Winterton Medical Pratice
Manlake Avenue
WINTERTON
DN15 9TA
01724 732202
Norfolk Avenue
BURTON UPON STATHER
DN15 9EW
01724 720202
Winterton Medical Pratice
Manlake Avenue
WINTERTON
DN15 9TA
01724 732202
Norfolk Avenue
BURTON UPON STATHER
DN15 9EW
01724 720202
DATA
We ask for your personal information so that you can receive appropriate care and treatment.
This information is recorded on computer and we are registered under the Data Protection Act. The practice will ensure that patient confidentiality is maintained at all times by all members of the practice team.
Sometimes it is necessary for the effective functioning of a multi-disciplinary team to share information within that team. More information on this and your health record is detailed below.
All patients have a right to access their health records. Contact the practice if you wish to have access.
The surgery confidentially records details of your consultations, medication and letters on an electronic clinical system. This is only shared with other organisations with your consent, although some relevant information may be shared with other health professionals when we refer you for further treatment.
Reception and administrative staff may require access to your medical record in order to carry out their role. These members of staff are bound by the same rules on confidentiality as their clinical colleagues. Identifiable information about you will be shared with others in the following circumstances:
There have been developments to allow other healthcare professionals access to your records to improve the care you receive elsewhere.
Some data was uploaded to your Summary Care Record and this allowed hospitals and other healthcare providers, with your consent) to see limited but important information such as significant illnesses, repeat medication and allergies.
NHS England have also put a system in place to enable the NHS to use health information, sent from your record to a secure system along with your postcode and NHS number - but not your name. This allows those planning NHS services or carrying out medial research to use information from different parts of the NHS in a way which does not identify you.
If you have any concerns or wish to prevent this from happening, please let the practice know of visit the Care Data website page.
CARE DATA
NHS Digital & Care
Strict information governance standards are in place to protect patient data. All of our staff are trained to observe confidentiality standards and comply with strict data operating procedures.
You have the right to object to your information being shared. Should you wish to opt out of data collection.
Type 1 opt-out prevents information being shared outside a GP Practice for purposes other than direct care. A type 2 opt-out prevents information being shared outside NHS Digital for purposes beyond an individual's direct care.
If you wish to have further advice or help please contact a member of our reception team.
Access your NHS Services
Download the NHS App
Click the link below for more information about an NHS account and how to download the NHS App
General Data Protection Regulations
GDPR
The GDPR is similar to the Data Protection Act (DPA) 1998 (which the practice already complies with), but strengthens many of the DPA’s principles. The main changes are:
Where we need your consent to process data, this consent must be freely given, specific, informed and unambiguous.
There are new protections for patient data:
Due to the Covid-19 pandemic there could be a delay of up to 90 days for all subject access requests
The Information Commissioner's Office has confirmed that penalties will not be issued for delays in fulfilling a subject access request.
Please click the following button to access our Online Services options
The General Data Protection Regulations allows you to find out what information is held about you including information held within your medical records, either in electronic or physical format. This is known as the “right of subject access”. If you would like to have access to all or part of your records, you can make a request in writing.
You will need to give adequate information (for example full name, address, date of birth, NHS number and details of your request) so that your identity can be verified. You should however be aware that some details within your health records may be exempt from disclosure, however this will in the interests of your wellbeing or to protect the identity of a third party.
If you wish to have access to your medical records, please contact the surgery. If you have reviewed your medical record (you can apply to do this on-line, see the Online Services tab) and wish to object or request a change to the information we hold please get in touch.
Once completed you need to return the form to the practice in person, bringing a recognised form of photo-ID, such as a passport or driver's license with you, so we can verify your identity.
Consent
We define consent as “any freely given specific and informed indication of wishes by which the data subject signifies their agreement to personal data relating to them being processed.”
This is to protect your right to privacy, and we may ask you to provide consent to do certain things, like contact you or record certain information about you for your clinical records. Individuals also have the right to withdraw their consent at any time.
Patient Data
The changes in GDPR mean that we must get explicit permission from patients when using their data, which is information that relates to a single person, such as diagnosis, name, age, earlier medical history etc. One of the considerations patients may make is about how their personal data is used and specifically whether it is shared, with consent, and under strictly controlled circumstances, with professionals outside the practice.
Privacy NoticeOne of the requirements of this legislation is that all organisations that hold personal data, whether that be data concerning patients, customers or employees, must make their policies and processes around personal information available in the form of a Privacy Notice. You can find our practice privacy notice.
PRIVACY NOTICE
Confidentiality
Your confidentiality is very important to us, all NHS staff are bound by law and a strict code of confidentiality and we have strict controls in place to protect your information.
The Surgery's Caldicott Guardian, Gail Holland, is responsible for ensuring patients' confidentiality is respected. The GDPR also requires organisations' to register a notification with the Information Commissioner to describe the purposes for which they process personal and sensitive information. This information is publicly available on the Information Commissioners Office (ICO) and the practice is registered with them.
ICO website
Our Data Protection Officer is Barry Jackson at N3i. Our Data Controller, responsible for keeping your information secure and confidential is Barry Jackson at N3i.
Data Protection & Information Sharing
National Data Opt Out
Your health records contain a type of data called confidential patient information. The data can be used for research & planning. You can chose to stop your confidential patient information being used for research and planning
OVERVIEW OPT OUT
Summary Care Record
When you make a visit to the NHS or a social care service, information about you and the care you receive is recorded and stored in a health care record. The purpose of this is so people caring for you can make the best decisions about your care.
YOUR RECORDSHOW TO GET YOUR GP RECORD
Care & Health Information Exchange
The Care & Health Information Exchange (CHIE) is a secure system which shares health & social care information from GP surgeries, hospitals, community and mental health, social service and other appropriate health agencies.
CHIE WEBSITECHIE OPT OUT
The NHS wants to give people better ways to see their personal health information online. We know that people want to be able to access their health records. It can help you see test results faster. It also lets you read and review notes from your appointments in your own time. We’re now letting you see all the information within your health record automatically. If you are over 16 and have an online account, such as through the NHS app or another online primary care service, you will now be able to see all future notes and health records from your GP. Some people can already access this feature, this won’t change for you.
This means that you will be able to see notes from your appointments, as well as test results and any letters that are saved on your records. This only applies to records from your GP, not from hospitals or other specialists. You will only be able to see information from the 31st of October 2023. For most people, access will be automatic, and you won’t need to do anything.
Your GP may talk to you to discuss test results before you are able to see some of your information on the app. Your GP may also talk to you before your full records access is given to make sure that having access is of benefit to you. There might be some sensitive information on your record, so you should talk to your doctor if you have any concerns.
These changes only apply to people with online accounts. If you do not want an online account, you can still access your health records by requesting this information through reception. The changes also only apply to personal information about you. If you are a carer and would like to see information about someone you care for, speak to reception staff.
The NHS App, website and other online services are all very secure, so no one is able to access your information except you. You’ll need to make sure you protect your login details. Don’t share your password with anyone as they will then have access to your personal information.
If you do not want to see your health record, or if you would like more information about these changes, please speak to your GP or reception staff.’
This is a guide to the surgery publication scheme as required by the Freedom of Information Act 2000. This scheme recognises members of the public are entitled to request information
The practice Privacy Notice can be downloaded by clicking the button below.
The Practice have appointed Barry Jackson as the Data Protection Officer (DPO). He is employed by N3i and can be contacted through their service desk on phone: 0300 002 001 or by email (dpo@n3i.co.uk) or via the link below-
