We have a legal responsibility to keep confidential all of the information held about you.

Information may need to be shared with others to provide you with the best care, for example hospitals, district nurses etc. We follow strict guidelines concerning the release of information.

(This Privacy Notice is to run alongside our standard Practice Privacy Notice)

As we move away from the initial response to COVID-19 the health and social care system will need to continue to take action to manage and mitigate the spread and impact of the outbreak. This includes ensuring that approved researchers can continue to securely access pseudonymised data held by GP IT systems to assist the health and care service’s response to COVID-19 by, for example:

• recognising trends in COVID-19 diseases and identifying risks it poses
• controlling and preventing the spread of COVID-19
• monitoring and managing outbreaks

The OpenSAFELY COVID-19 research service provides a secure analytics service that supports COVID-19 research, COVID-19 clinical audit, COVID-19 service evaluation and COVID-19 health surveillance purposes.

Under the COVID-19 Public Health Directions 2020 NHS England has been directed by the Secretary of State for Health and Social Care to establish and operate the OpenSAFELY service.  While each GP practice remains the data controller of its own patient data, they are required under the provisions of s259 of the Health and Social Care Act 2012 to provide access to de-identified (pseudonymised) patient data through the OpenSAFELY service.

The service enables individuals (academics, analysts and data scientists) approved by NHS England to run queries on pseudonymised GP and NHS England patient data which is held within the GP system suppliers’ data environments.  Controls are in place to ensure that individuals only have access to aggregated outputs from the service (i.e. they cannot access information that either directly or indirectly identifies individuals).

Purpose of this Notice

OpenSAFELY service is used to analyse de-identified (pseudonymised) data within the EMIS and TPP boundaries, to support COVID-19 related research.

This is a continuation of a service which is supported by the BMA which has been operating since 2020. The permanent legal basis (the COVID-19 Direction) above allows the practice to provide this data to NHSE as an ongoing service.

The OpenSAFELY service is a Trusted Research Environment (TRE) established within the secure environment of EMIS and TPP. Researchers write their analysis code away from the patient data; the code is run automatically on de-identified (pseudonymised) patient data; and only the aggregated outputs (now anonymous) are shared with researchers to be used, for example, in journal publications, reports or presentations.

These controls keep patient data secure inside EMIS and TPP and confidential from researchers. The use of TREs and the data processing principles which OpenSAFELY represents is supported by the RCGP.

To date, this service has supported a range of important COVID-19 related research, including one of the world’s first and largest studies to identify the clinical factors associated with COVID-19 related death, which informed the national COVID-19 vaccination strategy and Green Book guidance. Other studies have also informed COVID-19 related NICE guidance and decisions made by SAGE.

All NHS England approved research studies are published online, including sharing the exact analysis code each study used to analyse the patient data, by whom and when such code was run. In future, NHSE will also publish approvals on our data release register.

During the pandemic, and in the recovery phase, de-identified data has been crucial in helping to save lives. It has supported research into COVID-19 and the ways that it has affected our lives, our health, and to identify effective medicines and treatments.

Research has helped to identify new treatments for COVID-19 and to understand how we can keep our communities safe. Data has helped us to prioritise the right care to the most vulnerable in our society and to develop vaccines to protect against COVID-19.

If you have any questions, please contact us at [email protected]

Recording of processing

 A record will be kept by Lapal Medical Practice of all data processed under this Notice.

Sending Public Health Messages

Data protection and electronic communication laws will not stop Lapal Medical Practice from sending public health messages to you, either by phone, text or email as these messages are not direct marketing.

Digital Consultations

It may also be necessary, where the latest technology allows Lapal Medical Practiceto do so, to use your information and health data to facilitate digital consultations and diagnoses and we will always do this with your security in mind.

Creating a new NHS England: NHS England and NHS Digital merged on 1 February 2023. All references to NHS Digital now, or in the future, relate to NHS England.

Your Data Matters To The NHS

Information about your health and care helps us to improve your individual care, speed up diagnosis, plan your local services and research new treatments. The NHS is committed to keeping patient information safe and always being clear about how it is used.

How Your Data Is Used

Information about your individual care such as treatment and diagnoses is collected about you whenever you use health and care services. It is also used to help us and other organisations for research and planning such as research into new treatments, deciding where to put GP clinics and planning for the number of doctors and nurses in your local hospital.  It is only used in this way when there is a clear legal basis to use the information to help improve health and care for you, your family and future generations.

Wherever possible we try to use data that does not identify you, but sometimes it is necessary to use your confidential patient information.

