Accessing GP records online.

Accessing your GP-held records via the NHS app or NHS website

As your GP practice, we have been asked to provide you with, no later than 31 October 2023, access to your full medical record going forward via the NHS app (and NHS website) if you have a suitable NHS login

Your GP medical record contains consultation notes based on conversations between you, your GP and their team: medicines prescribed to you; all test results including hospital investigations; allergies; vaccines; and your medical conditions along with documents that may have been sent from local hospitals, clinics or other agencies, eg the police. There is likely to be sensitive and personal information within your medical record.

We are supportive of providing you with access to your record, but we wish to do this safely and make you aware that this is happening so that you can opt out, if you so wish. You may wish to speak with us first to understand what it is that you will see, and the risks which may be involved in having such confidential data either on your smartphone with the NHS app installed or online if other people might have access to that information through your devices. If you are in a difficult or pressured relationship for example, you may prefer your records to remain accessible only to those treating you, with them not appearing on your smartphone or online. Government has been clear that if a patient does not wish to have access, then we do not have to provide it. This is one reason why we have asked if you wish to opt out, or have it switched off for the time being.

For those who would like access, we are happy to explain the different levels you might like. Everyone can have access to their medication history and allergies, for example, and will be able to order their repeat prescriptions. It’s also possible to request access to what we call your ‘coded record’ where you can see a list of medical problems and results. You can also request access to the ‘full’ record where you will be able to see everything, including the notes which have been written by doctors, nurses and others involved in your care, at the GP surgery, and elsewhere.

It’s important to remember that these documents may, at times, contain information that could be upsetting, especially if they contain news of a serious condition. It can also be a cause for worry seeing results online when it isn’t clear what the results might mean, and no one is available to ask, as can be the case during the evening or at weekends, for example.

Sometimes people with a mental health condition might prefer not to see documents that remind them of difficult times in their life. Letters from mental health teams sometimes go into detail about past events, and great care would be needed in deciding whether you would want to see these letters. It is possible for individual items to be hidden at your request and your GP would be happy to talk about any concerns you may have.

Great care is also needed in case private details might cause harm at home, should people in a difficult or pressured relationship be forced to show their medical record to an abusive partner. Anyone in such a position should make this clear to us at the practice, so we can take steps to keep you safe. This might mean removing access through the NHS app for the time being, or through a careful process where we hide sensitive things. We would talk this through with you.

 

Requesting access – what do I need to do?

The easiest way to get access is to create an NHS login through the NHS app. Although you can also access your GP records via the internet on a computer, the first bit is easiest if done through a smartphone. If you don’t have one, you may have a family member or friend you trust who can help you. You can also ask your practice receptionist, but you’ll need some proof of who you are, eg a passport, driving licence or household bill.

If you use the NHS app, you’ll have to set up an account using a unique e-mail address and then ‘authenticate’ yourself to the NHS system to prove you are who you say you are. This will involve confirming your name, date of birth and contact details. The NHS login has several levels of authentication and to gain access to your records you’ll need the highest level of authentication. This generally involves you recording a short video of yourself to prove you are a real person as well as uploading a copy of a suitable identification document. Your GP practice can bypass this step if you are struggling, but we’d ask you to try to sign up to the NHS app yourself.

Once you have suitably authenticated yourself to the NHS app and created your NHS login you can approach your practice and ask for access, being mindful of the risks associated with access and the importance of not sharing passwords or having them stored in your smartphone if you think other people might want to see them without your permission. If you have any concerns, you should explain these to your GP practice team who can guide you.

Your GP practice will have a form they will ask you to complete, with your NHS login (this will be the email address you used to sign up) and then you will have a chat about access and your agreement and understanding will be requested. Once you are happy to get online access, your request will be passed to the clinical team to review. It may be that the practice wishes to contact you to discuss your request if there are any concerns raised so that access can be given safely. We’re not sure how many people will ask for access all at once so there may be a wait, but we will do our best to get you online access as soon as we can.

The form to request access can be accessed via reception.

Practice Privacy Notice

As a registered patient, The Elms Medical Practice has a legal duty to explain how we use any personal information we collect about you at the organisation. We collect records about your health and the treatment you receive in both electronic and paper format.

Practice privacy notice

Privacy Notice

At The Elms Medical Practice, we have a legal duty to explain how we use any personal information we collect about you at the
organisation. We collect records during the recruitment stage and then data is continued to be collected for any successful candidate.
This is in both electronic and paper format.

