e. Data Sharing Databases

Care Integrated Digital Record (CIDR)

Purpose of the processing: 

Care Integrated Digital Record (CIDR) is an electronic record linking information from health and social care organisations across Camden. Health and care professionals can view their patients/client these records through an online portal to enable them provide the best possible to patients and clients.

CIDR includes information about patients/clients recorded by acute hospitals, mental health, community health, social care and GP Practices.

Healthcare professionals across North Central London are able to access access their patient’s records through CIDR to enable them to make the best informed decision about their patient’s health and provide the best possible care. 

The source of the information shared in this way is your electronic GP record for the purposes of direct care.

Data retention period: All records held by the Practice and in the CIDR system are  kept for the duration specified in the Records Management Codes of Practice for Health and Social Care

Lawful basis General Data Protection Regulation: The processing of personal data is permitted under the following paragraphs:Article 6(1) (c) - processing for legal obligation;Article 6(1) (e) - public interest or in the exercise of official authority.

The processing of special categories of personal data concerning health is permitted under the following paragraph:Article 9 (2) (h) - processing is necessary for medical or social care treatment or, the management of health or social care systems and services.

Related Legislation: Section 251B Health and Social Care (Safety and Quality Act) 2015 (Duty to Share)Common Law of Duty of Confidentiality

Your Rights

You have the right to:

  • To access, view or request copies of your personal information;
  • request rectification of any inaccuracy in your personal information;
  • restrict the processing of your personal information where:accuracy of the data is contested,
  • the processing is unlawful or,
  • where we no longer need the data for the purposes of the processing.

Right to object or opt-out: You have the right to raise an objection to your personal data being shared in CIDR. You also have the right opt out of having a CIDR record by completing an opt-out form with your Practice. Although we will first need to explain how this may affect the care you receive.

If you wish to exercise any of your rights please contact the Practice (data controller) or the DPO and your request will be carefully considered.

Right to complain: If you are dissatisfied with the way Ridgmount Practice process your data, you have the right to appeal/complain to the Information Commissioner (IC). The Information Commissioners Office can be contacted at: click here

EMIS Systems Local Record Sharing – Integrated Care

EMIS Local Record Sharing enables your GP medical record held on our secure EMIS Web clinical system to be shared with other healthcare Providers (e.g. acute hospitals, mental and community health and other GPs) who are commissioned to provide to provide health care services within your borough.

This local sharing is used to provide direct patient care for services such as continued extended access, home visits, universal offers, musculoskeletal service, GP at front door and other neighbourhood services across Camden.

The information is accessed in real time and on-demand, meaning that data from your GP record is neither extracted, nor uploaded, nor sent anywhere in real time and on-demand, meaning that data from your GP record is neither extracted, nor uploaded, nor sent anywhere.

The source of the information shared in this way is your electronic GP record.

Data retention period: All records held by the Practice and the EMIS Local Record Sharing system are be kept for the duration specified in the Records Management Codes of Practice for Health and Social Care

Lawful basis General Data Protection Regulation:The processing of personal data is permitted under the following paragraphs:Article 6(1) (c) - processing for legal obligation; Article 6(1) (e) - public interest or in the exercise of official authority.

The processing of special categories of personal data concerning health is permitted under the following paragraphs: Article 9(2) (b) – processing necessary in the field of employment, social security and social protection law. Article 9 (2) (h) - processing is necessary for medical or social care treatment or, the management of health or social care systems and services

Related Legislation: Section 251B Health and Social Care (Safety and Quality Act) 2015 (Duty to Share)Common Law of Duty of Confidentiality

Your Rights

You have the right to:

  • To access, view or request copies of your personal information;
  • request rectification of any inaccuracy in your personal information;
  • restrict the processing of your personal information where:
  • accuracy of the data is contested,
  • the processing is unlawful or,
  • where we no longer need the data for the purposes of the processing.

Right to object: You have a general right to raise an objection to your personal data being shared with the recipients.

If you wish to exercise any of your rights please contact the Practice (data controller) or the DPO and your request will be carefully considered.

Right to complain: If you are dissatisfied with the way Ridgmount Practice process your data, you have the right to appeal/complain to the Information Commissioner (IC). The Information Commissioners Office can be contacted at: click here

National NHS Digital Services “Spine” including:

Purpose of the processing

Spine supports the IT infrastructure for health and social care in England, joining together over 23,000 healthcare IT systems in 20,500 organisations.

