GDPR/ Privacy Notice

Please find below information in regards to GDPR and how we use your information:

The practice Caldicott Guardian is Dr Atkinson and Senior Information Risk Officer (SIRO) is Dr Atkinson.

General Data Protection Regulation (GDPR)

GDPR is similar to the Data Protection Act (DPA) 1998 (which the practice already complies with), but strengthens many of the DPA’s principles. The main changes are:

  • Practices must comply with subject access requests
  • Where we need your consent to process data, this consent must be freely given, specific, informed and unambiguous
  • There are new, special protections for patient data

Our GDPR fair processing notice, with details of our Data Protection Officer, can be found in our waiting areas as well as on our website. Also, various privacy notices for patients are on our website or can be obtained from our Reception desk.

Please contact the practice if you have any queries or require a paper copy of our GDPR notices and documents.

Consent for patients aged 13 to 16 years

Parents/guardians will be asked to obtain consent to access records of patients aged between 13 and under 16. Please be cooperative with our staff when asked to obtain consent for this age group.

Devon and Cornwall Care Record

Health and social care services in Devon and Cornwall have developed a system to share patient data efficiently and quickly and, ultimately, improve the care you receive.

This shared system is called the Devon and Cornwall Care Record.

It’s important that anyone treating you has access to your shared record so they have all the information they need to care for you. This applies to your routine appointments and also in urgent situations such as going to A and E, calling 111 or going to an out of hours appointment.

It’s also quicker for staff to access a shared record than to try to contact other staff by phone or email.

Only authorised health and care staff can access the Devon and Cornwall Care Record and the information they see is carefully checked so that it relates to their job. Also, systems do not share all your data – just data that services have agreed is necessary to include.

For more information about the Devon and Cornwall Care Record, please visit: www.devonandcornwallcarerecord.nhs.uk.

National Institute for Health Research Clinical Research Network

We’re excited to share news of our partnership with seasoned NIHR CRN (National Institute for Health Research Clinical Research Network) experts, seamlessly integrated into our practice team.

In the pursuit of advancing medical research, these professionals, alongside our practice team, may access your patient record for pre-consented activities. This involves identifying potential eligibility for research opportunities and supporting recruitment and follow-up for clinical trials.

This process operates under the lawful bases of Article 6 (public task) and Article 9 (substantial public interest) of the GDPR. Be assured, that your privacy and data security are rigorously safeguarded. This collaboration also supports NIHR and NHS’s pursuit in improving equality to access research.

Any eligible individuals will be contacted by the practice, and their consent will be requested before any further processing takes place.