Do It Online

National Data Opt Out

The national data opt-out gives patients more control over how identifiable health and care information is used. The system will offer patients and the public the opportunity to make an informed choice about whether they wish their personally identifiable data to be used just for their individual care and treatment or also used for research and planning purposes.

  • Research- finding ways to improve treatments and identify causes of and cures for illnesses
  • Planning- to improve and enable efficient and safe provision of health and care services

All health and care organisations in England must comply with the national data opt-out policy.

If patients are happy about sharing their personable identifiable information for research and planning they do not need to do anything.

Choosing to Opt- Out

Patients and the public who decide they do not want their personally identifiable data used for planning and research purposes will be able to set their national data opt-out choice online. NHS Digital will provide a non-digital alternative for patients and the public who can't or don't want to use an online system. Individuals can change their mind anytime.

If patients would like to opt out of sharing their personable identifiable data for research and planning they can either:

It will not be possible to set National data opt out preferences via the GP practice

 More information on National data opt out can be found at:

https://digital.nhs.uk/services/national-data-opt-out-programme

https://www.nhs.uk/your-nhs-data-matters/

https://www.nhs.uk/your-nhs-data-matters/manage-your-choice/other-ways-to-manage-your-choice/ 

Royston Group Practice (the Practice) Data Protection Privacy Notice for Patients
 
Introduction:
 
This privacy notice lets you know what happens to any personal data that you give to us, or any information that we may collect from you or about you from other organisations. 
This privacy notice applies to personal information processed by or on behalf of the practice. 
This Notice explains

  • Who we are and how we use your information
  • Information about our Data Protection Officer
  • What kinds of personal information about you we hold and use (process)
  • The legal grounds for our processing of your personal information (including when we share it with others)
  • What should you do if your personal information changes?
  • For how long your personal information is retained / stored by us?
  • What are your rights under Data Protection laws 
     
    The General Data Protection Regulation (GDPR) and the Data Protection Act 2018 (DPA 2018) became law on 25th May 2018. The GDPR is a single EU-wide regulation on the protection of confidential and sensitive (special) information, the DPA 2018 deals with elements of UK law that differ from the European Regulation, both came into force in the UK on the 25th May 2018, repealing the previous Data Protection Act (1998). 
     
    For the purpose of applicable data protection legislation (including but not limited to the General Data Protection Regulation (Regulation (EU) 2016/679) (the "GDPR"), and the Data Protection Act 2018 the practice responsible for your personal data is Royston Group Practice.
    This Notice describes how we collect, use and process your personal data, and how in doing so, we comply with our legal obligations to you. Your privacy is important to us, and we are committed to protecting and safeguarding your data privacy rights.
    How we use your information and the law.
    Royston Group Practice will be what’s known as the ‘Controller’ of your personal data. 
    We collect basic personal data about you and location-based information.  This does include name, address and contact details such as email and mobile number etc. 
    We will also collect sensitive confidential data known as “special category personal data”, in the form of health information, religious belief (if required in a healthcare setting) ethnicity and sex life information that are linked to your healthcare, we may also receive this information about you from other health providers or third parties.

    COVID-19 Privacy Notice

    Due to the unprecedented challenges that the NHS and we, Royston Group practice face due to the worldwide COVID-19 pandemic, there is a greater need for public bodies to require additional collection and sharing of personal data to protect against serious threats to public health.

    In order to look after your healthcare needs in the most efficient way we, Royston Group practice may therefore need to share your personal information, including medical records, with staff from other GP Practices including Practices within our Primary Care Network, as well as other health organisations (i.e. Clinical Commissioning Groups, Commissioning Support Units, Local authorities etc.) and bodies engaged in disease surveillance for the purposes of research, protecting public health, providing healthcare services to the public and monitoring and managing the Covid-19 outbreak and incidents of exposure.

     

    The Secretary of State has served notice under Regulation 3(4) of the Health Service (Control of Patient Information) Regulations 2002 (COPI) to require organisations to process confidential patient information in the manner set out below for purposes set out in Regulation 3(1) of COPI.

