GDPR/Privacy Notice

Rowans Surgery Privacy Statement

In line with the General Data Protection Regulations the surgery has reviewed its policies in relation to the safety and security of information we hold for staff and patients. Our Privacy Statement outlines the information we hold, why we record it and how it’s stored. It also includes information on your rights to access your information.

Access to Medical Records

You can now view your basic medical summary online through Patient Access Online Services. Once registered you will have access to your list of recent medications, any adverse reactions and allergies you may have. If you are already registered, you can log with Online Registration Form.

Confidentiality Policy

The practice complies with the Data Protection Law.

Confidentiality is a cornerstone of health care and is central to the work of everyone working in general practice. All information about patients is confidential: from the most sensitive diagnosis, to the fact of having visited the surgery or being registered at the Practice.

The duty of confidentiality owed to a person under 16 is as great as the duty owed to any other person..

All patients can expect that their personal information will not be disclosed without their permission except in the most exceptional of circumstances, when somebody is at grave risk of serious harm.

Responsibilities of Practice Staff

All health professionals must follow their professional codes of practice and the law. This means that they must make every effort to protect confidentiality. It also means that no identifiable information about a patient is passed to anyone or any agency without the express permission of that patient, except when this is essential for providing care or is necessary to protect somebody’s health, safety or well-being.

All health professionals are individually accountable for their own actions. They should also work together as a team to ensure that standards of confidentiality are upheld, and that improper disclosures are avoided.

Additionally, the GP as an employer

Is responsible for ensuring that everybody employed by the Practice understands the need for, and maintains, confidentiality.

Has overall responsibility for ensuring that systems and mechanisms to protect confidentiality are in place.

Has vicarious liability for the actions of those working in the Practice – the health professionals and the non-clinical staff.

Standards of confidentiality apply to all health professionals, administrative and ancillary staff – including receptionists, secretaries, practice managers, cleaners and maintenance staff who are bound by contracts of employment to maintain confidentiality – and also to students or others observing practice. They must not reveal, to anybody outside the Practice, personal information they learn in the course of their work, or due to their presence in the surgery, without the patient’s consent. Nor will they discuss with colleagues any aspect of a patient’s attendance at the surgery in a way that might allow identification of the patient, unless to do so is necessary for that patient’s care.

If disclosure is necessary

If a patient or another person is at grave risk of serious harm which disclosure to an appropriate person would prevent, the relevant health professional will counsel the patient about the benefits of disclosure. If the patient refuses to allow disclosure, the health professional can take advice from a professional, regulatory or defence body, in order to decide whether a disclosure without consent is justified to protect the patient or another person.

Closed Circuit Television with Audio Recording (CCTV)

CCTV is installed at the Practice premises for the purposes of staff, patient and premises security.

Cameras are located at various places on the premises (but not in consulting rooms), and images from the cameras are recorded. Where recordings are retained for the purposes of security of staff, patients and premises, these will be retained in secure storage and access controlled. Recordings which are not required for the purposes of security of staff, patients and premises, will not be retained for longer than is necessary.