It hosts 5 key services to support the delivery of your care. They enable healthcare professionals, authorised with an NHS smartcard, to view relevant information about you as follows

Patient Demographics Service – The Personal Demographics Service (PDS) is the national electronic database of NHS patient details such as name, address, date of birth and NHS Number (known as demographic information). It helps healthcare professionals to identify patients and match them to their health records. It also allows them to contact and communicate with patients.

Summary Care Record (SCR) – is an electronic record of important patient information, created from GP medical records. It can be seen and used by authorised staff in other areas of the health and care system involved in the patient's direct care.

When your personal health records on your GP Record is uploaded to the spine, NHS Digital becomes the data controller for the uploaded information.

The source of the information shared in this way is your electronic GP record.

At a minimum, the SCR holds important information about;

  • current medication
  • allergies and details of any previous bad reactions to medicines
  • the name, address, date of birth and NHS number of the patient

The patient can also choose to include additional information in the SCR, such as details of long-term conditions, significant medical history, or specific communications needs.

e-Referral Service - The NHS e-Referral Service (e-RS) combines electronic booking with a choice of place, date and time for first hospital or clinic appointments. Patients can choose their initial hospital or clinic appointment, book it in the GP surgery at the point of referral, or later at home on the phone or online.

Electronic Prescription Service - The Electronic Prescription Service (EPS) sends electronic prescriptions from GP surgeries to pharmacies. Eventually EPS will remove the need for most paper prescriptions.

GP2GP - GP2GP allows patients' electronic health records to be transferred directly, securely, and quickly between their old and new practices, when they change GPs. This improves patient care by making full and detailed medical records available to practices, for a new patient's first and later consultations.

The source of the information shared in all of the instances above in this way is your electronic GP record.

Data retention period All records held by the Practice and the EMIS Local Record Sharing system are be kept for the duration specified in the Records Management Codes of Practice for Health and Social Care

Lawful basis General Data Protection Regulation:The processing of personal data is permitted under the following paragraph: Article 6(1) (e) - public interest or in the exercise of official authority. The processing of special categories of personal data concerning health is permitted under the following paragraph: Article 9 (2) (h) - processing is necessary for medical or social care treatment or, the management of health or social care systems and services

Your Rights

You have the right to:

  • To access, view or request copies of your personal information;
  • request rectification of any inaccuracy in your personal information;
  • restrict the processing of your personal information where:
  • accuracy of the data is contested,
  • the processing is unlawful or,
  • where we no longer need the data for the purposes of the processing.

Right to object or opt-out: You have the right to raise an objection or opt-out of out of having an SCR by returning a completed opt-out form to their GP practice. Although we will first need to explain how this may affect the care you receive.

If you wish to exercise any of your rights please contact the Practice (data controller) or the DPO and your request will be carefully considered.

Right to complain: If you are dissatisfied with the way Ridgmount Practice process your data, you have the right to appeal/complain to the Information Commissioner (IC). The Information Commissioners Office can be contacted at: click here

Open Exeter

Purposes of the processing: Open Exeter is a web-enabled viewer which provides the facility for healthcare professionals to share/access patient data held on the National Health Application and Infrastructure Services (NHAIS) systems, including cervical screening, breast screening, organ donor, blood donor and home oxygen. 

Access to Open Exeter is only possible on the N3 network, and via authorised logons/passwords provided by NHS Digital.

The source of the information shared in this way is your electronic GP record.

Data retention period: Data is viewed on screen. If printed, it is destroyed when no longer required (usually within 24 hrs).

Lawful basis General Data Protection Regulation The processing of personal data is permitted under the following paragraph: Article 6(1) (e) - public interest or in the exercise of official authority. The processing of special categories of personal data concerning health is permitted under the following paragraph: Article 9 (2) (h) - processing is necessary for medical or social care treatment or, the management of health or social care systems and services

Your Rights

You have the right to:

  • To access, view or request copies of your personal information;
  • request rectification of any inaccuracy in your personal information;
  • restrict the processing of your personal information where:
  • accuracy of the data is contested,
  • the processing is unlawful or,
  • where we no longer need the data for the purposes of the processing.

Right to object: You have a general right to raise an objection to your personal data being shared in Open Exeter.

If you wish to exercise any of your rights please contact the Practice (data controller) or the DPO and your request will be carefully considered.

Right to complain: If you are dissatisfied with the way Ridgmount Practice process your data, you have the right to appeal/complain to the Information Commissioner (IC). The Information Commissioners Office can be contacted at: click here