Show Side Menu
To view, print or save our practice booklet, click here
NHS Direct Wales - 0845 46 47 - Galw IECHYD Cymru

How We Use Your Data

HOW WE USE YOUR DATA

 

Lawful basis:

 

Article 6(1)(e) ‘….necessary for the performance of a task carried out in the public interest or in the exercise of official authority…’

 

Article 9(2)(h) ’…necessary for the purposes of preventative or occupational medicine for the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services.

 

Description

Purpose of the processing

Recipients

Cluster working – The practice works as part of the Conwy East cluster. This means that we may work together to provide services across the population to support care and treatment. Data may be shared between cluster practices for the provision of care for example to provide GP cover or where a service is offered like physiotherapy. 

To provide direct health or social care services to individual patients through a grouping of GPs working with other health and care professionals to plan and provide services locally.

Other GP’s within the cluster,  voluntary Service, medicines management, community network services – integrated health and social care e.g. District Nursing, and the Local Public Health Team.

Invoice Validation – If you have received treatment within the NHS, your personal information may be shared within a secure environment, to ensure the correct Health Board covers the cost of your care and treatment.

To ensure the correct Health Board is charged for the cost of your care and treatment.

Details of the treatment received will be shared for charging purposes with Health Boards and as part of auditing requirements.

Digital Health and Care Wales (DHCW) – DHCW is a national body, which has legal responsibilities to collect information about the health and social care services.  Data is collected from organisations across NHS Wales to report on the performance of the NHS so that improvements can be made to services. More information about DHCW services and how it uses data can be found at:  https://dhcw.nhs.wales/

DHCW has a legal responsibility to collect information to report to NHS Wales and Welsh Government Information.

NHS Wales, Welsh Government via anonymised data and statistics, Primary Care for discussion on improving performance to services offered

Registering for NHS Health Care -

Everyone who receives NHS care will be registered on a national database, which holds your name, address, date of birth and NHS number.  No medical Information is held.  This database is held within the NHS Wales Informatics Service who have the legal responsibilities to collect NHS Data

Centralised national database of all patients who receive NHS care in Wales.  This is held within DHCW who have a legal responsibility for collecting this data.

NHS Wales  - Information is shared with the Welsh Government in an anonymised form for statistical analysis.

Direct Care – The Practice will share your information with other services in order to provide you with direct care and treatment for example referring you to specialist treatment in a hospital

To give direct health or social care to individual patients through working with other health and care professionals to plan and provide specialist services in a hospital setting.

Health Boards, Voluntary Services, Medicines Management, Community Network Services,  Integrated Health and Social Care teams e.g. District Nursing, Local Public Health Team.

Direct Care – sharing your prescription with your local pharmacy

 

For the requirement of fulfilling your prescription request.

Between GP and Pharmacy

Welsh GP Summary Record  - This record provides a summary of important information contained in your GP records including your full name, address and contact information, along with current medication, previous medication prescribed in the last two years, current problems or diagnosis, recent test results and allergy or adverse reaction information.  You can “opt out” of sharing your information in the summary record.  Further information is available here:  Welsh GP Record

To allow healthcare professional quick and timely access to the most relevant and recent clinical information when providing you direct care and treatment.

Hospital doctors and nurses directly involved in your care.

Doctors and Nurses providing GP out of hours services

Hospital pharmacists directly involved in your care.

Direct Care – provided by out of hours and A&E

Out of hours and A&E staff may need to access your records in order to provide you the most appropriate care and treatment.

A&E Hospital doctors and nurses directly involved in your care.

Doctors and Nurses providing GP out of hours services

Hospital pharmacists directly involved in your care.

 

National Screening Programmes – The practice will share data for the purpose of inviting patients to participate in national screening programmes. These programmes are used to assist the early detection of certain medical conditions and diseases. There are currently several programmes in place including, bowel screening, breast screening aortic aneurysms screening, diabetes screening, cervical screening, antenatal screening, new-born hearing screening and new-born bloodspot screening.

The law permits Gwrych Medical Centre to share information with Public Health Wales for you to be notified to attend the relevant screening programme.

More information can be found at Screening for Life Wales

Information is shared so that the most high-risk patients are identified and invited for screening where treatment can be offered.

 

Public Health Wales [http://www.publichealthwales.wales.nhs.uk/]

 

 


 

Lawful basis:

 

Article 6(1)(e) ‘….necessary for the performance of a task carried out in the public interest or in the exercise of official authority…’

 

Article 9(2)(h) ’….necessary for the purposes of preventative or occupational medicine for the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services.

 

and/or

 

Article 9(2)(i) ‘….necessary for the reasons of public interest in the area of public health, such as protecting against serious cross-border threats to health or ensuring high standards of quality and safety of health care and medicinal products or medical devices …..’

 

Description

Purpose of the processing

Recipients

Medicines Management – The Practice may conduct reviews of medications prescribed to patients.

This service performs a review of prescribed medication to ensure patients receive the most appropriate update to date and cost-effective treatments

Medicines management, Pharmacies, GP practices, community network services – integrated health and social care e.g. District Nursing, and the Local Public Health Team.

Clinical Audit – Clinical Audit allows a review of the quality of care provided to patients. The practice will only share information for organisations responsible for national Healthcare Quality Improvement Partnership (HQIP)

Medical research purposes and to review the quality of healthcare provided to patients

For national clinical Audit purposes

The data will be shared with Healthcare Quality Improvement Partnership and NHS Wales Informatics Services

Public Health Wales – To prevent the spread of infectious diseases and other diseases, which threaten the health of the population, the law requires us to share data. If an instance occurs, the necessary information will be reported to Public Health Wales.

For further information about Public Health Wales and the reporting of diseases, please see -  https://phw.nhs.wales/

To give direct health or social care to individual patients.

 

Information must be shared by law under public health legislation therefore you are unable to object

 

Public Health Staff, Health Boards and Hospitals, Welsh Assembly government and other relevant organisations as required


Lawful basis:

 

Article 6(1)(e) ‘….necessary for the performance of a task carried out in the public interest or in the exercise of official authority…’

 

Article 9(2)(a) – ‘the data subject has given explicit consent to..’

 

and/or

 

Article 9(2)(j) – ‘processing is necessary for…scientific or historical research purposes or statistical purposes in accordance with Article 89(1) based on Union or Member States law which shall be proportionate to the aim pursued, respect the essence of the right to data protection and provide for suitable and specific measures to safeguard the fundamental rights and interests of the data subject’

 

Description

Purpose of the processing

Recipients

Medical Research  Medical research allows researchers to understand the causes of diseases and supports to the development of new and better clinical care and treatment.  We may use information we hold about you in research, information will only be shared with organisations like Health Care and Research Wales where the law allows or with your consent.

Medical research purposes and to review the quality of healthcare provided to patients

For medical research purposes, information will be shared with:

 

Data will be shared with Health and Care Research Wales [add any other relevant organisations]

 

 

 

 

Lawful basis:

 

Article 6(1)(c) ‘ ….necessary for the compliance with a legal obligation to which the controller is subject’

 

and/or

 

Article 6(1)(d) ‘…. Necessary in order to protect the vital interests of the data subject or another natural person’.

 

and/or

 

Art 6(1)(e) ‘….necessary for the performance of a task carried out in the public interest or in the exercise of official authority…’

 

Art 9(2)(g) ‘…necessary for reasons of substantial public interests.’

Data Protection Act 2018, S10  and Schedule 1 Para 18 ‘Safeguarding of children and individuals at risk’

 

Description

Purpose of the processing

Recipients

Safeguarding - There may be rare situations where we need to share information to protect people with safeguarding needs such as children, staff or even you from harm.  No consent of permission is needed for the practice to do this. 

To protect children, staff or vulnerable adults from harm.

Your information may be shared with Social Services, the Police or other law enforcement bodies where the law allows.

or

Your information must be shared if a court orders us to do.

 


 

 

Lawful basis:

 

Article 6(1)(c) ‘….necessary for compliance with a legal obligation to which the controller is subject’

 

Article 9(2)(h)’ necessary for the purposes of preventative or occupational medicine for the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services.

 

and/or

 

Article 9(2)(j) – ‘processing is necessary for…scientific or historical research purposes or statistical purposes in accordance with Article 89(1) based on Union or Member States law which shall be proportionate to the aim pursued, respect the essence of the right to data protection and provide for suitable and specific measures to safeguard the fundamental rights and interests of the data subject’

 

Description

Purpose of the processing

Recipients

Health Care Inspectorate Wales (HIW) – Healthcare Inspectorate Wales is an independent inspectorate and regulator of health care in Wales. They regulate and inspect NHS services and independent healthcare providers to ensure that safe care is provided and to identify areas for improvement. It is compulsory and a legal requirement for the practice to inform HIW of any serious incidents that may occur such as when a patient safety has been put at risk.

 

Further information can be found at: http://hiw.org.uk/?lang=en

The law requires information to be shared with the Healthcare Inspectorate Wales so they can perform their regulatory functions. This means you are unable to object.

 

Health Care Inspectorate Wales (HIW) staff as directed.

 

 

Lawful basis:

 

Article 6(1)(c) ‘….necessary for compliance with a legal obligation to which the controller is subject’

 

and/or

 

Article 6(1)(e) ‘….necessary for the performance of a task carried out in the public interest or in the exercise of official authority…’

 

Article 9(2)(f) ‘…necessary for the establishment, exercise of defence of legal claims…’

 

and/or

 

Article 9(2)(g) ‘.. is necessary for reasons of substantial public interest’

 

 

Description

Purpose of the processing

Recipients

Legal Advice/ Claims – There may be rare situations where individuals make claims against the practice, when this occurs we may share all relevant claim and relative medical records/ information to enable the practice to obtain legal advice, establish the facts of the case and defend such instances.

To obtain legal advice, or for the purpose of establishing, exercising or defending legal rights

(including prospective legal proceedings)

Your information may be shared with the GP’s  Medical Defence Unions, solicitors or legal representatives and NHS Wales Shared Services who operate the All Wales GMPI scheme.  The Legal and Risk Service Team Privacy Notice is available here.

 

 

Local Services. Ready to Help You