Confidentiality & Data Protection

The Practice complies with data protection and access to medical records legislation. The General Data Protection Regulations (GDPR)/ Data Protection Act 2018 is a new piece of legislation. It will not only apply to the UK and EU; it covers anywhere in the world in which data about EU citizens is processed.

The GDPR is similar to the Data Protection Act (DPA) 1998 (which the practice already complies with), but strengthens many of the DPA’s principles. The main changes are:

• Practices must comply with subject access requests
• Where we needs your consent to process data, this consent must be freely given, specific, informed and unambiguous
• There are new, special protections for patient data
• The Information Commissioner’s Office must be notified within 72 hours of a data breach

What is ‘patient data’?

Patient data is information that relates to a single person, such as his/her diagnosis, name, age, earlier medical history etc.

Our Privacy Notice is below. 

Privacy Notice

Your information, what you need to know

This privacy notice explains why we collect information about you, how that information may be used, how we keep it safe and confidential and what your rights are in relation to this.

Why we collect information about you

Health care professionals who provide you with care are required by law to maintain records about your health and any treatment or care you have received within any NHS organisation.  These records help to provide you with the best possible healthcare and help us to protect your safety.

We collect and hold data for the purpose of providing healthcare services to our patients and running our organisation which includes monitoring the quality of care that we provide. In carrying out this role we may collect information about you which helps us respond to your queries or secure specialist services. We may keep your information in written form and/or in digital form. The records may include basic details about you, such as your name and address. They may also contain more sensitive information about your health and also information such as outcomes of needs assessments. 

We also record incoming and outgoing telephone conversations in accordance with Article 6 of the general data protection regulations. CCTV recordings are also made to ensure patient and staff safety.

Details we collect about you

The health care professionals who provide you with care maintain records about your health and any treatment or care you have received previously (e.g. from Hospitals, GP Surgeries, A&E, etc.). These records help to provide you with the best possible healthcare.

Records which this GP Practice may hold about you may include the following:

• Details about you, such as your address and next of kin
• Any contact the surgery has had with you, such as appointments, clinic visits, emergency appointments, etc.
• Notes and reports about your health
• Details about your treatment and care
• Results of investigations, such as laboratory tests, x-rays, etc.
• Relevant information from other health professionals, relatives or those who care for you

How we keep your information confidential and safe

Everyone working for our organisation is subject to the Common Law Duty of Confidence.  Information provided in confidence will only be used for the purposes advised with consent given by the patient, unless there are other circumstances covered by the law.  The NHS Digital Code of Practice on Confidential Information applies to all NHS staff and they are required to protect your information, inform you of how your information will be used, and allow you to decide if and how your information can be shared.  All our staff are expected to make sure information is kept confidential and receive regular training on how to do this.

The health records we use may be electronic, on paper or a mixture of both, and we use a combination of working practices and technology to ensure that your information is kept confidential and secure.  Your records are backed up securely in line with NHS standard procedures.  We ensure that the information we hold is kept in secure locations, is protected by appropriate security and access is restricted to authorised personnel.

We also make sure external data processors that support us are legally and contractually bound to operate and prove security arrangements are in place where data that could or does identify a person are processed.

We are committed to protecting your privacy and will only use information collected lawfully in accordance with:

• Data Protection Act 2018
• Human Rights Act
• Common Law Duty of Confidentiality
• NHS Codes of Confidentiality and Information Security
• Health and Social Care Act 2015
• And all applicable legislation

We maintain our duty of confidentiality to you at all times. We will only ever use or pass on information about you if we reasonably believe that others involved in your care have a genuine need for it. We will not disclose your information to any third party without your permission unless there are exceptional circumstances (such as a risk of serious harm to yourself or others) or where the law requires information to be passed on.

Data provided by you is retained on cloud based IT systems, which are approved by NHS Digital.

GDPR: How do we maintain the confidentiality of your records?

We are committed to protecting your privacy and will only use information collected lawfully in accordance with:

• Data Protection Act 2018
• Human Rights Act
• Common Law Duty of Confidentiality
• NHS Codes of Confidentiality and Information Security
• Health and Social Care Act 2015
• And all applicable legislation

Every member of staff who works for an NHS organisation has a legal obligation to keep information about you confidential.

