We only collect and use your information for the purposes of public health services of NHS England. These purposes include:
- Accounts and records
- Health administration and services
- Information and databank administration
What types of personal data do we handle?
We process personal information to enable us to support the provision of healthcare services to patients.
We also use information to support and monitor the health services commissioned in England to enable the delivery of high quality healthcare. This type of information will usually be provided to NHS England in an aggregate or anonymised form, so that we cannot identify an individual.
The types of personal information we use include:
- personal details such as names, addresses, telephone, NHS numbers
- family details for example next of kin details
- education, training, mostly frequently of clinicians such as GPs
- employment details, for example as to what occupational category
- services, for example details of the services access or offered by providers
- lifestyle and social circumstances
- details held in the patient's record, where we hold or manage the patient’s record
- responses to surveys, where individuals have responded to surveys about healthcare issues
We also process sensitive classes of information that may include:
- racial and ethnic origin
- religious or similar beliefs
In terms of patient information, information may include:
- physical or mental health details
- sexual life
How will we use information about you?
Your information is used to run and improve the NHS in England. It may be used to:
- Check and report on how effective NHS England and the services it commissions has been
- Investigate complaints, legal claims or important incidents
- Make sure services are planned to meet patients' needs in the future
- To improve the efficiency of healthcare services, by sharing information with other organisations for a specific, justified purpose and approved by Sonar Informatics' Caldicott Guardian.
Whenever possible all information that identifies you will be removed.
Sharing your information
There are a number of reasons why we share information. This can be due to:
- Our obligations to comply with current legislation
- Our duty to comply with our NHS Commissioners
- You have consented to disclosure
We will only retain information for as long as necessary. Records are maintained in line with the NHS England retention schedule which determines the length of time records should be kept.
Security of your information
We take our duty to protect your personal information and confidentiality seriously. We are committed to taking all reasonable measures to ensure the confidentiality and security of personal data for which we are responsible.
We have appointed a "Senior Information Risk Owner" (SIRO) who is accountable for the management of all information assets and any associated risks and incidents, and a "Caldicott Guardian" who is responsible for the management of patient information and patient confidentiality.