You Have A Choice

You do not need to do anything if you are happy about how your information is used. If you do not want your confidential patient information to be used for research and planning, you can choose to opt out securely online or through a telephone service. You can change your mind about your choice at any time.

Will Choosing This Opt-Out Affect Your Care And Treatment?

No, choosing to opt out will not affect how information is used to support your care and treatment. You will still be invited for screening services, such as screenings for bowel cancer.

What Do You Need To Do?

If you are happy for your confidential patient information to be used for research and planning, you do not need to do anything.

To find out more about the benefits of data sharing, how data is protected, or to make/change your opt-out choice visit www.nhs.uk/your-nhs-data-matters

Useful Links / Downloads

• www.digital.nhs.uk/about-nhs-digital – Opting out of sharing your confidential patient information.
• Information leaflet – Your Data Matters
  to the NHS.
• Information poster – Information about your health and care helps
  us to improve your individual care.
• Guide for young people – A guide to the national data opt-out for young people.
• Guide for Carers – A guide to the national data opt-out for carers.

The following facilities are available at the practice:

Wheelchair access

Accessible toilets

Disabled parking

Hearing loop.

The Freedom of Information Act 2000 obliges the practice to produce a Publication Scheme. A Publication Scheme is a guide to the ‘classes’ of information the practice intends to routinely make available.

This scheme is available on request.

How we keep your records confidential

Everyone working for the NHS has a legal duty to keep information about you confidential.

We have a duty to:

• Maintain full and accurate records of the care we provide to you.
• Keep records about you confidential, secure and accurate.
• Provide information in a format that is accessible to you (i.e., in large type if you are partially sighted).

We will not share information that identifies you for any reason, unless:

• You ask us to do so.
• We ask, and you give us specific permission.
• We must do this by law.
• We have special permission for health or research purposes.
• We have special permission because the interests of the public are thought to be of greater importance than your confidentiality.

Our guiding principle is that we are holding your records in strict confidence.

Who are our partner organisations?

We may share information with the following main partner organisations:

• NHS England.
• Our commissioners.
• NHS trusts / organisation (hospitals, CCG’s).
• Ambulance service.
• Social services.

We may also share your information, with your consent and subject to strict sharing protocols about how it will be used, with:

• Education services.
• Local authorities.
• Voluntary sector providers.
• Private sector.

Anyone who receives information from us also has a legal duty to keep it all confidential.

If you believe the trust has breached any of your data protection rights

You have a right to complain to the UK Supervisory Authority as below:
Information Commissioner
Wycliffe house
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 01625 545745

Website: Information Commissioner’s Office (ICO)

Why we collect information about you

In the practice, we aim to provide you with the highest quality of health care. To do this we must keep records about you, your health and the care we have provided or plan to provide to you.

These records may include:

• Basic details about you, such as address, date of birth, next of kin.
• Contact we have had with you such as clinical visits.
• Details and records about your treatment and care.
• Results of x-rays, laboratory test etc.
• Relevant information from people who care for you and know you well, such as health professionals and relatives.

It is good practice for people in the NHS who provide care to:

• Discuss and agree with you what they are going to record about you.
• Give you a copy of letters they are writing about you.
• Show you what they have recorded about you, if you ask.

We will only store your information in identifiable form for a long as in necessary in and in accordance with the NHS England’s Rules found within the Records Management Code of Practice for Health and Social Care 2016 page on the NHS Digital website.

How your records are used

The people who care for you use your records to:

• Provide a good basis for all health decisions made by you and care professionals.
• Allow you to work with those providing care.
• Make sure your care is safe and effective.
• Work effectively with others providing you with care.

Others may also need to use records about you to:

• Check the quality of care (such as clinical audit).
• Protect the health of the public.
• Keep track of NHS spending.
• Manage the health service.
• Help investigate any concerns or complaints you or your family have about your health care.
• Teach health workers.
• Help with research.

Some information will be held centrally to be used for statistical purposes. In these instances, we take strict measures to ensure that individual patients cannot be identified.

We use anonymous information, wherever possible, but on occasions we may use personally confidential information for essential NHS purposes such as research and auditing. However, this information will only be used with your consent, unless the law requires us to pass on the information.

The legal part

You have a right to privacy under the Data Protection Act 2018 and the General Data Protection Regulations 2016. The practice needs your personal, sensitive and confidential data in order perform our statutory health duties, in the public interest or in the exercise of official authority vested in the controller in compliance with Article 6 (e) of the GDPR and for the purposes of preventive or occupational medicine, for the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services on the in compliance with Article 9, (h) of the GDPR.