We will only ever use or pass on information about you if others involved in your care have a genuine need for it. We will not disclose your information to any third party without your permission unless there are exceptional circumstances (i.e. life or death situations), where the law requires information to be passed on and / or in accordance with the new information sharing principle, following Dame Fiona Caldicott’s information sharing review (Information to share or not to share) where “The duty to share information can be as important as the duty to protect patient confidentiality.” This means that health and social care professionals should have the confidence to share information in the best interests of their patients within the framework set out by the Caldicott principles. They should be supported by the policies of their employers, regulators and professional bodies.

Data provided by you is retained on cloud based IT systems, which are approved by NHS Digital.

How the NHS and care services use your information

Health and care organisations had until 2022 to put systems and processes in place so they can be compliant with the national data opt-out and apply your choice to any confidential patient information they use or share for purposes beyond your individual care. Our organisation is compliant with the national data opt-out policy.

GP practices are no longer able to record opt outs. To do this, please either visit: www.nhs.uk/your-nhs-data-matters

Phone the NHS Digital Contact Centre: 0300 303 5678 -Mon – Fri 9am to 5pm

Email: enquires@nhsdigital.nhs.uk

Write: National Data Opt Out, Contact Centre, NHS Digital, HM Government, 7 & 8 Wellington Place, Leeds, LS1 4AP

You can object to your personal information being shared with other healthcare providers but should be aware that this may, in some instances, affect your care as important information about your health might not be available to healthcare staff in other organisations. If this limits the treatment that you can receive then the practice staff will explain this to you at the time you object.

To ensure you receive the best possible care, your records are used to facilitate the care you receive. Information held about you may be used to help protect the health of the public and to help us manage the NHS.

Devon & Cornwall Care Record

Health and social care services in Devon and Cornwall have developed a system to share patient data efficiently and quickly and, ultimately, improve the care you receive. This shared system is called the Devon and Cornwall Care Record.

It’s important that anyone treating you has access to your shared record, so they have all the information they need to care for you. This applies to your routine appointments and also in urgent situations such as going to A&E, calling 111 or going to an out-of-hours appointment.

It’s also quicker for staff to access a shared record than to try to contact other staff by phone or email.

Only authorised health and care staff can access the Devon and Cornwall Care Record and the information they see is carefully checked so that it relates to their job. Also, systems do not share all your data – just data that services have agreed is necessary to include.

For more information about the Devon and Cornwall Care Record, please go to https://www.devonandcornwallcarerecord.nhs.uk/

Child Health Information

We wish to make sure that your child has the opportunity to have immunisations and health checks when they are due. We share information about childhood immunisations, the 6-8 week new baby check and breast-feeding status with Cornwall Partnership Foundation Trust health visitors and school nurses, and with South, Central and West Child Health Information Services (SCW CHIS) who are commissioned by NHS England to support the monitoring of care delivered to children. Personal data is collected from the child’s GP record to enable health screening, physical examination and vaccination services to be monitored to ensure that every child has access to all relevant health interventions. For more information: Fair Processing Notice Child Health Information Services – NHS SCW Support and Transformation for Health and Care (scwcsu.nhs.uk).

BRAVE AI

At The Rame Group practice, we are committed to protecting your privacy and ensuring the confidentiality of your information.

We want to provide you with insight into how BRAVE AI is utilised across Primary Care Networks in NHS Cornwall & Isles of Scilly Integrated Care Board and its potential impact on your healthcare. BRAVE AI serves as a clinical decision support tool, empowering clinicians to make well-informed decisions about individualised care plans. It’s essential to understand that the tool itself does not autonomously make decisions regarding interventions; instead, it assists healthcare professionals in their decision-making process.

BRAVE AI employs sophisticated computer algorithms to evaluate the complexity of each patient’s health needs within our practice. By assigning a score, it helps identify individuals at risk of deteriorating health, potentially necessitating hospitalisation. This innovative tool enhances our ability to recognise patients who may otherwise be overlooked, including those with borderline health indicators or infrequent medical interactions.

It’s crucial to emphasize that BRAVE AI does not utilise identifiable patient data. However, the provision of NHS numbers enables our practice to pinpoint individual patients who may benefit from interventions. Furthermore, all data processed by BRAVE AI is stored securely within NHS network servers, inaccessible from external sources. Confidential patient information is exclusively disclosed to clinical teams directly involved in patient care.

