The purpose of this guidance is to inform you of the way in which NHS Surrey Heartlands Clinical Commissioning Group use information (including personal data) about you. It explains:
- who we are and what we do
- the types of information we hold about people
- how we use this information and why we need to do this
- who we may share your information with
- how you can object to the way we use information or complain about this
- how you can access a copy of the information we hold about you
- what other rights you may have in relation to this information
- how we keep your information secure and confidential
- where to go if you require further information.
This guidance applies to all individuals whose information is used by the CCG; including local NHS service users, our staff and suppliers, and visitors to our offices.
This information is known as a ‘Privacy Notice’ or ‘Fair Processing Notice’ and it is a legal obligation under data protection legislation that we provide you with this.
- document Privacy Notice: How we use your information (73 KB) (word)
- pdf Privacy Notice: How we use your information (212 KB) (pdf)
Covid-19 and Your Information
This supplementary Privacy Notice describes how Surrey Heartlands CCG may use your information to protect you and others during the Covid-19 outbreak.
Covid-19 Vaccination Programme – Privacy Information for Health and Care Staff
The Covid-19 vaccination programme in Surrey Heartlands is being rolled out to all health and social care workers who have frequent face-to-face contact with patients and who are directly involved in patient care in either secondary or primary care, mental health, urgent and emergency care and community settings. This includes those working in independent, voluntary and non-standard healthcare settings such as hospices, and community-based mental health or addiction services.
NHS Surrey Heartlands CCG, on behalf of the Local Resilience Forum, have worked with partners to establish a booking system for these individuals to receive vaccinations at various sites within Surrey Heartlands.
Your employer will provide you with information on how to sign up to receive the vaccine and will share relevant information about you with the provider of your local vaccination service to allow you to be invited for vaccination.
When it is the right time for you to receive your vaccination you will receive an invitation to come forward by email, SMS, or telephone.
We know lots of people will be keen to get protected from the virus but we are asking people not to share these vaccination booking details with friends of family as we have a limited number of vaccines to offer and need to ensure these are provided to those providing Health and Care services first. Other people within the community will be contacted directly for their own appointment.
Information Governance provides a consistent way for employees to deal with the many different standards and legal rules that apply to information handling. This includes the Data Protection Act (DPA) 2018 - a United Kingdom Act of Parliament that updates data protection laws in the UK. It is a national law which complements the European Union's General Data Protection Regulation (GDPR). Therefore GDPR and the Data Protection Act 2018 should be read side by side.
Subject Access Request
Individuals have the right to access information that the CCG holds about them by making a Subject Access Request (SAR). The GDPR has removed the fees that could previously be charged for SARs and reduced the amount of time that organisations have to respond. This right applies to all individuals including staff, employees of other organisations, service users, visitors to offices, and attendees at events.
Each NHS organisation holds their own records and we can only supply Surrey Heartlands CCG records. If the CCG holds the data requested and it is not legally exempt from disclosure, the information must be supplied within one month (though this can be extended by up to a further two months in some circumstances).
The Information Commissioner’s Office (ICO) is the UK’s independent authority set up to uphold information rights in the public interest, promoting openness by public bodies and data privacy for individuals. A range of guidance for individuals and organisations is available via their website: ico.org
Privacy Notice for the public on Population Health and the use of data
The Surrey Heartlands Health and Care Partnership, which includes your GP practices, Surrey Heartlands CCG and Surrey Council, is working with partners to link local information together to see what the needs of the population are and so make better decisions on the care of our citizens. This will help all partners improve care for groups of people in the community and is known as a Population Health approach.
These partners will not be able to identify individuals as part of the approach as any identifiable data will be removed. If there is any need to identify individuals, for example in order to address an important health and care need, then this can only be done by the GP or other organisation that already holds that data.
This is an innovative approach to supporting our citizens, for more information please read the full notice.
- Privacy Notice: Use of GP Practice Data for Commissioning Activities and Population Health Management
NHS National data opt-out programme - Your Data Matters to the NHS
Information about your health and care helps us to improve your individual care, speed up diagnosis, plan your local services and research new treatments.
In May 2018, the strict rules about how this data can and cannot be used were strengthened. The NHS is committed to keeping patient information safe and always being clear about how it is used.
You can choose whether your confidential patient information is used for research and planning.
- To find out more visit: Your NHS Data Matters (nhs.uk)
- Make your data choice online: Manage your data choice (nhs.uk)
Surrey Care Record Update
The Surrey Care Record is an Electronic Health Record (EHR) linking system that brings together patient/client’s information across health and care systems in a secure manner, giving a real-time summary of your information which is held within a number of local records.
Benefits of such a system are:
- Improved quality of care – information about your care will be instantly available to clinicians for more accurate diagnosis and on-going treatment. Duplication of tests will be avoided.
- Improved patient safety – there will be greater visibility for your health and social providers about your current medications, allergies and adverse reactions.
- Reduced delays in care – test results will be readily available reduces patient waiting time.
The CCG is a data controller for patient data that is shared via the Surrey Care Record. Please see the full Privacy Notice for further information.
- Privacy Notice: Surrey Care Record (via Surrey Heartlands ICS website).