Office opening hours: 8.30am to 5.30pm Monday to Friday. Offices closed on Bank Holidays.
Home Menu Search

Governance & Confidentiality

Caldicott

The December 1997 Caldicott Report identified weaknesses in the way parts of NHS handled confidential patient data. The report made sixteen recommendations, one of which was the appointment of Caldicott guardians, members of staff with a responsibility to ensure patient data is kept secure. It...

Confidentiality

Medical confidentiality is at the bedrock of the Doctor-Patient relationship and it is enshrined in a number of codes, guidelines and laws. The GMC has produced updated Guidance on Confidentiality with individual leaflets covering how care guidance applies in a range of situations doctors often...

Confidentiality - Recycling

Introduction We have recently been asked for advice on the data protection implications of using a commercial company for recycling confidential waste paper. The company undertakes to bag up all paper securely, before taking it to their central recycling plant where all employees have been...

Confidentiality after Death

Access to the Health Records of Deceased Patients Note: Although the GDPR does not apply to data concerning deceased persons, the ethical obligation to respect a patient's confidentiality continues beyond death. The Access to Health Records Act 1990 (AHRA) provides a small group of people with...

Data Sharing - General Principles

General Principles Before sharing personal information you should ask yourself these relevant questions: What information do you wish to share? What is your purpose in sharing this information? Do you have consent to share? Can you achieve your purpose without sharing the information? Are you...

DVLA

DVLA - Consent for the Release of Relevant Medical Information You do not need to see the written consent of your patient to share relevant information with the DVLA, the consent will have been given and this is legally assured In August 2009, rules called Consent by Assurance were implemented...

Employment Contract Clauses

Confidentiality & Data Protection All Employees must strictly adhere to the applicable GMC Guidance on patient confidentiality and the Practice Data Protection Act Policy. You must not use or disclose confidential information about the Practice’s patients or its business other than as expressly...

Good Practice Guidelines for GP Electronic Patient Records

The links below give useful guidance on all aspects of GP electronic records, produced by the DOH, in conjunction with RCGP and BMA: Good Practice Guidelines for GP Electronic Patient Records, Version 4, 2011 (Full Version) Good Practice Guidelines for GP Electronic Patient Records, Version 4,...

Information Governance Requirements for General Practice

The Data Security & Protection Toolkit has replaced the IG toolkit. Information can be found here: https://www.dsptoolkit.nhs.uk/ There is a version for General Practice. The new toolkit is linked to the ten data security standards, published by the National Data Guardian and CQC and link to...

Information Governance Support

Please see below details of who to contact if you have queries relating to Information Governance: Hampshire & IOW CCGs: 02380 627579 email: SCWCSU.IGenquiries@nhs.net BaNES, Wiltshire & Swindon CCGs: GP-IGEnquiries.scwcsu@nhs.net Dorset CCG: 01305 363567 email: Paddy.Baker@dorsetccg.nhs.uk

Living Wills, Enduring Powers of Attorney and Lasting Powers of Attorney

Enduring Power of Attorney An Enduring Power of Attorney was an instrument used by a person to nominate someone to look after their affairs. Any Enduring Power of Attorney executed prior to 1st October 2007 will still be valid. No new Enduring Power of Attorneys can be created. They have been...

Medical Records - Adopted Children

Under adoption legislation, an adopted child is given a new NHS number, and all previous medical information relating to that child is put into a newly created health record. Any information relating to the identity or whereabouts of the birth parents should not be included in the new record....

Medical Records - Handling and Retention

A brief summary of the more detailed advice is available here which includes advice about how long medical records should be kept. For definitive advice please click here: Records Management Code of Practice for Health and Social Care 2016 GMC Good Medical Practice requires that: 'you keep...

Message in a bottle

The Lions Message in a Bottle scheme is a simple idea designed to encourage people to keep their personal and medical details on a standard form and in a common location - the fridge. The Lions Message In A Bottle Scheme 257 Alcester Road South Kings Heath Birmingham B14 6DT Tel: 0845 833...

New GPSoC Framework

Since 2007 GP Systems of Choice (GPSoC) framework has successfully funded the provision of GP clinical IT systems in practices. At present, 81% of GP practices use a system provided through the framework. The Health and Social Care Information Centre (HSCIC) is currently procuring a new GPSoC...

NHS Choices - Responding to Negative Feedback

Negative comments posted on the NHS Choices website. . . GPC has been made aware that there is some confusion concerning the procedures in place when a practice receives notification of negative comments posted on the NHS Choices website. To clarify. . . Practices are notified of a comment...

Parental Responsibility, Access to Children’s Medical Records and Parental Disputes.

Basic principles Parental responsibility refers to the rights, duties, powers and responsibilities that most parents have in respect of their children. Parental responsibility includes the right of parents to consent to treatment on behalf of their children, provided the treatment is in the...

Pathology Requests: Providing Adequate Information

Medical problems that require urgent clinical follow up may be detected by diagnostic tests which are processed, and/or reported, in the Out of Hours period. Unless the pathologist has access to an adequate history and accurate contact details, serious difficulties may arise. Adding the...

Patient Demographic Services (PDS)

Please refer to the following document for Guidance: Patient Demographic Services, Nov 2008

Patient records on USB memory sticks or email

Do not let a USB device plug into your computer from an outside source (e.g. a patient) to copy data. This would be very unsafe and outwith most information governance policies. Remember if putting data onto disc/USB/data device that you should suitably encrypt the data and this is especially...

Recording Telephone Conversations

The principles to consider if you are thinking of recording telephone calls within your practice: You must not single out conversations with individual callers - i.e. you can't just record conversations with "difficult" patients, if you are going to record then this must be done as a matter of...

Release of Data without Consent

Patient data is sensitive personal data and must always be processed in accordance with the Data Protection Principles . It is also protected by the Human Rights Act, the Common Law Duty of Confidentiality and the doctor's professional obligation to respect patients' dignity and privacy....

Requests for Disclosure of Data for Secondary Purposes

Examples of secondary uses include commissioning, risk stratification and audit purposes. The guidance document below issued by the BMA outlines the considerations you must make before allowing release of information and how best to release that information. For more information go to:...

Staff and Confidentiality

The LMC is occasionally contacted by practices that have received complaints relating to a member of staff breaching patient confidentiality. In some of these cases they relate to staff who are no longer employed by the practice. We would recommend that you: Check that you all have a clause...

Summary Care Record (SCR)

What is Summary Care Record The SCR is intended to support patient care in urgent and emergency care settings. The SCR stores a defined set of key patient data for every patient in England except those who elect not to have one. This data makes a summary record created from information held on...

What to do if you receive correspondence about a patient erroneously

You should always return such correspondence promptly to the originator who will be able to check the correct contact details with the PCSE (Hampshire) / SBS (Dorset, Wiltshire & BaNES). They have a database of current contact details for all GP registered patients. If every GP co-operates in...