Privacy Notice
Please view our Privacy Statement.
There are a number of factors to the GDPR (General Data Protection Regulation) that changes how companies communicate with users and process their personal information.
One fundamental factor is privacy notices – how organisations explain at the point of data collection what users can expect will happen to their data. A privacy notice is part of obtaining consent from the user (or telling them about legitimate interests, for example), and is presented at the point of data collection.
The GDPR demands clarity through a privacy notice
This is what the GDPR has to say about the information companies provide about personal data processing – it must be:
- concise, transparent, intelligible and easily accessible;
- written in clear and plain language, particularly if addressed to a child; and
- free of charge.
As the ICO puts it (ICO: Guide to Data Protection) when discussing the GDPR, “being transparent by providing a privacy notice is an important part of fair processing. You can’t be fair if you are not being honest and open about who you are and what you are going to do with the personal data you collect.”
What’s more, the information you should provide is changing, too. The lawful basis for your data processing, how long you’ll keep the data for, the user’s right to complain – these are all pointed to in the GDPR.
The following questions should be considered when writing a privacy notice:
- What information is being collected?
- Who is collecting it?
- How is it collected?
- Why is it being collected?
- How will it be used?
- Who will it be shared with?
- What will be the effect of this on the individuals concerned?
- Is the intended use likely to cause individuals to object or complain?
Studholme Medical Centre Privacy Notices
Please note Data Controller has now be confirmed as Mr Daniel Lorusso. His contact details are : daniel.lorusso@nhs.net or on 07917 093042.
Quality Care Commission
Privacy Notice for Care Quality Commission
Emergencies
Privacy Notice for Emergencies
Direct Care
Privacy Notice for Direct Care
National Screening Programs
Privacy Notice for National screening programs
Summary Care Record
Privacy Notice for Summary Care Record
NHS Digital
Privacy Notice for NHS Digital
Public Health
Privacy Notice for Public Health
Medical Research
Risk Stratification
Privacy Notice for Risk Stratification
Safeguarding
Privacy Notice for Safeguarding
Demographics
Privacy Notice for Demographics
Home ACR Testing Service
ACR project for patients with diabetes
This practice is working with a company called Healthy.io to provide a pilot programme sponsored by NHS Digital to monitor urine albumin:creatinine ratio (ACR) annually for patients with diabetes. This enables patients with diabetes to test their kidney function from home. With your permission, we will share your contact details with Healthy.io to enable them to contact you and send you a test kit. This will help identify those at risk of kidney disease and proactively manage early interventions for the benefit of patient care. If you do not wish to be contacted by Healthy.io, you will have the opportunity to say so by replying to the text message sent from our practice and when you will be contacted by Healthy.io onboarding team.