     

     

    Purpose of this Notice

    The purpose of this Notice is to require organisations such as Royston Group practice to process confidential patient information for the purposes set out in Regulation 3(1) of COPI to support the Secretary of State’s response to Covid-19 (Covid-19 Purpose). “Processing” for these purposes is defined in Regulation 3(2) and includes dissemination of confidential patient information to persons and organisations permitted to process confidential patient information under Regulation 3(3) of COPI. This Notice is necessary to require organisations such as Royston Group Practice to lawfully and efficiently process confidential patient information as set out in Regulation 3(2) of COPI for purposes defined in regulation 3(1), for the purposes of research, protecting public health, providing healthcare services to the public and monitoring and managing the Covid-19 outbreak and incidents of exposure.

     

    Requirement to Process Confidential Patient Information

    The Secretary of State has served notice to recipients under Regulation 3(4) that requires Royston Group practice to process confidential patient information, including disseminating to a person or organisation permitted to process confidential patient information under Regulation 3(3) of COPI.

     

    Royston Group practice is only required to process such confidential patient information:

     

    • where the confidential patient information to be processed is required for a Covid-19 Purpose and will be processed solely for that Covid-19 Purpose in accordance with Regulation 7 of COPI
    • from 20th March 2020 until 31 March 2021.

     

     

    Covid-19 Purpose.

    A Covid-19 Purpose includes but is not limited to the following:

    • understanding Covid-19 and risks to public health, trends in Covid-19 and such risks, and controlling and preventing the spread of Covid-19 and such risks
    • identifying and understanding information about patients or potential patients with or at risk of Covid-19, information about incidents of patient exposure to Covid-19 and the management of patients with or at risk of Covid-19 including: locating, contacting, screening, flagging and monitoring such patients and collecting information about and providing services in relation to testing, diagnosis, self-isolation, fitness to work, treatment, medical and social interventions and recovery from Covid-19
    • understanding information about patient access to health services and adult social care services and the need for wider care of patients and vulnerable groups as a direct or indirect result of Covid-19 and the availability and capacity of those services or that care
    • monitoring and managing the response to Covid-19 by health and social care bodies and the Government including providing information to the public about Covid-19 and its effectiveness and information about capacity, medicines, equipment, supplies, services and the workforce within the health services and adult social care services
    • delivering services to patients, clinicians, the health services and adult social care services workforce and the public about and in connection with Covid-19, including the provision of information, fit notes and the provision of health care and adult social care services
    • research and planning in relation to Covid-19.

     

    Recording of processing

    A record will be kept by Royston Group practice of all data processed under this Notice.

     

    Sending Public Health Messages

    Data protection and electronic communication laws will not stop Royston Group practice from sending public health messages to you, either by phone, text or email as these messages are not direct marketing.

     

     

    Digital Consultations

     

    It may also be necessary, where the latest technology allows Royston Group practice to do so, to use your information and health data to facilitate digital consultations and diagnoses and we will always do this with your security in mind.


    Research and Pandemic Planning

     

    The Secretary of State has directed NHS Digital to collect, process and analyse data in connection with COVID-19 to support the Secretary of State’s response to COVID-19 and support various COVID-19 purposes set out in the COVID-19 Public Health Directions 2020, 17 March 2020 (as amended) (COVID-19 Direction) and below. This enables NHS Digital to collect data and analyse and link the data for COVID-19 purposes with other data held by NHS Digital.

     

    The purpose of the data collection is also to respond to the intense demand for General Practice data to be shared in support of vital planning and research for COVID-19 purposes, including under the general legal notice issued by the Secretary of State under Regulation 3(4) of the Health Service (Control of Patient Information) Regulations 2002 (COPI).

    NHS Digital has therefore been requested by the joint co-chairs of the Joint GP IT Committee (JGPITC) (the BMA and RCGP) to provide a tactical solution during the period of the COVID-19 pandemic to meet this demand and to relieve the growing burden and responsibility on General Practices. On 15 April 2020 the BMA and RCGP therefore gave their support via JGPITC to NHS Digital’s proposal to use the General Practice Extraction Service (GPES) to deliver a data collection from General Practices, at scale and pace, as a tactical solution to support the COVID-19 response in the pandemic emergency period.

     

    It is a requirement of the JGPITC that all requests by organisations to access and use this data will need to be made via the NHSX SPOC COVID-19 request process, that will triage and prioritise these requests and refer appropriate requests on to the NHS Digital Data Access Request Service (DARS).   NHS Digital will consult with representatives of the BMA and the RCGP on all requests for access to the data. An outline of the process for this agreed with the BMA and the RCGP is published here. Requests by organisations to access record level data from this collection will also be subject to Independent Group Advising on the Release of Data (IGARD) consideration. Data applicants will need to demonstrate they have a lawful basis to access the data for COVID-19 purposes.

