Data sharing, fair processing and GDPR
In north east London we can improve the quality of care you receive by sharing the right information about you between our local NHS and social care organisations who are providing you with your direct care. We call this sharing of information, Data Sharing and the people sharing this data your Direct Care Team. These are the people who will, at some point, be involved directly in your care; be it your GP, or the A&E team when you visit for an emergency, or the social care team looking after you in your home. The sharing of information has always happened (to a lesser degree) with paper processes but systems are allowing us to share more relevant information about you amongst your Direct Care Team. This helps them be more efficient and supports decisions that they and you make about your care.
This work is being led by your local clinicians who want to make sure you receive the best quality care possible. They want to be as transparent as possible so that you can feel assured that data is being shared with your best interests at heart. They want you to be involved in this as best you see fit. In line with the Data Protection Act 2018 General Data Protection Regulations (GDPR) which came into force in May 2018, and the Health and Social Care Act (2015) we are adopting an implied consent model for sharing data for direct care purposes between the members of your Direct Care Team. To read the Privacy Notice or Fair Processing Notice please see the document “Privacy Notice” which you can download from this page.
We have three aims to use Digital Technology to support your care. These are:
1:Real time access to patient records
The London Care Record (also known locally as the East London Patient Record (eLPR)) – This is a London wide programme which shares more information about you than the Summary Care Record to better support your Direct Care Team and your care. Currently this is sharing between the following organisations in NEL:
- Barts Health NHS Trust
- Homerton University Hospital
- Barking, Havering and Redbridge University Hospitals NHS Trust
- East London Foundation Trust
- North East London Foundation Trust
- GP Provider Federations
- All NEL General Practices
- Community Health Services (on their own or through their host organisations)
- City of London Corporation
- London Borough of Hackney
- London Borough of Newham
- London Borough of Tower Hamlets
- London Borough of Waltham Forest
- London Borough of Barking & Dagenham
- London Borough of Havering
- London Borough of Redbridge
- St Joseph’s Hospice
- Richard House Hospice
- St Frances Hospice
- City and Hackney Urgent Healthcare Social Enterprise
- London Ambulance Service
- Community Pharmacies across North East London
- Care Homes
The London Care Record is a London wide programme with each area in London connecting up their local organisations. These connections form the back bone of sharing your data across London but only with organisations involved in your care. For more information on the OneLondon programme that is delivering this work or on organisations connected up in other regions please click here www.onelondon.online/.
2. Population Health and Analytics
Gathering together your data in one place (under the control of your clinicians) to use it improve the way we deliver your care and plan our future delivery of your services. We are developing a NHS owend system called the Discovery Data Service (DDS) that delivers this functionality for us. The use of data within DDS is strictly controlled and managed by your local providers. You can find a list of all the use cases that have been approved here:
discoverydataservice.org/Content/Use_cases.htm
In order to find out more information about the application process we have put in place for using Discovery data please click here.
3. Personal Health Record
This pulls together all of the information held about you across our services into one place that you can view and interact with as never before. There are a few ways to access your data, here are the two ways that we are supporting:
- The nationally developed NHS App www.nhs.uk/using-the-nhs/nhs-services/the-nhs-app/ which allows you to see elements of your GP record, book appointments and order repeat prescriptions
- Patients Know Best (PKB) which is a system we have procured locally to give you access to more than just your primary care data. PKB allows you to view your hospital data or other acute data (like Mental Health data). This is in the process of being rolled out across the local healthcare providers in north east London and data will be made available as and when these providers go live. For more information on what providers are sharing please visit:northeastlondon.icb.nhs.uk/patients-know-best/pkb/ . You can find more information on PKB and how they use and store your data here patientsknowbest.com/privacy-policy/.
There are two high level Data Protection Impact Assessments (DPIA) that you can find and download from this page. Barking and Dagenham, Havering and Redbridge also have some specific DPIAs for their work that you can find here.
