Confidentiality and Data Sharing

Confidentiality

We ask you for personal information, so you can receive appropriate care and treatment. This information is recorded on computer and we are registered under the Data Protection Act. The practice will ensure that patient confidentiality is maintained at all times by all members of the practice team. However, for the effective functioning of a multi-disciplinary team it is sometimes necessary that medical information about you is shared between members of the team. Access to confidential patient information is given only to those NHS healthcare professionals who need it in order to provide a service to the patient. All staff working in the surgery are subject to stringent confidentiality requirements and no information from your record will be released to third parties outside the NHS without your specific consent.

If you have any concerns regarding the confidentiality of your personal medical records, or you would like further information. Please do not hesitate to discuss this with your doctor, or the Practice Manager.

14.10.20 - Using email to send confidential patient information

Sometimes the surgery has to send confidential patient information to other healthcare colleagues; for example, this might be for a referral or to support your treatment. Within the NHS we have an email system that allows us to send this type of information safely and securely. When we send information outside of the NHS system it is our responsibility to ensure it is sent securely and for this we use a system called Egress. When the patient receives an email from us it will be encrypted for security and the recipient will have to create an Egress account in order to decrypt and view the email. There are instructions on how to do this on the link below. Some of our patients have experienced some difficulty using Egress and in these cases we can send the message unencrypted but we will need an email from the patient (sent to somccg.wellshealthcentre@nhs.net) advising they are content to receive emails from us that are unencrypted. The email will be stored on the patient record.

Egress can be contacted direct by calling 0844 8000 172

Read the guide on accessing Egress secure emails

Data sharing

The IT system we use for your medical records is EMIS WEB. This is a hosted system, which means your data is held on the EMIS servers in Leeds and is accessed by us via the Health And Social Care Network (HSCN), a secure broadband network which is only accessible to the NHS. If signed EMIS data-sharing agreements are in place, other NHS organisations can also view this patient data over their HSCN connection and/or the practice can view your data held on another organisation’s EMIS WEB system.

26.07.21 - UPDATE: General Practice Data for Planning and Research (GPDPR) data collection:

The timescales within which patient preferences for data sharing need to be recorded have changed. Please click on the link below on the 03.06.21 GPDPR entry for the very latest information.

03.06.21 - General Practice Data for Planning and Research (GPDPR) data collection

Please click on the link below for more information on the GPDPR. This link also provides a short video detailing how the NHS uses your data.

Further information on GPDPR (opens new window)

The document below details the legal basis for this new data sharing arrangement; GP practices are mandated under the authority of the Secretary of State for Health to provide this information.

Secretary of State for Health direction regarding GPDPR

There is information in the Privacy Notice (PN) (using the link below) and how you might choose to Opt Out of having your data used beyond its use towards your direct health and social care (medical treatment). There is an Opt-out form for patients to complete on the link below.

Privacy Notice in respect of the GPDPR (opens new window)

You can also use this link to access the Opt-out form:

link to access the Opt-out form

Alternatively, you can call 0300 3035678 to get a copy of the form posted to you. If you wish to register a Type 1 Opt-out with your GP practice before data sharing starts with NHS Digital, this should be done by returning this form to the surgery by 23 June 2021 to allow time for processing it.

You may also be interested to view our Privacy Policy page in conjunction with the information on this page; click on this link to visit that page:

30.11.20 - Physical Health Checks for people with Severe Mental Illness

NHS England has directed NHS Digital to collect and analyse data in connection with Physical Health Checks for people with Severe Mental Illness. Data is being collected from all General Practices in England including the Wells Health Centre.

The data will allow monitoring of progress towards commitments set out in the Five Year Forward View for Mental Health, reiterated in the NHS Long Term Plan and associated Mental Health Implementation Plan, to increase the number of people with Severe Mental Illness receiving physical health checks.

Please click on the link below for more information about this Data Provision Notice:

More information about this data collection (opens new window).

26.10.20 - CVDPREVENT

CVDPREVENT is a national primary care audit to support professionally led quality improvement in the diagnosis and management of six high-risk conditions that cause stroke, heart attack and dementia: atrial fibrillation (AF), high blood pressure, high cholesterol, diabetes, non-diabetic hyperglycaemia and chronic kidney disease.

The audit data will support practices and Primary Care Networks (PCNs) to identify gaps, inequalities and opportunities for improvement in clinical care. It will provide the core data to assist General Practices and PCNs to meet the requirements of the PCN Directed Enhanced Service for CVD prevention, (scheduled for April 2021), as well as local improvement schemes.

You can find out more about this audit by clicking here to visit the NHS website:

Find out more about the CVDPREVENT audit (opens new window)

You can find out more about the data that is being collected and what is being done with it by clicking on the link below:

More information about data being collected and what it is used for (opens new window)

There is more information on the link below about how NHS Digital serices use your medical data:

Find out more about how NHS Digital uses your health data (opens new window)

NHS Summary Care Record (SCR)

NHS Summary Care Record (SCR) is an electronic record containing your medication and allergy details that is held on the the central NHS database (known as the Spine). Allowing authorised healthcare staff to have access to this information helps to improve decision making by doctors and other healthcare staff and has prevented mistakes being made when patients are being cared for in an emergency or when their GP practice is closed. Access to your SCR is strictly controlled. The only people who can see the information is the healthcare team currently in charge of your care. You have the right to opt out of the service. Please ask at Reception. Further information is available at Your Health Records