The primary objective of BRAVE AI is to promote preventive healthcare practices over reactive treatments. It facilitates proactive discussions with patients regarding their overall wellbeing, extending beyond mere medical concerns. These conversations may involve various healthcare professionals, including Health Coaches and nurses, in addition to GPs.

Should you have any questions or concerns regarding the processing of your data alongside BRAVE AI, we encourage you to contact The Practice Manager.

Clinical audit

Information may be used by the NHS Cornwall and Isles of Scilly Integrated Care Board for clinical audit to monitor the quality of the service provided to patients with long terms conditions. Some of this information may be held centrally and used for statistical purposes (e.g. the National Diabetes Audit). When this happens, strict measures are taken to ensure that individual patients cannot be identified from the data.

Clinical Research

Sometimes your information may be requested to be used for research purposes – we will always ask your permission before releasing your personal information for this purpose.

NIHR – Clinical Research Network:

We’re excited to share news of our partnership with seasoned NIHR CRN (National Institute for Health Research Clinical Research Network) experts, seamlessly integrated into our practice team. In the pursuit of advancing medical research, these professionals, alongside our practice team, may access your patient record for pre-consented activities.

This involves identifying potential eligibility for research opportunities and supporting recruitment and follow-up for clinical trials. This process operates under the lawful bases of Article 6 (public task) and Article 9 (substantial public interest) of the GDPR. Be assured, that your privacy and data security are rigorously safeguarded.

This collaboration also supports NIHR and NHS’s pursuit in improving equality to access research. Any eligible individuals will be contacted by the practice, and their consent will be requested before any further processing takes place.

Improving Diabetes Care

Information that does not identify individual patients is used to enable focussed discussions to take place at practice-led local diabetes review meetings between health care professionals. This enables the professionals to improve the management and support of these patients.  

Individual Funding Request

An ‘Individual Funding Request’ is a request made on your behalf, with your consent, by a clinician, for funding of specialised healthcare which falls outside the range of services and treatments that NHS Cornwall and Isles of Scilly Integrated Care Board has agreed to commission for the local population. An Individual Funding Request is taken under consideration when a case can be set out by a patient’s clinician that there are exceptional clinical circumstances which make the patient’s case different from other patients with the same condition who are at the same stage of their disease, or when the request is for a treatment that is regarded as new or experimental and where there are no other similar patients who would benefit from this treatment. A detailed response, including the criteria considered in arriving at the decision, will be provided to the patient’s clinician.

Invoice Validation

Invoice validation is an important process. It involves using your NHS number to check which NHS Cornwall and Isles of Scilly Integrated Care Board is responsible for paying for your treatment. Section 251 of the NHS Act 2006 provides a statutory legal basis to process data for invoice validation purposes. We can also use your NHS number to check whether your care has been funded through specialist commissioning, which NHS England will pay for. The process makes sure that the organisations providing your care are paid correctly. 

Local Information Sharing

Your GP electronic patient record is held securely and confidentially on an electronic system managed by your registered GP practice. If you require attention from a local health or care professional outside of your usual practice services, such as in an Evening and Weekend GP Access Clinic, Emergency Department, Minor Injury Unit or Out Of Hours service, the professionals treating you are better able to give you safe and effective care if some of the information from your GP record is available to them.

Where available, this information can be shared electronically with other local healthcare providers via a secure system designed for this purpose. Depending on the service you are using and your health needs, this may involve the healthcare professional accessing a secure system that enables them to view parts of your GP electronic patient record (e.g. your Summary Care Record) or a secure system that enables them to view your full GP electronic patient record (e.g. EMIS remote consulting system).

In all cases, your information is only accessed and used by authorised staff who are involved in providing or supporting your direct care. Your permission will be asked before the information is accessed, other than in exceptional circumstances (e.g. emergencies) if the healthcare professional is unable to ask you and this is deemed to be in your best interests (which will then be logged).

If you wish to opt-out of the SCR please complete our online Summary Care Record Opt Out Form

National Fraud Initiative – Cabinet Office

The use of data by the Cabinet Office for data matching is carried out with statutory authority under Part 6 of the Local Audit and Accountability Act 2014. It does not require the consent of the individuals concerned under the Data Protection Act 1998. Data matching by the Cabinet Office is subject to a Code of Practice. For further information see here.