     

     

    Benefits of this sharing

     

    Organisations, including the Government, health and social care organisations and researchers need access to this vital data for a range of COVID-19 purposes, to help plan, monitor and manage the national response to the COVID-19 pandemic, which will help save lives. COVID-19 purposes for which this data may be analysed and used may include:

     

    • understanding COVID-19 and risks to public health, trends in COVID-19 and such risks, and controlling and preventing the spread of COVID-19 and such risks
    •  
    • identifying and understanding information about patients or potential patients with, or at risk of COVID-19, information about incidents of patient exposure to COVID-19 and the management of patients with or at risk of COVID-19 including: locating, contacting, screening, flagging and monitoring such patients and collecting information about and providing services in relation to testing, diagnosis, self-isolation, fitness to work, treatment, medical and social interventions and recovery from COVID19
    •  
    • understanding information about patient access to health services and adult social care services as a direct or indirect result of COVID-19, and the availability and capacity of those services • monitoring and managing the response to COVID-19 by health and social care bodies and the Government including providing information to the public about COVID-19 and its effectiveness and information about capacity, medicines, equipment, supplies, services and the workforce within the health services and adult social care services
    •  
    • delivering services to patients, clinicians, the health services and adult social care services workforce and the public about and in connection with COVID-19, including the provision of information, fit notes and the provision of health care and adult social care services; and
    •  
    • research and planning in relation to COVID-19.          
    • Where it is necessary for us to collect information and specific health data about visitors to our practice, we will not collect more information than we need, and we will ensure that any information collected is treated with the appropriate safeguards.
    • We have an obligation to protect our staff and employees’ health, so it is reasonable for staff at Royston Group practice to ask any visitors to our practice to tell us if they have visited a particular country, or are experiencing COVID-19 symptoms. This must only be in pre-approved circumstances and we would also ask all patients to consider government advice on the NHS 111 website and not attend the practice.
    • Visitors to The Practice
    • This information is required by NHS Digital under section 259(1)(a) of the 2012 Act to comply with the COVID-19 Direction. In line with section 259(5) of the 2012 Act, all organisations in England that are within the scope of this Notice, as identified below under Health and Social Care Bodies within the scope of the collection, must comply with the requirement and provide information to NHS Digital in the form, manner and for the period specified in this Notice.   This Notice is issued in accordance with the procedure published as part of NHS Digital’s duty under section 259(8) of the 2012 Act.
    • Details of the information to be collected can be found on the NHS Digital website – Specification of this DPN. Type 1 objections will be upheld in collecting this data from General Practices and therefore the data for those patients who have registered a Type 1 objection with their GP will not be collected. The Type 1 objection prevents an individual’s personal identifiable confidential information from being shared outside of their GP Practice except when it is being used for the purposes of their direct care. The National Data Opt-Out will not apply to the collection of the data, as this is a collection which is required by law.
    • NHS Digital has been directed by the Secretary of State under section 254 of the 2012 Act under the COVID-19 Direction to establish and operate a system for the collection and analysis of the information specified for this service: GPES Data for Pandemic Planning and Research (COVID-19). A copy of the COVID-19 Direction is published here: https://digital.nhs.uk//about-nhs-digital/corporate-information-and-documents/directions-anddata-provision-notices/secretary-of-state-directions/covid-19-public-health-directions-2020.
    • Legal Basis for this collection
    • Data will be collected nationally from all GP Practices by NHS Digital every fortnight. All requests to access this data will be triaged through the NHSX SPOC COVID-19 request process and assessed and fulfilled by NHS Digital through DARS. This will significantly reduce the burden on General Practice at a time when demand on resources is high, enabling General Practice to focus on delivering health care and support to patients. It will also reduce compliance burden and risk for General Practice associated with sharing data and complying with the terms of the general legal notice issued under COPI, which applies to General Practices.
    • Data may be analysed and linked to other data held by NHS Digital or held by other organisations to which access to the data is granted for COVID-19 purposes, through the process described above.

     

    Review and Expiry of this Notice

    This Notice will be reviewed on or before 31 March 2021 and may be extended by The Secretary of State. If no further notice is sent to Royston Group practice by The Secretary of State this Notice will expire on 31 March 2021.

Call 111 when you need medical help fast but it’s not a 999 emergencyNHS ChoicesThis site is brought to you by My Surgery Website