Your data is collected for the purpose of providing direct patient care; however, we can disclose this information if it is required by law, if you give consent or if it is justified in the public interest. The practice may be requested to support research; however, we will always gain your consent before sharing your information with medical research databases where the law allows.
In order to comply with its legal obligations, this practice may send data to NHS Digital when directed by the Secretary of State for Health under the Health and Social Care Act 2012. Additionally, this practice contributes to national clinical audits and will send the data that is required by NHS Digital when the law allows. This may include demographic data, such as date of birth, and information about your health which is recorded in coded form; for example, the clinical code for diabetes or high blood pressure.
Processing your information in this way and obtaining your consent ensures that we comply with Articles 6(1)(c), 6(1)(e) and 9(2)(h) of the General Date Protection Regulations (GDPR).
We may also have to share your information, subject to strict agreements on how it will be used, with the following organizations or receive information from the following organizations:-
NHS Trusts / Foundation Trusts | Other GP Practices and GP Organizations |
Independent Contractors e.g. dentists, opticians, pharmacists | NHS Commissioning Support Units |
Private Sector Providers | Voluntary Sector Providers |
Ambulance Trusts | Clinical Commissioning Groups |
Social Care Services | NHS Digital |
Local Authorities | Education Services |
Fire and Rescue Services | Police & Judicial Services |
Other ‘data processors’ which you will be informed of |