This site uses cookies to store information on your computer. Some cookies on this site are essential, and the site won't work as expected without them. Read More

Slaidburn Country Practice
 Slaidburn Country Practice
national health service

Diabetes Awareness - www.diabetes.org.uk

General Data Protection Regulations (GDPR)  


To support the care we give you we will be making use of some of your data.

The formal legal basis for processing your data as defined by GDPR is "Necessary for the provision of health or social care or treatment or management of health and social care systems and services" (Article 9(2)(h); this encompasses the following:

  • We will ask you to confirm your identity, address and date of birth. This is to confirm that we have the correct records during your treatment.
  • The doctor or nurse will access your medical records so (s)he can better understand your diagnosis and treatment. Non-clinical staff have access to your medical record when necessary as part of your treatment.
  • The doctor will add details of your consultation and any treatment to your computer record.
  • ELMS' staff may review data in order to improve performance and investigate incidents with the aim of developing the service. For example we may investigate whether a patient was directed to the correct service in a particular instance; this will mean a review of medical details but will be anonymised as far as possible.

Where we share data for operational and performance reasons outside ELMS we will takes steps to protect your identity. We will not otherwise share your personal details except where required for your personal health care (for example to another healthcare professional or to any hospital department we may refer you to), for statutory compliance or with the police.

The systems we use are web based which means that data is transferred over the secure NHS N3 network to the data centre. None of this data will be transferred outside the EU.

If you ask us to collaborate with other agencies or individuals from outside ELMS' services in other ways, we will ask you for formal, written consent to share this data.

Data protection and security policies are available on request.

You have the right to see your medical record. The best way to do this would be to speak to a member of staff.

If you have any questions you can email them to us at info.elms@nhs.net. Through this email address you can contact the Data Protection Officer (who is in control of data protection issues at ELMS) and we can advise you on where to make complaints about data protection issues. The Data Controller is East Lancashire Medical Services, St Ives House, Accrington Road, Blackburn BB1 2EG.


Notes for Staff: GDPR and patient request for information.

The General Data Protection Regulations (GDPR) came into force on May 28 2018. There is a new information poster displayed but it may be that patients have questions. Below are some of the more likely questions with answers; anything not covered can be emailed to info.elms@nhs.net and we will respond to you or and/or the patient as soon as we can.

  • We do not process patient's data based on their consent; the formal legal basis is the provision of healthcare services.
  • The patient has no right for their primary health record to be deleted in the way that would be the case for an internet trading company customer records for example. (Article 17).
  • There is however a right to request that errors in their information are corrected and they can exercise this right by emailing to the address above details of the information they wish to be corrected along with their contact details.
  • Patient records are retained for the length of time specified in the Records Management Code of Practice for Health and Social Care issued by the Information Governance Alliance (in normal cases this is 10 years after death). ELMS do not have control of the patient's primary health record.
  • None of the patient's data is transferred outside the EU at any stage whilst ELMS have control.
  • There is no "automated decision making" or "profiling" in our processes.
  • The patient has the right to ask to see what data we hold.
  • ELMS uses patient data to manage the services it provides. Usually this is anonymised but sometimes it may be necessary to use identifiable data to fulfil its obligations (eg reporting of notifiable diseases).


Your Data Matters to the NHS

Information about your health and care helps us to improve your individual care, speed up diagnosis, plan your local services and research new treatments.

In May 2018, the strict rules about how this data can and cannot be used were strengthened. The NHS is committed to keeping patient information safe and always being clear about how it is used.

You can choose whether your confidential patient information is used for research and planning.

To find out more visit: https://www.nhs.uk/your-nhs-data-matters

For more information about your data rights please visit the Your Data Matters campaign at ico.org.uk

You can choose whether your confidential patient information is used for research and planning.

How your data is used – Your health and care information is used to

  • Improve your individual care.
  • It is also used to help us research new treatments,
  • Decide where to put GP clinics and plan for the number of doctors and nurses in your local hospital.

Wherever possible we try to use

  • Data that does not identify you, but sometimes it is necessary to use your confidential patient information.

What is confidential patient information?

Confidential patient information identifies you and says something about your health, care or treatment. You would expect this information to be kept private.

Information that only identifies you, like your name and address, is not considered confidential patient information and may still be used:

For example,

  • To contact you if your GP practice is merging with another.

Who can use your confidential patient information for research and planning?

  • It is used by the NHS, local authorities,
  • University and hospital researchers, medical colleges and pharmaceutical companies researching new treatments.

Making your data opt-out choice

You can choose to opt out of sharing your confidential patient information for research and planning. There may still be times when your confidential patient information is used: for example:

During an epidemic where there might be a risk to you or to other people’s health. You can also still consent to take part in a specific research project.

Will choosing this opt-out affect your care and treatment?

No, your confidential patient information will still be used for your individual care.

Choosing to opt out will not affect your care and treatment. You will still be invited for screening services, such as screenings for bowel cancer.

What should you do next?

You do not need to do anything if you are happy about how your confidential patient information is used.

If you do not want your confidential patient information to be used for research and planning, you can choose to opt out securely online or through a telephone service.

You can change your choice at any time.

To find out more or to make your choice https://www.nhs.uk/your-nhs-data-matters

or call 0300 303 5678


Choose font size: A A A


Total visitors:153133 | Disclaimer