General Data Protection Regulation (GDPR)

The General Data Protection Regulation (GDPR) is a regulation on data protection and privacy for all individuals within the EU. The GDPR aims to give control to citizens and residents over their personal data and becomes enforceable from 25th May 2018.

The GDPR supersedes the Data Protection directive 1995 and includes the following rights for individuals:

  • the right to be informed
  • the right of access
  • the right to rectification
  • the right to erasure
  • the right to restrict processing
  • the right to data portability
  • the right to object
  • the right not to be subject to automated decision-making including profiling

No personal data may be processed unless it is done under a lawful basis specified by the regulation, or if the data controller or processor has received explicit, opt-in consent.  Permission can be withdrawn at any time.

Under GDPR, Castleford Medical Practice must clearly disclose what data is being collected and how, why it is being processed, how long it is being retained, and if it is being shared with any third-parties. Patients have the right to request a copy of the data collected and the right to have their data erased under certain circumstances. 

Please follow the below links for further information.

Data Sharing

As of 1st September 2021 your data will be shared with NHS Digital to help improve health, care and services

Patient data from GP medical records kept by GP practices in England is used every day to improve health, care and services through planning and research, helping to find better treatments and improve patient care. The NHS is introducing an improved way to share this information - called the General Practice Data for Planning and Research data collection.

NHS Digital will collect, analyse, publish and share this patient data to improve health and care services for everyone. This includes:

  • informing and developing health and social care policy
  • planning and commissioning health and care services
  • taking steps to protect public health (including managing and monitoring the coronavirus pandemic)
  • in exceptional circumstances, providing you with individual care
  • enabling healthcare and scientific research

Any data that NHS Digital collects will only be used for health and care purposes. It is never shared with marketing or insurance companies.

READ MORE HERE 

NHS Digital will not collect any patient data for patients who have already registered a Type 1 Opt-out in line with current policy. If this changes patients who have registered a Type 1 Opt-out will be informed.

If you do not want your patient data shared with NHS Digital, you can register a Type 1 Opt-out with us. You can register a Type 1 Opt-out at any time. You can also change your mind at any time and withdraw a Type 1 Opt-out.

Data sharing with NHS Digital will start on 1st September 2021.

If you have already registered a Type 1 Opt-out with your GP practice your data will not be shared with NHS Digital.

If you wish to register a Type 1 Opt-out with your GP practice before data sharing starts with NHS Digital, this should be done by returning this form to us  by 1st August 2021 to allow time for processing it. If you have previously registered a Type 1 Opt-out and you would like to withdraw this, you can also use the form to do this. 

If you register a Type 1 Opt-out after your patient data has already been shared with NHS Digital, no more of your data will be shared with NHS Digital. NHS Digital will however still hold the patient data which was shared with us before you registered the Type 1 Opt-out.

If you do not want NHS Digital to share your identifiable patient data with anyone else for purposes beyond your own care, then you can also register a National Data Opt-out (also known as Type 2 Opt out). 

Diagram of how Type 1 and National Data Opt Out would work

 

What do you need to do?

If you are happy for your data to be shared as above, and haven't previously Opt'd out - you do not need to do anything.

Type 1 OPT-OUT - to stop sharing your details with NHS digital (or to opt back in, if you have previous opt'd out)

Complete this form OPT OUT FORM (or you can complete this to opt back in)

Then, either;

  • Hand the form into reception
  • Email it to us: wakccg.castlefordmp@nhs.net 
  • post it to us to: Castleford Medical Practice, The Health Centre, Welbeck Street, Castleford, WF10 1HB

Type 2 OPT-OUT (Also known as National Data Opt-out) - If you do not want NHS Digital to share your patient data with anyone else for purposes beyond your own care, which has been already shared with them (or to opt back in, if you have previous opt'd out)

NOTE: You can only do this via the following ways - as a GP practice we cannot opt you out of Type 2 (National Data Opt-out)

You need complete the online form via YOUR NHS MATTERS