GDPR Compliance Notices from people we work with:

We carry out NHS Health Checks at the Crane Surgery, which involves sending some information about the people we check to the Health Authority and an organisation called Health Diagnostics:

2018-01-12 Privacy Impact Assessment for the processing of NHS Health Checks - ANNEX A(3).pdf

 

After they go to the Pharmacy, prescription requests are processed, and the cost of the drugs is reimbursed, by NHS Business Services:

2018-03 NHS Business Services (prescriptions).pdf

 

EMIS provide our computer system, and all our electronic patient records are saved by EMIS onto a server in Leeds. However EMIS are in the process of transferring all data to a third-party hosted cloud-based environment, for the sake of greater interoperability - namely Amazon Web Services (AWS).

2018-04 EMIS Group and the GDPR (General Data Protection Regulation).pdf

2019-07 Data Protection Impact Assessment for Third party processor Emis Health-Draft.docx

2019-07 EMIS Privacy notice Third party processor_draft.docx

 

An organisation called Eclipse accesses the information on our computer system in order to analyse details of blood results and prescribing, and they then produce alerts to warn us if patients' health seems to be at risk because of the medication they are taking:

2018-04-11 Eclipse Information Governance Overview.pdf

 

Box-It is the organisation which takes away and incinerates our confidential waste:

2018-06 Box-it statement of compliance & contract addendum.pdf

 

iGPR is a system which accesses information from our computer system in order to produce medical reports for life insurance companies:

2018-06 iGPR compliance notice.docx

 

NHS England extract anonymised data about Fit Notes issued by us:

2018-08 NHS England re Fit Notes.docx

 

From October 2019 Health Intelligence will be taking over administration of the Diabetic Eye Screening programme (screening for diabetic retinopathy) in the West Kent Area. In order to run this service they will be extracting data about known diabetic patients from our clinical database.

2019-07 Health Intelligence (Diabetic Eye Screening Programme).pdf

 

The Primary Care Network is a network of local practices in the Weald area which have grouped together in order to offer shared services to their patient populations - for example Improved Access, which allows patients to be seen on Saturdays and in the evenings, and physiotherapy assessment, which allows patients with musculoskeletal problems to be assessed by a qualified physiotherapist instead of seeing the GP. For these purposes patient records are shared and made accessible across the Network.

2019-07 Improved Access Data Sharing Agreemt.doc

 

The West Kent Federation (an association of all the practices in West Kent) provides diabetes services for all the practices in the area, and we share information with them for this purpose.

2019-07 West Kent Federation Diabetes Service data sharing agreement Signed.pdf

 

2020 Coronavirus (Covid-19) arrangements: During the 2020 Coronavirus cris there are special arrangements in place for data-sharing across health and social care organisations. You can read about them here:

Covid 19 Privacy Notice (version 2)

 

Kent and Medway Care Record (KMCR): from July 2020 this new system will allow surgeries to meet their statutory obligations to share information with other agencies such as Social Services.

KMCR compliance notice

 

Accurx: This is a system that allows us to send text messages to patients and also to make video calls to them, sharing information (such as their mobile phone numbers, or a record of any text sent) with our clinical computer system.

2020-10-13 Accurx Data Processing Agreement

 

West Kent CCG and iPlato: iPlato is another system that allows text messages to be sent to patients with mobile phones, using the contact details from clinical computer systems. The West Kent CCG (which is our local Health Authority) are using iPlato to send out health information to patients, for example about Covid-19.

https://cranesurgery.org.uk/index.php/download_file/view/73/223

 

Hospice in the Weald: Hospice in the Weald are our local Hospice, based in Pembury, and they help us with patients who are terminally ill and/or suffering from long-term incurable conditions such as dementia. In order to collaborate with them more closely we allow them access to our patient records via EMIS, our clinical computer system.

Hospice in the Weald Data Sharing Agreement