National Registries

National Registries (such as the Learning Disabilities Register) have statutory permission under Section 251 of the NHS Act 2006, to collect and hold service user identifiable information without the need to seek informed consent from each individual service user.

Risk Stratification

Risk stratification data tools are increasingly being used in the NHS to help determine a person’s risk of suffering a condition, preventing an unplanned or (re)admission and identifying a need for preventive intervention.

Information about you is collected from a number of sources including NHS Trusts and from this GP Practice. A risk score is then arrived at through an analysis of your de-identified information is only provided back to your GP as data controller in an identifiable form. Risk stratification enables your GP to focus on preventing ill health and not just the treatment of sickness.

If necessary, your GP may be able to offer you additional services. Please note that you have the right to opt out of your data being used in this way.

Risk-stratification data may also be used to improve local services and commission new services, where there is an identified need. In this area, risk stratification may be commissioned by the NHS Cornwall and Isles of Scilly Integrated Care Board. Section 251 of the NHS Act 2006 provides a statutory legal basis to process data for risk stratification purposes. Further information about risk stratification is available here.

If you do not wish information about you to be included in any risk stratification programmes, please let us know. We can add a code to your records that will stop your information from being used for this purpose. Please be aware that this may limit the ability of healthcare professionals to identify if you have or are at risk of developing certain serious health conditions.

Patient data and how we keep it safe

Access to patient data is part of the essential activities of the NHS. It helps with decision-making on service delivery and improvements in healthcare. Section 251 of the NHS Act 2006 allows the use of confidential patient information for defined purposes when it is not possible to use anonymised information and when seeking consent from individuals is not practical. Section 251 will continue to be required until the processes to link data in pseudonymised form are properly developed within the NHS.

Anonymised data: information identifying the patient has been removed, so we can’t tell who the data belongs to.

Pseudonymised data: most of the identifiable elements are removed or ‘scrambled’. The people who do have a legal right in the NHS to see the identifiable data – the GP or a clinician working in a GP practice – can see the data and know who it belongs to, so that they can offer support to the high-risk patients identified through Risk Stratification.

Authorisation

• The Integrated Care Board (ICB) produces anonymised data from individual identifiable patient records held in a regional data repository which the ICB does not have access to, in order to support Risk Stratification activities.
• The ICB sometimes collects and uses information about past or present geographical location from patient records held in the same repository. Postcodes are required for ward-level analysis. As there is a potential to identify individual patients using this information, it is regarded as ‘patient-identifiable data’ or PID.
• The ICB is able to identify, and with appropriate ‘Data Controller’ approval, contact patients to invite them to participate in medical research. The ICB can also use patient data for medical research. However, it very rarely does this, as most medical research is undertaken outside the ICB and by non-ICB staff.
• The ICB links patient-identifiable information from more than one source, validating the completeness or quality of the information.
• The ICB has the authority to process certain patient identifiable information (usually NHS number only) for the purpose of auditing, monitoring and analysing patient care or treatment.
• The ICB has the authority to process patient identifiable information for an authorised user for one or more of the purposes outlined above.

Protection:

• The ICB protects this information by using security and confidentiality processes recognised by the community (NHS organisations and the public) to be more advanced than other national data collection and aggregation initiatives.
• The ICB stores and analyses the information in a secure environment.
• Access to this information is restricted to appropriate members of the ICB.
• The ICB provides regular (annual) mandatory and specialist Information Governance training to all ICB staff.
• The ICB ensures the information collected conforms to the strict rules of confidentiality established by Acts of Parliament, including the Data Protection Act, the NHS Act 2006, and Health & Social Care Acts.

Safeguarding

To ensure that adult and children’s safeguarding matters are managed appropriately, access to identifiable information will be shared in some limited circumstances where it’s legally required for the safety of the individuals concerned.

Summary Care Record (SCR)

The NHS in England uses a national electronic record called the Summary Care Record (SCR) to support patient care. It contains key information from your GP record. Your SCR provides authorised healthcare staff with faster, secure access to essential information about you in an emergency or when you need unplanned care, where such information would otherwise be unavailable.

Summary Care Records are there to improve the safety and quality of your care. SCR core information comprises your allergies, adverse reactions and medications. An SCR with additional information can also include reason for medication, vaccinations, significant diagnoses / problems, significant procedures, anticipatory care information and end of life care information. Additional information can only be added to your SCR with your agreement.

