Protecting Your Confidentiality - Privacy Notice
How we keep your information confidential and safe
Everyone working for our organisation is subject to the Common Law Duty of Confidence. Information provided in confidence will only be used for the purposes advised with consent given by the patient or authorised carer, unless there are other circumstances covered by the law. The NHS Digital Code of Practice on Confidential Information applies to all our staff and they are required to protect your information, inform you of how your information will be used, and allow you to decide if and how your information can be shared. All our staff are expected to make sure information is kept confidential and receive regular training on how to do this.
NHS staff are not permitted to access information that is not relevant to the patient and the condition they are treating and our information systems are set up to prevent and track any misuse of information.
The health records we use may be electronic, on paper or a mixture of both, and we use a combination of working practices and technology to ensure that your information is kept confidential and secure. Your records are backed up securely in line with NHS standard procedures. We ensure that the information we hold is kept in secure locations, is protected by appropriate security and access is restricted to authorised personnel.
We also make sure external data processors that support us are legally and contractually bound to operate. Before they begin any work they have to provide evidence in the form of a Data Security Policy, that adequate security arrangements are in place to protect patients.
We are committed to protecting your privacy and will only use information collected lawfully in accordance with:
- General Data Protection Regulation
- Data Protection Act 2018
- Human Rights Act
- Common Law Duty of Confidentiality
- NHS Codes of Confidentiality and Information Security
- Health and Social Care Act 2015
- And all applicable legislation
We maintain our duty of confidentiality to you at all times. We will only share your information where there is a legal basis, such as for:-
- Your medical diagnosis and treatment
- To provide you with health or social care
- To manage and plan our local health and social care services
- Where is it required by law, for example the Children’s Act 1989 requires information to be shared in Safeguarding cases
- Protection of vital interests, for example to protect someone's physical integrity of life
- With your consent, providing you have capacity to give this, or with consent from your authorised representative.