Privacy Notice - Risk Stratification

 

BACK TO PRIVACY NOTICES

 

The records we keep enable us to plan for your care.
Risk stratification for case finding’ is a process for identifying and managing patients who have or may be at risk of health conditions (such as diabetes) or who are most likely to need healthcare services (such as people with frailty). 

Risk stratification tools used in the NHS help determine a person’s risk of suffering a particular condition and enable us to focus on preventing ill health before it develops.

Information about you is collected from a number of sources including NHS Trusts, GP Federations and your GP Practice. A risk score is then arrived at through an analysis of your de-identified information.  This can help us identify and offer you additional services to improve your health.

This practice keeps data on you that we apply searches and algorithms to in order to identify from preventive interventions.  This means using only the data we hold or in certain circumstances linking that data to data held elsewhere by other organisations, and usually processed by organisations within or bound by contracts with the NHS.

Despite this we have an overriding responsibility to do what is in your best interests. If we identify you as being at significant risk of having, for example a heart attack or stroke, we are justified in performing that processing in order to provide you with medical care.

1) Controller contact details

Lee Road Surgery

20 Lee Road

London

SE3 9RT
2) Data Protection Officer contact details

John Eni-Uwubame

South East London Integrated Care System
160 Tooley Street
London
SE1 2TZ
Email: gpdpo@selondonics.nhs.uk
Telephone: 02081761198
3) Purpose of the processing

The practice performs computerised searches of some or all of our records to identify individuals who may be at increased risk of certain conditions or diagnoses i.e., Diabetes, heart disease, risk of falling).

Your records may be amongst those searched. This is often called “risk stratification” or “case finding”.

The results of these searches and assessment may then be shared with other healthcare workers, such as specialist, therapists, technicians etc. The information that is shared is to enable the other healthcare workers to provide the most appropriate advice, investigations, treatments, therapies and or care
4) Lawful basis for processing

The legal basis for this processing is 
Article 6(1)(e); “necessary… in the exercise of official authority vested in the controller’. 
And 

Article 9(2)(h) ‘necessary for the purposes of preventative or occupational medicine for the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services...” 

We will recognise your rights under UK Law collectively known as the “Common Law Duty of Confidentiality” * 
5) Recipient or categories of recipients of the shared data  

The data will be shared for processing with [Practice to insert any Processor] and for subsequent healthcare with South East London ICB
6) Rights to object 

If you do not wish information about you to be included in any risk stratification programmes, please let us know. 

You have the right to object to this processing where it might result in a decision being made about you. Contact the Practice using the above details. 

You should be aware that this is a right to raise an objection which is not the same as having an absolute right to have your wishes granted in every circumstance.
7) Right to access and correct

You have the right to access copies of the data that is being shared and have any inaccuracies corrected. There is no right to have accurate medical records deleted except when ordered by a court of Law.
8) Retention period 

The data will be retained in line with the law and national guidance. https://transform.england.nhs.uk/information-governance/guidance/records-management-code/ 
9)  Right to Complain. 

You have the right to complain to the Information Commissioner’s Office, you can use this link https://ico.org.uk/make-a-complaint/data-protection-complaints/

or calling their helpline Tel: 0303 123 1113 (local rate) or 01625 545 745 (national rate) 
There are National Offices for Scotland, Northern Ireland and Wales, (see ICO website).