Please be aware that if you choose to opt-out of SCR, NHS healthcare staff caring for you outside of this surgery may not be aware of your current medications, allergies you suffer from and any bad reactions to medicines you have had, in order to treat you safely in an emergency. Your records will stay as they are now with information being shared by letter, email, fax or phone. If you wish to opt-out of having an SCR please return a completed opt-out form available from the practice or via our online Summary Care Record Opt Out Form.

Supporting Medicines Management

NHS Cornwall and Isles of Scilly Integrated Care Board and East Cornwall Primary Care Network operates pharmacist and prescribing advice services to support local GP practices with prescribing queries, which may require identifiable information to be shared. These pharmacists work with your usual GP to provide advice on medicines and prescribing queries, and review prescribing of medicines to ensure that it is appropriate for your needs, safe and cost-effective. Where specialist prescribing support is required, the NHS Cornwall and Isles of Scilly Integrated Care Board medicines management team may order medications on behalf of your GP Practice to support your care.

Supporting Locally Commissioned Services

NHS Cornwall and Isles of Scilly Integrated Care Board support GP practices by auditing anonymised data to monitor locally commissioned services, measure prevalence and support data quality.  The data does not include identifiable information and is used to support patient care and ensure providers are correctly paid for the services they provide.

Data Retention

We manage patient records in line with the Records Management NHS Code of Practice for Health and Social Care which sets the required standards of practice in the management of records for those who work within or under contract to NHS organisations in England, based on current legal requirements and professional best practice.

Who are our partner organisations?

We may also have to share your information, subject to strict agreements or legal process as on how it will be used, with the following organisations:

• NHS Trusts
• Specialist Trusts
• GP Federations
• Independent Contractors such as dentists, opticians, pharmacists
• Private Sector Providers
• Voluntary Sector Providers
• Ambulance Trusts
• Clinical Commissioning Groups
• Social Care Services
• Local Authorities
• Education Services
• Fire and Rescue Services
• Police
• Care Quality Commission
• NHS Digital
• Public Health
• Other ‘data processors’

We will never share your information outside of health partner organisations without your explicit consent unless there are exceptional circumstances such as when the health or safety of others is at risk, where the law requires it or to carry out a statutory function.

Within the health partner organisations (NHS and Specialist Trusts) and in relation to the above mentioned themes – Risk Stratification, Invoice Validation, Supporting Medicines Management, Summary Care Record – we will assume you are happy to for your information to be shared unless you choose to opt-out (see below).

This means you will need to express an explicit wish to not have your information shared with the other organisations; otherwise it will be automatically shared. We are required by law to report certain information to the appropriate authorities. This is only provided after formal permission has been given by a qualified health professional. There are occasions when we must pass on information, such as notification of new births, where we encounter infectious diseases which may endanger the safety of others, such as meningitis or measles (but not HIV/AIDS), and where a formal court order has been issued.  Our guiding principle is that we are holding your records in strictest confidence.

GP Connect

We use a facility called GP Connect to support your direct care. GP Connect makes patient information available to all appropriate clinicians when and where they need it, to support direct patients care, leading to improvements in both care and outcomes.

GP Connect is not used for any purpose other than direct care.

Authorised Clinicians such as GPs, NHS 111 Clinicians, Care Home Nurses (if you are in a Care Home), Secondary Care Trusts, Social Care Clinicians are able to access the GP records of the patients they are treating via a secure NHS Digital service called GP connect.

The NHS 111 service (and other services determined locally e.g. Other GP practices in a Primary Care Network) will be able to book appointments for patients at GP practices and other local services.

Access to your information – “Subject Access”

Everybody has the right to obtain a copy of their personal data.  You do not need to give a reason to see your data. An individual is only entitled to their own personal data, and not to information relating to other people (unless the information is also about them or they are acting on behalf of someone). Under special circumstances, some information may be withheld.

Access to the majority of your personal data (medical records) is provided free of charge through the Patient Online Access – this is the primary means of accessing your information and further copies may therefore be charged for.  Please ask at reception for further details. We encourage all patients to register for this service.

Where the records are not shown on the Patient Online Access, or access is not possible, then a Data Subject Access Request (SAR) can be made to us. We ask that this request is made in writing where possible; ideally this should be made using our Subject Access Request Form being as specific as possible about the information required. We will provide you’re a copy of your data within 1 calendar month, but can be extended if the request is complex or a number of requests have been received from you.  We may also charge a reasonable fee for the administration of the request where the request is viewed as excessive or additional copies are required.

