data to facilitate digital consultations and diagnoses and we will always do this with your security in mind.