We take all aspects of Information Governance very seriously and all staff are trained with regard to the security, accuracy and confidentiality of the data we hold. Any breaches of our Information Governance policies will be treated as serious disciplinary matters.
We use an approved web based clinical software system, EMIS Web, for recording patient data and this provides secure off-site data storage with full and regular backup of the data to prevent loss of data. Any significant breaches will be reported to the appropriate authority
Uses of your information could include:
- Teaching and training healthcare staff (only with your approval).
- Helping staff to review the care they give, to make sure it is of the highest standard.
- Reviewing and planning services to meet local need. This includes sending information to Health Authorities and the Department of Health.
- Helping with research into better methods of healthcare. The Local Research Ethics Committee must approve research projects. We will ask your permission to use information about you for all research unless it is in a fully anonymised form, that is no one outside the practice could identify the data as relating to you.
In some situations we have a legal duty to report information to the appropriate authorities, for example:
- Reporting of certain infectious diseases that might seriously affect the health of others e.g. meningitis or measles (but NOT HIV or AIDS).
- Where a formal court order has been issued.
All NHS and Primary Care Trusts have a ‘Caldicott Guardian’. This is the person who oversees the systems to keep information safe and secure. Our practice manager fulfils this role and will answer any questions you may have.
The Care Data programme is being rolled out across the country and the practice is required to allow the extraction of patient data. As a Patient, you may opt out if you do not want your data shared in this way and the practice will add a special code to stop the release of your data.
Having this information stored in one place makes it easier for healthcare staff to treat you in an emergency, or when your GP practice is closed.
Only healthcare staff involved in your care can see your Summary Care Record. Those who look at your Summary Care Record need to:
- be directly involved in caring for you;
- have a Smartcard with a chip and pass code (like a bank card and PIN).
Healthcare staff will only see the information they need to do their job, and they will ask your permission every time they need to look at your Summary Care Record. For more information see link on left.
If you were a registered NHS patient in 2013 you have already been informed about this system and given the opportunity to opt out. You have the right to change your mind and can opt in or out by completing the official form from the NHS website or the practice’s Data Sharing Options form.
If you have an Oxfordshire Care Summary, clinicians will be able to check medical details that are held by your GP. These will include any significant diagnoses you may have, and what medication you take, or have taken recently. They will also be able to check on what tests your GP has carried out. They will not be able to see information about conversations you have had with your GP or information on sensitive subjects such as sexual health. They will also be able to see information about treatment you have received at the Horton or John Radcliffe Hospitals, attendances at Minor Injury Units and GP Our of Hours services, and some documents such as care plans.
You will already have been asked for consent to share these pieces of information. The information will be used to ensure you get the safest treatment as quickly as possible. If you chose to opt out, the practice has added the relevant code to stop the sharing of your data.
You have the right to change your mind and can opt in or out by completing the practice’s Data Sharing Options form.
It will be necessary for a member of staff to go through the recent records with you as these are all computerised. There will be no charge for viewing the information but there will be a small charge for any photocopies requested.
If there is anything in your records that is factually incorrect, it may be possible to correct this in accordance with your rights under the Data Protection Act but any request to amend information must be made in writing. Entries expressing medical opinion which were reasonably based on the information available at that time will generally not be changed even if they subsequently prove to be incorrect, but we will add to the entry to explain the position more fully in the light of the later information received, in some cases if the request is submitted in writing.
The Freedom of Information Act provides public access to information held by public authorities. It does this in two ways:
- public authorities are obliged to publish certain information about their activities; and
- members of the public are entitled to request information from public authorities.
We have a published scheme of how you can access information but in essence all you need to do is send a written request to the practice manager either by letter to the surgery or by email to: firstname.lastname@example.org and they will deal with your request.
The duty of confidentiality owed to a person under 16 is as great as the duty owed to any older person. If a “child” is deemed able to fully understand his/her health problems, we cannot automatically give information to parents without his/her consent. Doctors will use the Gillick competency and Fraser guidelines to decide if a child is competent to make their own health decisions. We do always try to encourage young people to discuss health issues with their parents.
All staff must sign the Practice Confidentiality Policy and any breach of this could lead to instant dismissal. A copy of the practice policy is displayed at reception. If you want us to give information to another person please let us know and be sure to tell us if this applies to everything or if it is for one specific thing e.g. if we can give your wife all test results or just one, or if we can let your mother know your appointment times or test results.
The practice fully supports the NHS principles and values and has encapsulated the core principles in its own Patient Charter.