Legal Claim

There is a clear and established legal route for processing health (special category) data to support the investigation, preparation and pursuit of  legal claims, in the form of Article 9(2)(f) of GDPR.  In such cases a fee would be charged for the preparation of the medical records.

As a SAR is motive blind some solicitors and insurance companies may use SARs inappropriately on the patient’s behalf to access their medical records free of charge contrary to the intentions of GDPR.

Most patients do not realise that in such circumstances their entire medical record, or a significant part of it, has been requested, potentially containing a large amount of very sensitive information that has no bearing whatsoever upon their claim and may be provided to other 3^rd parties they are not aware of as part of their claim.

Disclosing that volume of information to one or more 3^rd  parties would most likely mean disclosing information that was not relevant, was excessive, and would not be pursuant to the principle of data minimisation, as per Article 5(1)(c) and Article 25(2) of the EU GDPR, and ICO guidance.

Therefore with such requests it is our policy, in line with ICO guidance to general practices, to arrange for the patient to collect their medical record in person from us, free of charge.

The patient is then able to review the content of their medical information and then choose to share the information with their solicitor or insurance company as they judge as relevant with regards to their legal claim.

Change of Details

It is important that you tell the person treating you if any of your details such as your name or address have changed or if any of your details are incorrect in order for this to be amended. Please inform us of any changes so our records for you are accurate and up to date.

Mobile telephone number

If you provide us with your mobile phone number we may use this to send you reminders about your appointments or other health screening information. Please let us know if you do not wish to receive reminders on your mobile.

Cookies

You can be assured that the practice website does not use cookies to track your activity online.

The website does not set first party cookies on this containing any personal data unless specifically instructed to do so by the user.  For example, if a user requested to be remembered on a form then a cookie is set to retain the form data for next time.

The Web Site uses third-party Cookies to collect anonymous traffic data about your use of this website.  This information is stored by Google and subject to their privacy policy, which can be viewed on Google’s Privacy & Terms page .  Google Analytics collects information such as pages you visit on this site, the browser and operating system you use and time spent viewing pages.  The purpose of this information is to help us improve the site for future visitors.  These cookies are not used to track you or your activity but if you do not wish these cookies to be stored by our computer, disable cookies in your browser settings.

You may delete Cookies at any time.  See the help in your internet browser to find out how to delete your cookies.

Notification

The Data Protection Act 2018 requires organisations to register a notification with the Information Commissioner to describe the purposes for which they process personal and sensitive information.

We are registered as a data controller and our registration can be viewed online in the public register at:  www.ico.org.uk

Any changes to this notice will be published on our website and in a prominent area at the Practice.

Practice Contact

The Practice contact for data protection queries is:

Practice Manager

The Data Protection Officer is

Umar Sabat
Data Protection Officer
Cornwall Partnership NHS Foundation Trust
Head Office
Carew House
Beacon Technology Park
Dunmere Road
Bodmin
PL31 2QN
Ciosicb.contactus@nhs.net
01726 627800

Complaints

If you have concerns or are unhappy about any of our services, please contact the Practice Manager.

For independent advice about data protection, privacy and data-sharing issues, you can contact:

The Information Commissioner
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Phone: 0303 123 1113

Website: www.ico.gov.uk

Further Information

Further information about the way in which the NHS uses personal information and your rights in that respect can be found here:

The NHS Care Record Guarantee

The NHS Care Record Guarantee for England sets out the rules that govern how patient information is used in the NHS, what control the patient can have over this, the rights individuals have to request copies of their data and how data is protected under the Data Protection Act 1998.

www.systems.digital.nhs.uk

The NHS Constitution

The NHS Constitution establishes the principles and values of the NHS in England. It sets out the rights patients, the public and staff are entitled to.  These rights cover how patients access health services, the quality of care you’ll receive, the treatments and programmes available to you, confidentiality, information and your right to complain if things go wrong.

www.gov.uk

NHS Digital

NHS Digital collects health information from the records health and social care providers keep about the care and treatment they give, to promote health or support improvements in the delivery of care services in England.

www.content.digital.nhs.uk

Reviews of and Changes to our Privacy Notice

We keep our Privacy Notice under regular review.