4. Universal Care Plan
(UCP) – This is a London wide solution to allow multiple organisations involved in your care to create and collaborate on a care plan revolving around your needs. For more information on UCP please click here ucp.onelondon.online/.
For more information please look at our Privacy Notice which you can access from this page which will include how you can object to the sharing of your information.
Privacy Notice
Processors of personal data In order to deliver the best possible service, the practice contracts Processors to process personal data, including patient data on our behalf.
When we use a Processor to process personal data we will always have an appropriate legal agreement in place to ensure that they keep the data secure, that they do not use or share information other than in accordance with our instructions and that they are operating appropriately. Examples of functions that may be carried out by a Processor include:
- Companies that provide IT services & support, including our core clinical systems; systems which manage patient facing services (such as our website and service accessible through the same); data hosting service providers; systems which facilitate appointment bookings or electronic prescription services and document management services.
- Delivery services (for example if we were to arrange for delivery of any medicines to you).
- Payment providers (if for example you were paying for a prescription or a service such as travel vaccinations).
GPES Data for Pandemic Planning and Research (COVID-19)
We are legally required to share data with NHS Digital for purpose under section 259(1)(a) of the Health and Social Care Act 2012 to support vital planning and research for COVID-19 purposes. For further details, please refer to: https://digital.nhs.uk/binaries/content/assets/website-assets/corporate-information/directions-and-data-provision-notices/data-provision-notices/gpesdatapandemicplanningresearchdpnv1.0.pdf
Transparency Statement
How the NHS and care services use your information
Crawley Road Medical Centre is one of many organisations working in the health and care system to improve health care for patients.
Whenever you use a health or care service, such as attending Surgery for a consultation, Accident & Emergency or using Community Care services, important information about you is collected in a patient record for that service. Collecting this information helps to ensure you get the best possible care and treatment.
The information collected about you when you use these services can also be used and provided to other organisations for purposes beyond your individual care, for instance to help with:
• improving the quality and standards of care provided
• research into the development of new treatments
• preventing illness and diseases
- monitoring safety
• planning services
This may only take place when there is a clear legal basis to use this information. All these uses help to provide better health and care for you, your family and future generations. Confidential patient information about your health and care is only used like this where allowed by law.
Most of the time, anonymised data is used for research and planning so that you cannot be identified in which case your confidential patient information isn’t needed.
You have a choice about whether you want your confidential patient information to be used in this way. If you are happy with this use of information you do not need to do anything. If you do choose to opt out your confidential patient information will still be used to support your individual care.
To find out more or to register your choice to opt out, please visit www.nhs.uk/your-nhs-data-matters. On this web page you will:
- See what is meant by confidential patient information
- Find examples of when confidential patient information is used for individual care and examples of when it is used for purposes beyond individual care
- Find out more about the benefits of sharing data
- Understand more about who uses the data
- Find out how your data is protected
- Be able to access the system to view, set or change your opt-out setting
- Find the contact telephone number if you want to know any more or to set/change your opt-out by phone
- See the situations where the opt-out will not apply
You can also find out more about how patient information is used at:
https://www.hra.nhs.uk/information-about-patients/ (which covers health and care research); and
https://understandingpatientdata.org.uk/what-you-need-know (which covers how and why patient information is used, the safeguards and how decisions are made)
You can select your opt-out by going here: https://www.nhs.uk/your-nhs-data-matters/
You can change your mind about your choice at any time.
Data being used or shared for purposes beyond individual care does not include your data being shared with insurance companies or used for marketing purposes and data would only be used in this way with your specific agreement.
Health and care organisations have until 2020 to put systems and processes in place so they can be compliant with the national data opt-out and apply your choice to any confidential patient information they use or share for purposes beyond your individual care. Our organisation is currently’ compliant with the national data opt-out policy.
Zero Tolerance Policy
This practice fully supports and subscribes to the NHS Zero Tolerance campaign against unacceptable behaviour. Any patient who verbally abuses or shows aggression to any member of staff will be warned and may be removed from our list.