This privacy notice applies to personal information processed by or on behalf of The Elms Medical Practice. We are required to provide
you with this privacy notice by law. It provides information on how we use the personal and healthcare information we collect, store and hold about you.

If you have any questions about this privacy notice or are unclear about how we process or use your personal
information or have any other issue regarding your personal and healthcare information, then please contact our data protection officer, Paula McIlroy (theelmspractice@nhs.net)

Privacy Notice – Candidates applying for work

How we treat your data

At The Elms Medical Practice we take Data Security very seriously. Please see our policies below, which will inform you on how we treat your records, and how you can request your records from us.

Information governance breach reporting policy

Freedom of information policy (Template 1.3)

The Type of Personal Data we are Sharing With NHS Digital

The data being shared with NHS Digital will include information about patients who are currently registered with a GP practice or who have a date of death on or after 1 November 2019 whose record contains coded information relevant to coronavirus planning and research. The data contains NHS Number, postcode, address, surname, forename, sex, ethnicity, date of birth and date of death for those patients. It will also include coded health data which is held in your GP record such as details of:

  • Diagnoses and findings.
  • Medications and other prescribed items.
  • Investigations, tests and results.
  • Treatments and outcomes.
  • Vaccinations and immunisations.

How NHS Digital Will Use And Share Your Data

NHS Digital will analyse the data they collect and securely and lawfully share data with other appropriate organisations, including health and care organisations, bodies engaged in disease surveillance and research organisations for coronavirus response purposes only. These purposes include protecting public health, planning and providing health, social care and public services, identifying coronavirus trends and risks to public health, monitoring and managing the outbreak and carrying out of vital coronavirus research and clinical trials. The British Medical Association, the Royal College of General Practitioners and the National Data Guardian are all supportive of this initiative.

NHS Digital has various legal powers to share data for purposes relating to the coronavirus response. It is also required to share data in certain circumstances set out in the Covid-19 Direction and to share confidential patient information to support the response under a legal notice issued to it by the Secretary of State under the Health Service (Control of Patient Information) Regulations 2002 (COPI Regulations).

Legal notices under the COPI Regulations have also been issued to other health and social care organisations requiring those organisations to process and share confidential patient information to respond to the coronavirus outbreak. Any information used or shared during the outbreak under these legal notices or the COPI Regulations will be limited to the period of the outbreak unless there is another legal basis for organisations to continue to use the information.

Data which is shared by NHS Digital will be subject to robust rules relating to privacy, security and confidentiality and only the minimum amount of data necessary to achieve the coronavirus purpose will be shared. Organisations using your data will also need to have a clear legal basis to do so and will enter into a data-sharing agreement with NHS Digital. Information about the data that NHS Digital shares, including who with and for what purpose will be published in the NHS Digital data release register.

For more information about how NHS Digital will use your data please see the NHS Digital Transparency Notice for GP Data for Pandemic Planning and Research (COVID-19).

National Data Opt-Out

The application of the National Data Opt-Out to information shared by NHS Digital will be considered on a case by case basis and may or may not apply depending on the specific purposes for which the data is to be used. This is because, during this period of emergency, the National Data Opt-Out will not generally apply where data is used to support the coronavirus outbreak, due to the public interest and legal requirements to share information.

Your Rights Over Your Personal Data

To read more about the health and care information NHS Digital collects, its legal basis for collecting this information and what choices and rights you have in relation to the processing by NHS Digital of your personal data, see:

 

Named GP

Your named accountable GP is either Dr A Krishnamurthy or Dr G Duddukuri.

If you would like to know who your named GP is, please contact the Practice 

 

 Your named GP will not be available at all times and if your needs are urgent you may need to discuss them with an alternative doctor.

Patient Data Sharing

We are introducing Summary Care Records to improve the safety and quality of patient care.

The Summary Care Record is an electronic record which will give healthcare staff faster, easier access to essential information about you.

For more information about Summary Care Records please copy and paste website address below into your web address from the internet

Summary Care Records (SCR) – NHS Digital

If you would like to opt-out please fill out the form under ‘Our Documents’ page.

What Does it Mean if I do not Have Summary Care Record?

NHS healthcare staff caring for you may not be aware of your current medications, allergies you suffer from and any bad reactions to medicines you have had, in order to treat you safely in an emergency.

Your records will stay as they are now with information being shared by letter, email, fax or phone. If you have any questions, or if you want to discuss your choices, please:

• Phone the Summary Care Record Information Line on 0300 123 3020;

• Contact your local Patient Advice Liaison Service (PALS); or

• Contact your GP practice.

