Your information and How We Use It
What is Information Governance / Data Security
Information Governance (IG) is about how we look after your information. It ensures necessary safeguards for, and appropriate use of, patient and other personal information to ensure that we handle it carefully and confidentially.
The Legal Basis for NHUC Processing your Information
North Hampshire Urgent Care processes your information under the legal basis of this being in the Public Interest which allows personal data to be processed on the basis that such processing is necessary for the performance of tasks carried out by private organisation acting in the public interest.
Your right to confidentiality and privacy
Any persons working for, or on behalf of North Hampshire Urgent Care are required to comply with the requirements of the General Data Protection Regulations 2016 and the NHS Confidentiality Code of Practice.
Your information is looked after by the following key roles within the organisation
Senior Information Risk Owner – This role is the responsibility of the NHUC Chief Executive and:
- Is accountable
- Fosters a culture for protecting and using data
- Provides a focal point for managing information risks and incidents
- Is concerned with the management of all information assets
The Caldicott Guardian – This role is the responsibility of the Medical Director and:
- Is advisory
- Is the conscious of the organisation
- Provides a focal point for patient confidentiality & information sharing issues
- Is concerned with the management of patient information
We have a legal and ethical duty to keep your health records confidential. However, very occasionally we are required by law to pass on certain information about you without your consent. For example, this could be in the event of certain infectious diseases, in response to a court order or to help the police investigate a very serious crime. We will also share information with other agencies where there is danger of harm to a child or a vulnerable adult.
Please use the contact details at the end of this privacy notice if you wish to contact either of the persons undertaking these roles for North Hampshire Urgent Care.
Your health records
Health records (or medical records) are a record of the health care you have received.
They hold general information (for example your name, address and next of kin) and information and reports about your health, including details of your illnesses, tests, prescriptions and other treatments.
As often care advice and treatment is provided via telephone these calls are recorded and retained for a period of three years, the content of phone calls is summarised by the clinician into our electronic record system, and a record of each contact is automatically forwarded to your own doctor to become part of your permanent health record.
Your doctor or nurse and team of health professionals caring for you keep records about your health and any treatment and care you receive from North Hampshire Urgent Care. The records may also include information from other NHS organisations involved in your care such as details of your initial NHS111 contact.
These records help to ensure that you receive the best possible care. They may be written down or held on a computer.
Our staff are responsible for the accuracy and safekeeping of your health records and you can help us to keep them accurate by informing us of any changes in your circumstances.
How is your information used?
The information in your health record is used primarily to treat you. We will only share your information with other health and social care professionals either with your consent or in your best interests, for example, in an emergency situation.
Examples of who we share your information with:
- Your own Doctor and Practice, this would be automatically shared unless specifically asked to withhold
- If referred onwards to Hospital or Community Service
What else could my information be used for?
Health records are also sometimes used to improve the care provided by North Hampshire Urgent Care and the NHS.
- They can also be used:
- To determine how well a particular service is performing
- To track the spread of, or risk factors for, a particular disease
- In clinical research, to determine whether certain treatments are more effective than others
When health records are used in this way, your personal information is not given to the people who are carrying out the research; only anonymised data is used.
There may be some occasions that require the use of identifiable data and if we want to use your information in this way we will always ask for your consent first. This is generally for research or teaching purposes. You always have a right to say no.
Accessing your Health Records
Patients’ rights to accessing their health records is legally based on the General Data Protection Regulations 2016 (GDPR)
Key Points of GDPR
- Individuals have the right to access their personal data and supplementary information.
- The right of access allows individuals to be aware of and verify the lawfulness of the processing.
Under the GDPR, individuals will have the right to obtain:
- Confirmation that their data is being processed;
- Access to their personal data; and
- Other supplementary information – this largely corresponds to the information that should be provided in a privacy notice
The GDPR clarifies that the reason for allowing individuals to access their personal data is so that they are aware of and can verify the lawfulness of the processing.
Standard subject access requests are not chargeable, however if the request is manifestly unfounded or excessive, particularly if it is repetitive a reasonable fee may be charged. The fee must be based on the administrative time taken to deliver the request.
For more information and to access your health record please contact in writing to
Information Governance Lead
North Hampshire Urgent Care
The Meads Business Centre
19 Kingsmead
Farnborough
GU14 7SR
Or email
We are committed to responding as soon as possible but certainly within 30 days.