How we use your data GDPR 2018 (General Data Protection Regulation)
Important information for patients
This information explains how Green Porch Medical Centre will collect, look after, use or otherwise process your personal data. "Personal data" is information relating to you as a living, identifiable individual. This is in line with the Data Protection Act 2018 and the General Protection Regulations.
Who is responsible for my information?
As your registered GP Practice, Green Porch Medical Centre is the data controller for your information and is responsible for looking after your medical record while you are registered as a patient at the practice.
The Data Protection Officer for the practice is Nicola Reeves, Practice Manager.
Why do we collect information about you?
As healthcare professionals we maintain records about you in order to support your care. When you register with the practice your existing records will be transferred to us from your previous practice either electronically or by paper record.
If you do not have a previous medical record i.e. a new born child or coming from overseas the NHS will create a medical record for you.
We take great care to ensure your information is kept securely, it is kept up to date, it is accurate and it is used appropriately. All of the practice staff are trained to understand their legal and professional obligations to protect your information and staff will only look at your information if they need to.
What information do we hold about you?
- Details about you, such as your name, address, carers, biological gender, gender identity, ethnic origin, date of birth, legal representatives and emergency contact details.
- Any contact the surgery has with you, such as appointments, clinic visits, emergency appointments etc.,
- Notes and reports about your health.
- Details about your treatment and care.
- Results of investigations such as laboratory tests, x-rays etc.,
- Relevant information from other health professionals, relatives or those who care for you.
How is my information stored?
This practice uses a clinical system called EMIS web, which is where any information about you will be stored electronically. Any information held in paper records or received in paper form is scanned onto your electronic medical record.
The practice works with the NHS to ensure the technology used to store your medical record is robust enough to ensure your information is kept secure and confidential.
Each member of staff who works at the practice has a legal obligation to keep information about you confidential and we maintain our duty of confidentiality with annual training. All staff are also aware that access to personal data is limited to appropriate staff and information is only shared with organisations and individuals who have a legitimate and legal basis for access to it.
What is the legal basis we use to process your information?
We are required to tell you the legal basis that is used for the various ways we process and use your data.
When is my information shared?
We are committed to protecting your privacy and will only use information collected lawfully in accordance with:
2023 Data Protection Privacy Notice
2023 GP Direct Care Privacy Notice
2023 GP Planning and Research Privacy Notice
2023 GP Statutory Disclosures Privacy Notice
2023 Human Resources Privacy Notice