Data Privacy Notice: How we use and share your data

HOW IS MY INFORMATION USED?

For provision of direct care:
In the practice, individual staff will only look at what they need in order to carry out such tasks as booking appointments, making referrals, giving health advice or provide you with care.

Sometimes your information may be used to run automated calculations. These can be as simple as calculating your Body Mass Index but they can be more complex and used to calculate some risks to your health that we should consider with you. The ones we use in practice include Qrisk (cardiovascular risk assessment – usually following an NHS Health Check), Qdiabetes (diabetes risk assessment) and eFI (electronic frailty index). Whenever we use these profiling tools, we assess the outcome on a case-by-case basis. No decisions about individual care are made solely on the outcomes of these tools but they are used to help us assess and discuss your possible future health and care needs with you.

HOW IS MY INFORMATION SHARED?

We share information about you with other health professionals where they have a genuine need for it to support your care, as follows.

Primary Care Network

All practices in the UK are members of a Primary Care Network (PCN), which is a group of practices who have chosen to work together and with local community, mental health, social care, pharmacy, hospital and voluntary services to provide care to their patients.

PCNs are built on the core of current primary care services and enable greater provision of proactive, personalised, coordinated and more integrated health and social care.

We are members of Woodsley PCN along with Kirkstall Lane Medical Centre, Burton Croft Surgery, Holly Bank Surgery, Craven Road Medical Practice, Burley Park Medical Centre, Hyde Park Surgery, Abbey Grange Medical Practice and Vesper Road Surgery. This arrangement means that practices within the same PCN may share data with other practices within the PCN, for the purpose of patient care (such as extended hours appointments and other services). Each practice within the PCN is part of a stringent data sharing agreement that means that all patient data shared is treated with the same obligations of confidentiality and data security.

For commissioning and healthcare planning purposes:

In some cases, for example when looking at population healthcare needs, some of your data may be shared (usually in such a way that you cannot be identified from it). The following organisations may use data in this way to inform policy or make decisions about general provision of healthcare, either locally or nationally.

• Leeds City Council: Public Health, Adult or Child Social Care Services
• Leeds Clinical Commissioning Group
• NHS Digital (Formerly known as HSCIC)
• The “Clinical Practice Research Datalink” (EMISWeb practices) or ResearchOne Database (SystmOne practices).
• Other data processors which you will be informed of, as appropriate.

In order to comply with its legal obligations we may send data to NHS Digital when directed by the Secretary of State for Health under the Health and Social Care Act 2012.

This practice contributes to national clinical audits and will send the data which are required by NHS Digital when the law allows. This may include demographic data, such as date of birth, and information about your health which is recorded in coded form, for example, the clinical code for diabetes or high blood pressure.

For research purposes:

Research data is usually shared in a way that individual patients are non-identifiable. Occasionally, where research requires identifiable information, you may be asked for your explicit consent to participate in specific research projects. The surgery will always gain your consent before releasing any information for this purpose.

Where specific information is asked for, such as under the National Diabetes Audit, you have the choice to opt out of the audit.

For safeguarding purposes, life or death situations or other circumstances when we are required to share information:

We may also disclose your information to others in exceptional circumstances (i.e. life or death situations) or in accordance with Dame Fiona Caldicott’s information sharing review (Information to share or not to share).

For example, your information may be shared in the following circumstances:

• When we have a duty to others e.g. in child protection cases
• Where we are required by law to share certain information such as the birth of a new baby, infectious diseases that may put you or others at risk or where a Court has decided we must.

When you request to see your information or ask us to share it with someone else:
If you ask us to share your data, often with an insurance company, solicitor, employer or similar third party, we will only do so with your explicit consent. Usually the requesting organisation will ask you to confirm your consent, often in writing or electronically. We check that consent before releasing any data and you can choose to see the information before we send it.

CONCERNS & COMPLAINTS
If you are happy for your data to be extracted and used for the purposes described in this notice then you do not need to do anything.

Should you have any concerns about how your information is managed at the practice, please contact Parveen Manku, Practice Manager on 0113 2953913 or by email: pmanku@nhs.net.  If you are still unhappy following a review by the GP practice, you can then complain to the Information Commissioners Office (ICO) via their website www.ico.org.uk, casework@ico.org.uk, telephone: 0303 123 1113 (local rate) or 01625 545 745.

How can my information be viewed outside of Laurel Bank Surgery?

Your health information can be shared both locally and nationally at differing levels of detail.

For direct care locally in Leeds: Leeds Care Record
Patients in Leeds are able to benefit from the sharing of information via the Leeds Care Record. This shares contact details, diagnosis list, medications, allergies, test results, referrals & letters and care plans between health professionals in Leeds. Information is shared by GP practices, the Hospital trusts, Community and Mental Health services, and Social Care.

You have the right to object to your Leeds Care Record being shared by contacting them directly. Details are available via their website.

Download a leaflet on Leeds Care Record.

This is also available in an Easy Read version.

You can opt in and out of these sharing agreements whenever you choose. Details of these schemes are as follows:

Nationally for direct care: Summary Care Record – sharing your information for your care across the NHS.
Your core Summary Care Record is created when you register at a GP practice (although you should be given the option to opt in/out during your registration). If you do not express a preference, it is currently assumed that your consent is implied.

The Summary Care Record shares only your contact details, medications and allergies with other healthcare professionals involved in your care.

You can also choose to share a Enhanced Summary Care Record. This shares contact details, medications, allergies, diagnosis list, care plans, end of life care and immunisations with other healthcare professionals. Sensitive data is excluded. A Summary Care Record with Additional Information will only be created for you if you explicitly choose this option. Only the most up to date information is shared for each category (EMISWeb). All current and past information is shared for each category (SystmOne).

Choosing to share a summary care record with additional information is thought to be of great benefit if you are admitted to hospital locally or elsewhere in the UK.

You can opt out of sharing any of your information in a Summary Care Record. If you decide not to share this will not affect your entitlement to care. However, it could result in the delivery of your care being less efficient as other health professionals will not have access to these parts of your medical history.

Further details are available in this leaflet.

This is also available in an Easy Read version.

You can change your mind about your Summary Care Record at any time.

To register or change your Summary Care Record preferences, please contact reception on 0113 2953900 or by email: LBS.reception@nhs.net

Nationally: ‘Your Data Matters to the NHS’: The national data-out. 

The national data opt-out is a new service that allows patients to opt out of their confidential patient information being used for purposes beyond direct care, such as research and planning.

The national data opt-out was introduced on 25 May 2018, enabling individuals to opt-out from the use of their data for research or planning purposes, in line with the recommendations of the National Data Guardian in her Review of Data Security, Consent and Opt-Outs.

The NHS has launched the national data opt-out as part of the ‘Your Data Matters to the NHS’ campaign.  This campaign informs the public that the strict rules about how health and care data can and cannot be used have been strengthened. The NHS is committed to keeping patient information safe and always being clear about how it is used.   The campaign will also let the public know that they can choose whether their confidential patient information is used for research and planning. A new website nhs.uk/your-nhs-data-matters has been launched which allows the public to find out more about how their data is used across health and care and to opt out if you wish to do so.

For more information, or if you wish to opt out, please visit: Your NHS data matters or alternatively you can call 0300 303 5678