Privacy Notice – Other Third Parties

1) Data Controller contact details

Telephone: 01373 301301

2) Data Protection Officer contact details

Telephone: 01935 384000

Email: somccg.GPDPO@nhs.net

3) Purpose of the  processing

This covers information provided to third party organisations such as solicitors (e.g. personal injury claims), insurance companies (e.g. life assurance), employers etc.

The explicit consent of patients must be obtained and demonstrable before the release of any such information.

4) Lawful basis for  processing

To enable the Frome Medical Practice employees to provide information to other third parties, the following Article 6 and 9 conditions apply:

6(1) (a)  - Consent of the data subject

and;

9(2)(a) – Explicit consent of the data subject, unless reliance on consent is prohibited by EU or Member State law

We will consider your rights established under UK case law collectively known as the “Common Law Duty of Confidentiality”^*

5) Recipient or categories of recipients of the processed data

The requesting third party organisation.

6) Rights to object

You do not have to consent to your data being shared with a third party. If you have consented to your data being shared with a third party you can change your mind and withdraw your consent at any time. If you wish to do so please contact the practice.

7) Right to access and correct

You have the right to access any identifiable data that is being shared and have any inaccuracies corrected.

8) Retention period

Data retained in line with the third party organisation’s policies on storing identifiable data.

9) Right to complain

You have the right to complain to the Information Commissioner’s Office, you can use this link https://ico.org.uk/global/contact-us/ or calling their helpline Tel: 0303 123 1113 (local rate) or 01625 545 745 (national rate)