Confidentiality

How We Keep Your Information Confidential

Everyone working at Frome Medical Practice has a responsibility to protect your confidentiality. This includes doctors, nurses, healthcare professionals, administrative staff, students, contractors, and anyone else working on behalf of the practice.

We only allow access to information when it is needed to provide care, support our services, or carry out other authorised duties. Staff are expected to access the minimum amount of information needed to do their job.

All staff receive training on confidentiality, data protection, and information security. They are required to follow NHS standards and professional codes of conduct when handling your information.

We use secure NHS systems and processes to protect your information. Access to patient records is monitored and audited, and any inappropriate access or misuse of information is investigated.

We follow the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the common law duty of confidentiality, and the Caldicott Principles, which help NHS organisations use and share information appropriately while protecting patient privacy.

How We Use Your Information

We use information about you to provide safe and effective healthcare. This includes recording information about your health, arranging appointments, managing referrals, reviewing test results, and supporting decisions about your treatment and care. 

We may also use information to help us improve services, monitor quality and safety, meet legal and regulatory requirements, plan healthcare services, and protect public health. Where possible, information used for planning, research, or service improvement is anonymised or de-identified so that individuals cannot be identified. 

We only use your information where there is a lawful basis to do so and in line with data protection law. We are committed to using the minimum information necessary for the purpose it is needed.

For more detailed information about how we collect, use, and protect your personal information, please see our Privacy Notices.

When We Share Information

We may need to share information about you with other organisations and healthcare professionals involved in your care. This helps make sure you receive safe, effective, and joined up care. 

We may share information with:

• Hospitals, community services, mental health services, and other NHS organisations involved in your care
• Other healthcare professionals involved in your treatment
• Organisations providing services on behalf of the NHS, where there is a lawful basis to do so
• Local authorities and other agencies where information sharing is needed to safeguard a child or vulnerable adult

We will only share information that is relevant and necessary for the purpose, and we take steps to ensure it is shared securely. 

There are some situations where we may share information without your consent. For example:

• When required by law
• When there is a serious risk to your safety or the safety of others
• To help protect children or vulnerable adults from harm
• When there is an overriding public interest

Where appropriate, we will tell you about information sharing and involve you in decisions about your information.

Your Rights and Choices

You have rights over how your personal information is used and shared. We are committed to helping you understand and exercise those rights.

Accessing Your Records

You have the right to request access to the information we hold about you. This is known as a Subject Access Request. Requests can be made verbally or in writing, and we will normally respond within one month.

Correcting Information

If you believe information we hold about you is inaccurate or incomplete, you can ask us to review it. We will consider your request and make corrections where appropriate.

Choices About How Information Is Used

In some circumstances, you have the right to object to or restrict how your information is used. We will consider any request and explain what options are available to you. 

National Data Opt Out

The NHS uses some patient information for research and planning to help improve health and care services. If you do not want your confidential patient information to be used for these purposes, you can register a National Data Opt Out. This will not affect your individual care or treatment. 

Privacy Notices

Our Privacy Notices provide more information about how we collect, use, and share personal information, the lawful bases we rely on, and the rights available to you.

Children and Young People

Parents and carers are usually involved in decisions about a child's healthcare and will normally have access to information about their child's care when this is in the child's best interests. 

As children get older and become more able to understand and make decisions about their healthcare, they may be able to make some decisions independently. In these situations, we will respect their confidentiality and will only share information with parents or carers where it is appropriate to do so.

We understand that some young people may be worried about speaking to a healthcare professional. If a young person is able to understand the advice and treatment being offered, they can usually talk to a doctor, nurse, or other healthcare professional in confidence.

We will always encourage young people to involve a parent, carer, or trusted adult where possible. However, we will not usually share information without their agreement unless there is a concern about their safety or the safety of someone else, or we are required to do so by law. 

Wherever possible, we will explain what information is being shared and why.

When We May Share Information

There are some situations where we may need to share information without your agreement. We will only do this when there is a lawful reason and it is necessary to protect you, protect others, or meet our legal responsibilities.

This may include:

• Protecting a child or vulnerable adult from harm
• Where there is a serious risk to your safety or the safety of another person
• When we are required to do so by law, such as complying with a court order
• When sharing information is necessary to prevent or detect a serious crime, or where there is an overriding public interest
• To protect public health where sharing is required by law

Whenever possible, we will explain what information is being shared and why. However, there may be situations where we cannot do this if it could place someone at risk or prevent action being taken to protect them.