Your Health Records
Health records exist for every patient registered with a doctor or for anyone who has had treatment at a hospital. This can include details such as any conditions or illnesses you live with, your blood type, the vaccinations you’ve had or any medication you are taking. These records are kept locally by your doctor, the hospital, clinic or dentist you visited.
Read our leaflet "Your Health Care Records: A guide for patients". This is a guide to the information we hold about you and how we access this information. It covers your rights, what you need to do and who to contact if you have any questions.
Your Information - How it is Used
The Fair Processing Notice reminds you of your rights under the Data Protection Act 1998 and tells you how NHS Great Yarmouth and Waveney Clinical Commissioning Group processes information about you in accordance with the Act.
Your Information - What You Need to Know
Great Yarmouth and Waveney CCG is a local membership organisation led by family doctors that is responsible for planning and paying for healthcare services. We do not provide healthcare like a GP Practice or hospital. Our role is to make sure the appropriate NHS care is in place for the people of Great Yarmouth and Waveney, within the budget we have.
Why we collect Information about you
In carrying out some of these roles we may collect information about you which helps us respond to your queries or secure specialist services. We may keep your information in written form and/or on a computer.
The records may include basic details about you, such as your name and address. They may also contain more sensitive information about your health and also information such as outcomes of needs assessments.
How your records are used to help the NHS
Your information may be used to help assess the needs of the general population and make informed decisions about the provision of future services. Information can also be used to conduct health research and development, monitor NHS performance, to help the NHS plan for the future and to investigate complaints in respect of the services we commission.
We will not publish any information that identifies you, or routinely disclose any information about you without your express permission. At any time you have the right to refuse/ withdraw consent to information sharing. The possible consequences will be fully explained to you, such as potential delays in receiving care.
There may be circumstances where we are bound to share information about you owing to a legal obligation, such as for the benefit of public health in the event of a pandemic and in accordance with the Data Protection Act to protect the vital interests of the data subject.
Anyone who receives information from us is also under a legal duty to keep this information confidential.
The CCG is committed to protecting your information but also in complying with its duty to share under Caldicott guidelines and the Health & Social Care Safety and Quality Act 2015. This is only where it is involved in any direct care with patients to ensure their safety and only with those that have a legitimate relationship with you. If you want to learn more following this link. http://systems.hscic.gov.uk/infogov/iga/resources/faqs.pdf
We will use limited information about individual patients when validating invoices received for your healthcare, to ensure that the invoice is accurate and genuine. This will be performed in a secure environment and will be carried out by a limited number of authorised staff. These activities and all identifiable information will remain with the Controlled Environment for Finance (CEfF) approved by NHS England.
National Fraud Initiative (2014/15)
NHS Great Yarmouth and Waveney CCG is required by law to protect the public funds it administers. It may share information provided to it with other bodies responsible for auditing or administering public funds, in order to prevent and detect fraud.
The Audit Commission appoints the auditor to audit the accounts of this authority. It is also responsible for carrying out data matching exercises.
Data matching involves comparing computer records held by one body against other computer records held by the same or another body to see how far they match. This is usually personal information. Computerised data matching allows potentially fraudulent claims and payments to be identified. Where a match is found it may indicate that there is an inconsistency which requires further investigation. No assumption can be made as to whether there is fraud, error or other explanation until an investigation is carried out.
The Audit Commission currently requires us to participate in a data matching exercise to assist in the prevention and detection of fraud. We are required to provide particular sets of data to the Audit Commission for matching for each exercise, and these are set out in the Audit Commission's guidance, which can be found at www.audit-commission.gov.uk/nfi.
The use of data by the Audit Commission in a data matching exercise is carried out with statutory authority under its power in Part 2A of the Audit Commission Act 1998. It does not require the consent of the individuals concerned under the Data Protection Act 1998.
Data matching by the Audit Commission is subject to a Code of Practice. This may be found at http://www.audit-commission.gov.uk/national-fraud-initiative/code-of-data-matching-practice/
For further information on the Audit Commission's legal powers and the reasons why it matches particular information, see http://www.audit-commission.gov.uk/national-fraud-initiative/fair-processing-notice-full-text/. For further information on data matching at this authority please contact:
Information & Performance Team
NHS Great Yarmouth & Waveney,
Common Lane North,
Suffolk NR34 9BN
Security of Information
Everyone working for the NHS is subject to the Common Law Duty of Confidence. The information we do hold about you, whether in paper or electronic form, is therefore protected from unauthorised access. Under the NHS Confidentiality Code of Conduct, all our staff are also required to protect your information, inform you of how your information will be used, and allow you to decide if and how your information can be shared.
Access to your Information
Under the Data Protection Act 1998 you have the general right to see or be given a copy of personal data held about you. This right can be exercised via submission of a Subject Access Request (SAR) to the NHS Great Yarmouth and Waveney CCG.
In accordance with legislation a £10.00 access fee will be chargeable for tracing and retrieving electronic and manual records; subsequent extra charges may be made for copying non-computer held records - up to a maximum of £50.
Complaints / Appeals
In the event that you believe the NHS Great Yarmouth and Waveney CCG has not complied with the Data Protection Act, either in responding to a Subject Access Request or in the way we have processed your personal information, you can raise your complaint directly with NHSGYW CCG Data Protection Officer contactable via the contact usdetails on the CCG website.
If you wish to raise a complaint or make an appeal to an independent body, you can contact the Information Commissioner's Officeto Report a Concern.
If you would like to know more about how NHS Great Yarmouth and Waveney CCG uses your information please use the Contact Us section of our website.
Further information can also be obtained from the following links:
There is another type of health record holding information about you called a Summary Care Record (SCR) and holds information about you that may be needed in an emergency. This may be any allergies you suffer from, any bad reactions to medication or any prescribed drugs you are taking. If you needed urgent care, your doctor’s records may not be available so SCR will help paramedics, doctors or nurses find out life-saving information about you.
This new electronic record is held securely by the NHS and only available to staff in an emergency. Only those who are registered with a doctor or over the age of 15 will have this record.
You can choose not to have a SCR created about you. To opt out download and complete an opt out form and return it to your GP practice.
For more information go to the NHS Care Records website.
The Summary Care Records patient information leaflet is also available in other languages, easy read and large print: