Privacy Notice – GP Connect

GP Connect is a platform which allows different systems to communicate so that clinicians in different care setting can view a patient’s GP record. 

This practice keeps data on you relating to who you are, where you live, what you do, your family, possibly your friends, your employers, your habits, your problems and diagnoses, the reasons you seek help, your appointments, where you are seen and when you are seen, who by, referrals to specialists and other healthcare providers, tests carried out here and in other places, investigations and scans, treatments and outcomes of treatments, your treatment history, the observations and opinions of other healthcare workers, within and outside the NHS as well as comments and aide memoires reasonably made by healthcare professionals in this practice who are appropriately involved in your health care.

GP Connect also provides the ability of your medical records being transferred to your new registered practice electronically without the delay. This enables continuity of your care by different providers. 

1) Data Controller contact details

All Croydon GP Practices 

2) Data Protection Officer contact details

Contact Laura Watson via email

3) Purpose of the processing

The information that is shared is to enable the other healthcare workers to provide the most appropriate advice, investigations, treatments, therapies and/or care.

4) Lawful basis for processing

The processing of personal data in support of direct care elsewhere is supported under the following

• Article 6(1)(e) ‘…necessary for the performance of a task carried out in the public interest or in the exercise of official authority…’. 
• Article 9(2)(h) ‘necessary for the purposes of preventative or occupational medicine for the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services...’.

We will also recognise your rights established under UK case law collectively known as the “Common Law Duty of Confidentiality”.

5) Recipient or categories of recipients of the shared data

The data will be shared with the Care Quality Commission, its officers and staff and members of the inspection teams that visit us from time to time. 

6) Rights to object 

You have the right to object to some or all the information being shared. Please contact our Data Protection Officer. 

7) Right to access and correct

You have the right to access the data that is being shared and have any inaccuracies corrected. There is no right to have accurate medical records deleted except when ordered by a court of Law.

8) Retention period 

The data will be retained for active use during the processing and thereafter according to NHS Policies and the law.

9) Right to Complain

You have the right to complain to the Information Commissioner’s Office (ICO).

Please note that the National Data Opt Out does not apply to this sharing of information.

For further information, please see your NHS data matters