General Data Protection Regulation
Low Moor Medical Practice
Patient Privacy Notice
EU GDPR 2016/679
Privacy Notice for National COVID-19 and Flu Vaccination Programmes
NHS England has established a centralised service for the management of both the COVID-19 and seasonal flu vaccination programmes. This service is supported by a central system, the Immunisation Management System.
When you attend for your Covid-19 vaccination a record will be made that you have been vaccinated and when. Normally, vaccinations are undertaken in GP settings. However, the delivery of the Covid-19 vaccine is being undertaken in a variety of care settings.
NHS England is responsible for processing your personal data for the purposes of the national vaccination programme. To find out more, you can access the NHS England privacy notice at:
Implementation Date: Friday 25th May 2018
This notice explains how Low Moor Medical Practice will collect, look after, use or otherwise process your personal data. “Personal data” is information relating to you as a living, identifiable individual.
HOW IS MY INFORMATION COLLECTED AND LOOKED AFTER?
Who is responsible for my information?
Low Moor Medical Practice is the data controller for your information and is responsible for looking after your record while you are a registered patient. The person with the key responsibility for data protection and security is Dr Frances GAVIN. The interim Data Protection Officer (DPO) for Low Moor Medical Practice is Alex Avis, Practice Manager. Any queries or concerns should be raised with the Practice Manager first. The DPO for the Bradford Care Alliance which supports the Practice is Mrs Rachael Nicholson, Scorex House, 1 Bolton Road, Bradford, BD1 4AS.
Why do we collect information about you?
As health professionals, we maintain records about you in order to support your care. By registering with the practice, your existing records will be transferred to us from your previous practice so that we can keep them up to date while you are our patient. If you do not have a previous medical record (a new-born child or coming from overseas, for example), we will create a medical record for you. We take great care to ensure that your information is kept securely, that it is up to date, accurate and used appropriately. All of our staff are trained to understand their legal and professional obligations to protect your information and will only look at your information if they need to.
What information do we hold about you?
- Details about you, such as your name, address, carers, biological gender, gender identity, ethnic origin, date of birth, legal representatives and emergency contact details
- Any contact the surgery has had with you, such as appointments, clinic visits, emergency appointments, etc.
- Notes and reports about your health
- Details about your treatment and care
- Results of investigations such as laboratory tests, x-rays, etc.
- Relevant information from other health professionals, relatives or those who care for you
How is my information stored?
Our practice uses a clinical records programme called SystmOne which is where any electronic information about you will be stored. Any information held in paper records is stored securely at the practice. We use a combination of working practices and technology to ensure that your information is kept confidential and secure.
What is the legal basis that we use to process your information?
We are required to tell you the legal basis that is used for the various ways we process and use your data. The following table sets the main ways your personal data may be used and the corresponding legal basis and category of data. Each purpose is covered in more detail within this notice to explain what these mean in more practical terms.
Primary Care Network
We are a member of BD4+ Primary Care Network (PCN). This means we will be working closely with a number of other Practices and health and care organisations to provide healthcare services to you. During the course of our work we may share your information with these Practices and health care organisations/professionals. We will only share this information where it relates to your direct healthcare needs.
When we do this, we will always ensure that appropriate agreements are in place to protect your information and keep it safe and secure. This is also what the Law requires us to do.
GP Data for Planning and Research (GPDPR)
This practice is supporting vital health and care planning and research by sharing your data with NHS Digital. For more information about this see the GP Practice Privacy Notice for General Practice Data for Planning and Research.