National Data Opt-Out

 

Using your health data for planning and research

 

You can decide whether you wish to have your information extracted and there are two main options available to you.

 

Option 1:                         

 

Type 1 Opt-out applies at organisational level and means that your medical record is not extracted from the organisation for any purpose other than for direct patient care. You can opt out at any time. Opting out will mean that no further extractions will be taken from your medical record.

 

Further information is available here.

 

Option 2:

 

Type 2 Opt-out allows data to be extracted by NHS Digital for their lawful purposes but they cannot share this information with anyone else for research and planning purposes. You can opt out at any time.

 

Further information is available here.

 

How do you opt out?

 

Type 1 – You need to contact the practice by phone, email or post to let us know that you wish to opt out.

 

Type 2 – you need to inform NHS Digital. Unfortunately, this cannot be done by the practice for you. You can do this by any of the following methods:

 

 

  • Telephone service 0300 303 5678 which is open Monday to Friday between 0900 and 1700

 

  • NHS App – For use by patients aged 13 and over (95% of surgeries are now connected to the NHS App). The app can be downloaded from the App Store or Google play

 

 

  • Photocopies of proof of the applicant’s name (e.g., passport, UK driving licence etc.) and address (e.g., utility bill, payslip etc.) need to be sent with the application.

 

It can take up to 14 days to process the form once it arrives at NHS, PO Box 884, Leeds. LS1 9TZ

 

Patient Confidentiality

We respect your right to privacy and keep all your health information confidential and secure. It is important that the NHS keep accurate and up-to-date records about your health and treatment that those treating you can give you the best possible advice and care. You have a right to know what information we hold about you and if you would like to see your records please call our practice.

We aim to treat our patients courteously at all times and expect our patients to treat our staff in a similarly respectful way. We take seriously any threatening, abusive behaviour against any of our staff or patients. If a patient is violent or abusive, they will be warned to stop their behaviour. If they persist, we may exercise our right to take action to have them removed, immediately if necessary, from our list of patients.

Privacy information leaflet

Complaints

The Elms Practice aims to give a friendly and professional service to all our patients. However, if you have any concerns about any aspect of our service, please let us know. Speak to whoever you feel most comfortable – your GP, our practice manager or our reception staff will be happy to help. In the majority of cases, concerns can be resolved quite easily. There is a complaints, form readily available from reception or you can telephone the Practice manager.

However, if you feel we have not dealt with the issues you have raised as you would wish, you can write to NHS England, P.O. Box 16738, Redditch, B97 9PT. or Telephone 0300 311 22 33 (Monday to Friday 8 am-6 pm, excluding, English Bank Holidays), you can also Email: england.contactus@nhs.net.

You can also contact Parliamentary and Health Service Ombudsman if you feel the issues you have raised have not been dealt with.

The Ombudsman’s role is to make final decisions on complaints that have not been resolved locally by the NHS in England. The Ombudsman looks at complaints where someone believes there has been injustice or hardship because an organisation has not acted properly or has given a poor service and not put things right.

The Ombudsman can recommend that organisations provide explanations, apologies and financial remedies to service users and that they take action to improve services.

Making a complaint | Parliamentary and Health Service Ombudsman (PHSO)

Complaints Procedure

 

Privacy Notice – Medicines Optimisation

Purpose and Legal Basis for Processing

West Lancashire CCG has a duty to secure continuous improvement in the quality of services provided to individuals for, or in connection with the prevention, diagnosis or treatment of illness. Taking that into account, the Medicines Management Team supports the CCG with commissioning services that make the best use of available medicines. Your personal data will be used to fulfil this duty in respect of promoting cost-effective use of medicines as well as implementing projects or actions to optimise the use of medicines to improve outcomes, enhance patient safety and improve capacity within the local health economy.

The legal basis we rely on under GDPR is Article 6(1)(e) “processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller”. For the special categories of data, we rely on article 9(2)(h) “processing is necessary for the purposes of the provision of health or social care or treatment”

Source of Data

Data used to fulfil the above duties is received directly from the primary and secondary healthcare providers for which the CCG has responsibility for.

Categories of Data

Typically, clinicians and pharmacists will require access to patient information including NHS Numbers and medication lists.

Recipients of Personal Data

Personal data is shared between the CCG and local healthcare providers including GP practices. They do this to facilitate the implementation of recommendations by the medicines management team.