Confidentiality & Medical Records
We understand how important it is to keep your personal information safe and secure and we take this very seriously. We have taken steps to make sure your personal information is looked after in the best possible way and we review this regularly.
Please read the attached privacy notice (‘Privacy Notice’) carefully, as it contains important information about how we use the personal and healthcare information we collect on your behalf.
The practice complies with data protection and access to medical records legislation. Identifiable information about you will be shared with others in the following circumstances:
- To provide further medical treatment for you e.g. from district nurses and hospital services.
- To help you get other services e.g. from the social work department. This requires your consent.
- When we have a duty to others e.g. in child protection cases anonymised patient information will also be used at local and national level to help the Health Board and Government plan services e.g. for diabetic care.
If you do not wish anonymous information about you to be used in such a way, please let us know.
Reception and administration staff require access to your medical records in order to do their jobs. These members of staff are bound by the same rules of confidentiality as the medical staff.
Data Sharing Opt-Out
There are various examples within the NHS where data is anonymously shared and we strongly believe this is a good use of anonymised patient data. But we also strongly believe in giving patients a choice. So please do have a read of this so you can make an informed choice.
You may have read in the press about "General Practice Data for Planning and Research" (GPDPR). This is a new way that NHS Digital will collect data from the GP record to help plan for future NHS healthcare.
Any data collected will be pseudonymised (meaning it can't be identified with an individual).
There are two types of opt out to consider.
TYPE 1 - PRACTICE DATA - this stops any data going from the practice to NHS Digital.
Type 2 - NATIONAL DATA - this will allow the data to go to NHS Digital, but stops any data going further than that.
Remember in both instances, the data isn't identifiable to you.
To opt out of Type 1: complete the form here https://nhs-prod.global.ssl.fastly.net/binaries/content/assets/website-assets/data-and-information/data-collections/general-practice-data-for-planning-and-research/type-1-opt-out-form.docx before 30th September 2021 and return it to us (by email or in hard copy). We will then add the information to your medical record.
To opt out of National Data, visit https://www.nhs.uk/your-nhs-data-matters/manage-your-choice/ or use the NHS App.
For more information on GPDPR see https://digital.nhs.uk/data-and-information/data-collections-and-data-sets/data-collections/general-practice-data-for-planning-and-research#what-data-is-shared
For information on how we share data and for information / opt-out instructions for other data sharing programmes, please see our data sharing/confidentiality page on our website www.buryroadsurgery.co.uk
Freedom of Information
Information about the General Practitioners and the practice required for disclosure under this act can be made available to the public. All requests for such information should be made to the practice manager.
Access to Records
In accordance with the General Data Protection Regulation, patients (data subjects) have the right to access their data and any supplementary information held by Bury Road Surgery; this is commonly known as a data subject access request (DSAR). Data subjects have a right to receive:
- Confirmation that their data is being processed
- Access to their personal data
- Access to any other supplementary information held about them
Options for access
As of April 2016, practices have been obliged to allow patients access to their health record online. This service will enable the patient to view coded information held in their health record. Prior to accessing this information, you will have to visit the practice and undertake an identity check before being granted access to your records.
In addition, you can make a request to be provided with copies of your health record. To do so, you must submit a Data Subject Access Request (DSAR) form; this can be submitted electronically and the DSAR form is available on the practice website. Alternatively, a paper copy of the DSAR is available from reception. You will need to submit the form online or return the completed paper copy of the DSAR to the practice. Patients do not have to pay a fee for copies of their records.
Once the DSAR form is submitted, Bury Road Surgery will aim to process the request within 21 days; however, this may not always be possible. The maximum time permitted to process DSARs is one calendar month.
There may be occasions when the data controller will withhold information kept in the health record, particularly if the disclosure of such information is likely to cause undue stress or harm to you or any other person.
At Bury Road Surgery the Data Controller is Dr Carl Anandan, and should you have any questions relating to accessing your medical records, please ask to discuss this with the named data controller.