d. Processing  for the Purposes of Commissioning, Planning, Research and Risk Stratification

Clinical Commissioning Groups CCG (s)

Purpose of the processing:Clinical Commissioning Group (CCGs) are responsible for securing, planning, designing and paying for your NHS services, including planned and emergency hospital care, mental health, rehabilitation, community and primary medical care (GP) services. This is known as ‘Commissioning’.

In order to enable Camden CCG carry its statutory duties the Practice

 In order to enable Camden CCG carry out its statutory responsibilities effectively, efficiently and safely,  we may share personal data about you with the CCG for the following purposes:

Individual Funding Requests; Continuing Health Care; appeals, queries or compliments; safeguarding concerns;

commissioning purposes such as payment for target achievement known as Quality and Outcomes Framework (QOF); and where the Practice is participating in agreed national or local enhanced services.

The source of the information shared in this way is your electronic GP record.

Data retention period: All records held by the Practice will be kept for the duration specified in the Records Management Codes of Practice for Health and Social Care

Lawful basis General Data Protection Regulation  The processing of personal data is permitted under the following paragraph: Article 6(1) (e) - public interest or in the exercise of official authority. The processing of special categories of personal data concerning health is permitted under the following paragraph: Article 9 (2) (h) - processing is necessary for medical or social care treatment or, the management of health or social care systems and services

Your Rights

You have the right to:

  • To access, view or request copies of your personal information;
  • request rectification of any inaccuracy in your personal information;
  • restrict the processing of your personal information where:
  • accuracy of the data is contested,
  • the processing is unlawful or,
  • where we no longer need the data for the purposes of the processing.

Right to object: You have a general right to raise an objection to your personal data being shared with the recipient.

If you wish to exercise any of your rights please contact the Practice (data controller) or the DPO and your request will be carefully considered.

Right to complain: If you are dissatisfied with the way Ridgmount Practice process your data, you have the right to appeal/complain to the Information Commissioner (IC). The Information Commissioners Office can be contacted at: click here

“Risk Stratification" (Population Health Management and Case Finding)

Recipient: Camden CCG and Emis Health

Purpose of the processing: Ridgmount Practice performs computerised searches of some or all of our records to identify individuals who may be at increased risk of certain conditions or diagnoses i.e. Diabetes, heart disease, risk of falling). Your records may be amongst those searched. This is often called “risk stratification” or “case finding”. These searches are sometimes carried out by Data Processors who link our records to other records that they access, such as hospital attendance records. The results of these searches and assessment may then be shared with other healthcare workers, such as specialist, therapists, technicians etc. The information that is shared is to enable the other healthcare workers to provide the most appropriate advice, investigations, treatments, therapies and or care.

Risk stratification can be grouped into two purposes namely:

Direct Care – ‘Case Finding’ where carried out by a health professional (e.g. GPs and Provider) involved in an individual’s care or by a data processor acting under contract with such a provider, it is treated as direct care.

Indirect Care - understand the local population needs and plan for future requirement. The source of the information shared in this way is your electronic GP record.

Data retention period: All records held by the Practice will be kept for the duration specified in the Records Management Codes of Practice for Health and Social Care

Lawful basis General Data Protection Regulation: The processing of personal data is permitted under the following paragraph: Article 6(1) (e) - public interest or in the exercise of official authority. The processing of special categories of personal data concerning health is permitted under the following paragraph: Article 9 (2) (h) - processing is necessary for medical or social care treatment or, the management of health or social care systems and services

Related Legislation: Section 251 NHS Act 2006

Your rights

You have the right to:

  • To access, view or request copies of your personal information;
  • request rectification of any inaccuracy in your personal information;
  • restrict the processing of your personal information where:
  • accuracy of the data is contested,
  • the processing is unlawful or,
  • where we no longer need the data for the purposes of the processing.

Right to object: You have a general right to raise an objection to your personal data being shared with the recipient.

If you wish to exercise any of your rights please contact the Practice (data controller) or the DPO and your request will be carefully considered.

Right to complain: If you are dissatisfied with the way Ridgmount Practice process your data, you have the right to appeal/complain to the Information Commissioner (IC). The Information Commissioners Office can be contacted at: click here

Research Partners

Purpose of the processing: Ridgmount Practice rarely participates projects and will only agree to do so if there is an agreed clearly defined reason for the research that is likely to benefit healthcare and patients. Such proposals will normally have a consent process, ethics committee approval, and will be in line with the principles of Article 89(1) of GDPR.

Research organisations do not usually approach patients directly but will ask us to make contact with suitable patients to seek their consent. Occasionally research can be authorised under law without the need to obtain consent. This is known as the Section 251 arrangement.

We may also use your medical records to carry out research within the practice.

We share information with the following medical research organisations with your explicit consent or when the law allows: Ridgmount Practice is currently not sharing information with any research organisations

The source of the information shared in this way is your electronic GP record.

You have the right to object to the sharing of your personal health data concerning your GP medical for research purposes.

Data retention period: All records held by the Practice will be kept for the duration specified in the Records Management Codes of Practice for Health and Social Care

Lawful basis General Data Protection Regulation: The processing of personal data is permitted under the following paragraph:Article 6(1) (e) - public interest or in the exercise of official authority.

The processing of special categories of personal data is permitted under the following paragraph: Article 9 (2) (j) - for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) based on Union or Member State law

Your Rights

You have the right to:

  • To access, view or request copies of your personal information;
  • request rectification of any inaccuracy in your personal information;
  • restrict the processing of your personal information where:
  • accuracy of the data is contested,
  • the processing is unlawful or,
  • where we no longer need the data for the purposes of the processing.

Right to object: You have a general right to raise an objection to your personal data being shared with the recipient.

If you wish to exercise any of your rights please contact the Practice (data controller) or the DPO and your request will be carefully considered.

Right to complain: If you are dissatisfied with the way Ridgmount Practice process your data, you have the right to appeal/complain to the Information Commissioner (IC). The Information Commissioners Office can be contacted at: click here

Employment Processing

Purpose of the processing: The Practice ensures the protection of the rights and freedoms in respect of the processing of its  employees’ personal data, in particular for the purposes of the recruitment, obligations performance contract of employment, rights and benefits management planning, health and safety, equality and diversity in the workplace, health and safety at work.

The Practice ensures that personal data it collects from employees are used only for employment related purposes or where there is a statutory obligation to share the personal information with to regulatory bodies (e.g. courts, police or NHS England).

Data retention period: All records held by the Practice will be kept for the duration specified in the Records Management Codes of Practice for Health and Social Care

Lawful basis General Data Protection Regulation:The processing of personal data is permitted under the following paragraph: Article 6(1) (e) - public interest or in the exercise of official authority. The processing of special categories of personal data is permitted under the following paragraph: (2) (b): processing is necessary for the purposes of carrying out the obligations and exercising specific rights of the controller or of the data subject

Your Rights

Employees have the  right to:

  • To access, view or request copies of their personal information held by the Practice;
  • request rectification of any inaccuracy to their personal information;
  • restrict the processing of their personal information where:
  • accuracy of the data is contested,
  • the processing is unlawful or,
  • where we no longer need the data for the purposes of the processing.

Right to object: Employees have a general right to raise an objection to the sharing personal data.

If an employee wishes to exercise his/her rights they can contact the Practice (data controller) or the DPO and their request will be carefully considered.

Right to complain: If you are dissatisfied with the way Ridgmount Practice process your data, you have the right to appeal/complain to the Information Commissioner (IC). The Information Commissioners Office can be contacted at: click here