Healthcare professionals who provide you with care are required by law to maintain records about your health and any treatment or care you have received. These records help us to provide you with the best possible medical care. This privacy notice explains why the Healthcare Group collects information about patients and how we keep it safe and confidential, and how that information may be used.
We collect and hold data for the purpose of providing healthcare services to our patients. We may keep your information in a written form and/or a digital form. The records will include basic details about you, such as your name, address and date of birth but they may also include more sensitive data (known as ‘special category data’) such as information about your health, your problems, medical investigations, treatments and outcomes of treatments, your habits, appointments you have attended, referrals to specialists and other healthcare providers, the observations and opinions of other healthcare workers within and outside of the Healthcare Group, as well as comments and aide memoires reasonably made by healthcare professionals who are appropriately involved in your Healthcare.
In some situations your health needs may require care from other healthcare providers or healthcare services outside of this Practice, such as a referral to see a specialist. In these situations we will exchange with them information about you that is necessary for them to provide that care. Anyone with whom we share this information will have a professional and contractual duty of confidentiality.
Health and Social Care (HSC) provide a number of screening programmes to detect certain diseases such as bowel and breast cancer at an early stage. For patients eligible for this screening we will share a basic level of information with HSC such as your name, age and address so that you are invited to the relevant screening programmes. We are also obliged to inform Public Health if patients are suffering with certain notifiable illnesses such as food poisoning. This will require sharing some personal information with this organisation. Anonymised data may be used at a local level to help the States of Guernsey plan services.
Your consent to this sharing of data, within the Practice and with those outside the Practice under these circumstances is assumed and is allowed by the Law. In all these situations we would only share your information with others involved in your care who have a genuine need for it and only the minimum amount of information required to serve that purpose would be released. However, you do have a right to object to our sharing of your data.
We would not share your information with any other third parties without your explicit consent unless there were exceptional circumstances (i.e. a life and death situation) or where disclosure is in the public interest or when there is a legal duty to do so, for example a court order.
We are required by Articles in the Data Protection (Bailiwick of Guernsey) Law, 2017 to provide you with information in the following subsections.
|1. Data Controller||Healthcare Group
Rohais, St Peter Port
Guernsey GY1 1FF
|2. Data Protection Officer (s)||
Roger Fitch, IT & Data Manager
|3. Purpose of the processing||
Direct care is care delivered to the individual alone, most of which is provided in the surgery. After a patient agrees to a referral for direct care elsewhere, such as a referral to a specialist in a hospital, necessary and relevant information about the patient, their circumstances and their problem will need to be shared with the other healthcare workers, such as specialists, therapists, technicians etc. The information that is shared is to enable the other healthcare workers to provide the most appropriate advice, investigations, treatments, therapies, health screening and or care.
|4. Lawful basis for processing||
The processing of personal data in the delivery of direct care and for the providers administrative purposes and in support of direct care elsewhere is supported under the following articles Schedule 2 Part II (10)(a)(i) Data Protection (Bailiwick of Guernsey) Law 2017
(a) The processing is necessary for a health or social care purpose
(b) In subparagraph (a) –
(i) Preventative or occupational medicine
|5. Recipient or categories of recipients of the processed data||
The data will be shared with health and care professionals and support staff in the surgery and at relevant hospitals, the Medical Specialist Group and other medical specialist or healthcare providers, pharmacies, community service providers, Public Health, HSC and diagnostic and treatment centres when they will be contributing to your personal care.
|6. Rights to object||
You have the right to object to some or all the information being processed. Please contact the Practice if you would like to object. You should be aware that this is a right to raise an objection. That is not the same as having an absolute right to not having your data processed in every circumstance.
|7. Right to access and correct||
You have the right to access the data that is being shared and have any inaccuracies corrected. There is no right to have accurate medical records deleted except when ordered by a court of Law.
|8. Retention period||
The data will be retained as per the Healthcare policy on the Management and Retention of Records Policy. As a basic principle, electronic health records would be kept indefinitely. Ten years after a patient has died or left the Practice, paper records may be confidentially destroyed.
|9. Right to complain||
You have the right to complain to the Office of the Data Protection Commissioner.
A more comprehensive summary of our Data Protection Policy can be downloaded from our website or a paper copy can be requested from our receptionists.
Back to Privacy Centre