We may also have to share your information, subject to strict agreements on how it will be used. The following are examples of the types of organisations that we are likely to share information with:
- NHS and specialist hospitals, Trusts
- Independent Contractors such as dentists, opticians, pharmacists
- Private and Voluntary Sector Providers
- Ambulance Trusts
- Clinical Commissioning Groups and NHS England
- Social Care Services and Local Authorities
- Education Services
- Police, Fire and Rescue Services
- Other ‘data processors’ during specific project work e.g. Diabetes UK
Your rights and your personal data
Unless subject to an exemption under the GDPR, you have the following rights with respect to your personal data: –
- The right to request a copy of your personal data which this practice holds about you;
- The right to request that this practice corrects any personal data if it is found to be inaccurate or out of date;
- The right to request your personal data is erased where it is no longer necessary for the practice to retain such data. Although please note for Patients at this practice, your records will be retained until death;
- The right to withdraw consent to the processing at any time;
- The right to data portability;
- The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction is placed on further processing;
- The right to lodge a complaint with the Information Commissioners Office.
Contact Details
Should you have any concerns about how your information is managed or wish to object to any of the data collection at the Practice, please contact the Practice Manager or your healthcare professional to discuss how the disclosure of your personal information can be restricted. All patients have the right to change their minds and reverse a previous decision. Please contact the practice if you change your mind regarding any previous choice.
If you would like to make a ‘data subject access request’ please contact the practice in writing. We will endeavour to respond to your request within one calendar month or two months if the request is complex.
Any changes to this notice will be published on our website and on the Practice notice board.
Suspected breaches in data protection can be reported to the independent OHP Data Protection Officer Leanne Hoye on 0121 422 1366. Breaches in data protection will result in an incident investigation. Serious breaches will be reported to the ICO.
It is the responsibility of all employees of the practice to report suspected breaches of information security to the Practice lead and Data Protection Officer without delay.
The Practice is registered as a data controller with the ICO. The registration number is Z7394759 and can be viewed online in the public register at: ico.org.uk. You can contact the ICO on 0303 123 1113 or via email https://ico.org.uk/global/contact-us/email/ or at the ICO, Wycliffe House, Water Lane, Wilmslow, Cheshire. SK9 5AF.