You have the right to ask for a copy of all records about you.

• Your request should be made to the practice holding your information
• We are required to respond to you within one Month
• You will need to give adequate information (for example full name, address, date of birth NHS number etc.)

To Access your record contact

If you think anything is inaccurate or incorrect, please inform the practice as soon as possible. For other rights about the use of your information please see our website.
The practice data protection officer is Paul Couldrey PCIG Consulting Ltd, and is available via:

• Telephone: 07525 623939
• Email: [email protected]

Some services provided are not covered under our contract with the NHS and therefore attract charges.

Examples include the following:

• Medicals for pre-employment, sports and driving requirements (HGV, PSV etc.)
• Insurance claim forms
• Passport signing
• Prescriptions for taking medication abroad
• Private sick notes
• Vaccination certificates

GDPR Privacy Notice

What is Proxy Access?

Proxy access was developed to allow someone other than the patient to access and manage parts of their GP online services account. The person acting on behalf of the patient for example a parent or carer (the proxy) is given their own online access account (rather than using the patient’s login details).

To obtain proxy access a person must be registered for online access at the practice where the patient they are acting for is registered. Proxy access is the recommended alternative to sharing login details. Every practice is required to verify patient identity documentation, or individually vouch for each patient requesting access to online services.

Please contact the practice who will advise how to request Proxy Access.

Lapal Medical Practice is a Safe surgery, please click below for more information.

We are a Safe Surgery

Our aim is to provide the highest level of care for all our patients. We will always be willing to hear if there is any way that you think that we can improve the service we provide.

If you would like to give us any feedback or wish to make a complaint, please complete our Feedback/ Contact Form.

We hope that, if you have a problem, you will use our practice complaints procedure. We believe this will give us the best chance of putting right whatever has gone wrong and an opportunity to improve our practice.

Taking your complaint further

If you want to make a complaint about primary care services to the commissioner, you will now contact the Black Country Integrated Care Board instead of NHS England.

You can do this by: 

Telephone: 0300 0120 281
Email: [email protected]
Writing to us at: Time2Talk, NHS Black Country Integrated Care Board (ICB) Civic Centre, St Peter’s Square, Wolverhampton, WV1 1SH

Care Quality Commission (CQC)

Citygate
Gallowgate
Newcastle-upon-Tyne
NE1 4PA

Telephone: 0300 616161

Email: [email protected]

There is a Central NHS Computer System called the Summary Care Record (SCR).

It is an electronic record which contains information about the medicines you take, allergies you suffer from and any bad reactions to medicines you have had.

Why Do I Need A Summary Care Record?

Storing information in one place makes it easier for healthcare staff to treat you in an emergency, or when your GP practice is closed.

This information could make a difference to how a doctor decides to care for you, for example which medicines they choose to prescribe for you.

Who Can See It?

Only healthcare staff involved in your care can see your Summary Care Record.

How Do I Know If I Have One?

Over half of the population of England now have a Summary Care Record.

Do I Have To Have One?

No, it is not compulsory.

If you choose to opt out of the scheme, then you will need to complete a Summary Care Record Opt-Out form to let the surgery know.

More Information

For further information visit the NHS Care records website.

• Please treat all staff with due respect, we are all just doing our job.
• Do not ask for information for anyone else other than yourself.
• Tell us of any change of name or address, so that our records are accurate. You can do this by using our Change of Details Form.

• Only request an urgent appointment if appropriate.
• Home visits should only be requested if you are really too ill to attend surgery, and night visits should be for emergency only.
• Please cancel your appointment if you are unable to attend.
• Please be punctual but be prepared to wait if your own consultation is delayed by an unexpected emergency.
• Please allow sufficient time for your consultant’s letter or the results of any tests to reach us.
• Use the tear-off slip to request your repeat prescription whenever possible.
• Please attend for review, when asked, before your prescription is due.

As a patient you have the right to:

• Be registered with a named doctor.
• Change doctor if desired (but please remember that you may have to see any of the doctors if your need is urgent).
• Receive emergency care.
• Receive appropriate drugs and medicines.
• Be referred for specialist or second opinion if they and GP agrees.
• See your medical records or a copy, subject to certain laws.
• Know that by law, everyone working for the NHS must keep the contents of your medical records private.

With these rights come responsibilities for the public. That means being:

• Courteous to staff at all times.
• As prompt as possible for all appointments.
• Responsible for cancelling appointments in adequate time.

The practice will not tolerate any violence or abuse (including verbal abuse) to any members of the team.

If this happens you will be asked to leave the premises and you will be removed from the practice list.