The Privacy Notice
It covers who we are and what we do as a Clinical Commissioning Group (CCG), the legal duty we have under current Data Protection legislation and the General Data Protection Regulations (GDPR) to protect any information we collect, hold and process to prevent any unauthorised access to it.
It provides details on the information we collect and how we use it to better plan and commission health services for the local area. This could include, monitoring of quality and efficiency of services commissioned, statistical analysis of the local populations illnesses and preparing national data submissions for quality and cost.
Everyone working for the NHS is trained to keep information secure and confidential and the NHS Confidentiality Code of Conduct applies to all of our staff, and they are required to protect your information, inform you of how your information will be used, and allow you to decide if and how your information can be shared. Each NHS organisation has a senior person responsible for protecting the confidentiality of patient information and enabling appropriate information sharing. This person is called the Caldicott Guardian.
The GDPR also requires the CCG to appoint a Data Protection Officer (DPO) and specifies the functions of the role as follows:
- information and advice regarding our obligations under the GDPR and other data protection provisions
- Queries and information on data protection staff training and data protection auditing
- Advise on data protection impact assessments (DPIA)
- Advice on seeking prior consultation or breach notification with the Information Commissioners Office (ICO)
The DPO is:
Paul Ellis - Information Governance and Data Protection, Communications & Facilities
(01472) 32 3372
The Privacy Notice highlights those partner organisations who we may share your personal data with (such as but only where there is a valid legal basis to do so. Statistical information may be shared with them for the purpose of improving local services.
Everybody has the right to access their personal record and see, or have a copy, of data we hold that can identify them, with some exceptions. You also have the right to opt-out and withdraw consent to use of your information and if you wish to do this then you need to contact us to discuss the options.
The CCG does not directly provide health care services and therefore does not routinely create or hold any clinical records about any individuals as it does not provide direct care. If you wish to have sight of your own personal health care records you will need to apply to your GP Practice, or the NHS Hospital or NHS organisation which provided your healthcare.
Changes to this Privacy Notice
North East Lincolnshire Clinical Commissioning Group
North East Lincolnshire