Translate

Legal Requirements

How your information is shared so that this practice can meet legal requirements

The law requires Budleigh Salterton Medical Centre to share information from your medical records in certain circumstances.

Information is shared so that the NHS or Public Health England can, for example:

Plan and manage health services.
Monitor and improve the quality and safety of healthcare.
Protect public health.
Prevent the spread of infectious diseases.
Comply with statutory and regulatory requirements.

We will share information with NHS England, the Care Quality Commission (CQC), the UK Health Security Agency (UKHSA), and other organisations where the law requires us to do so. We must also share information where required by a court order.

NHS England

NHS England has legal responsibilities for collecting and analysing information relating to health and care services in England.
Information may be collected from GP practices and other NHS organisations where there is a legal basis to do so.
This information helps support commissioning, service planning, public health activities, service evaluation, and healthcare improvement.
Where required by law, this practice will provide information to NHS England in accordance with relevant legislation and national directions.

Learn more about NHS England

Care Quality Commission (CQC)

The Care Quality Commission (CQC) regulates health and social care services in England.
The law requires healthcare providers to supply information to the CQC where necessary for its regulatory functions.
This may include information relating to patient safety incidents, safeguarding concerns, and service quality.

Learn more about the CQC

Public Health

The law requires healthcare providers to share information for public health purposes.
This may include the reporting of notifiable diseases, managing outbreaks of infectious disease, and protecting the health of the population.
Information may be shared with the UK Health Security Agency (UKHSA), local authority public health teams, or other authorised public health bodies where required by law.

Find more information about Public Health England and disease reporting

Rights to Object and the National Data Opt-out

There are limited circumstances in which individuals can object to information being used or shared where there is a legal requirement to do so.

The NHS operates a National Data Opt-out which allows patients to choose whether their confidential patient information is used for purposes beyond their individual care and treatment where applicable.

We are required by law to provide you with the following information about how we handle your information and our legal obligations to share data.

Find out more about the National Data Opt-out or to record your preference

Where information must be disclosed by law, such as for public health reporting, CQC regulatory purposes, safeguarding concerns, or a court order, there is generally no right to object to the disclosure.

Data Controller contact details

Dr Lucy Craven is the Caldicott Lead
Budleigh Salterton Medical Centre
1 The Lawn
Budleigh Salterton
Devon
EX9 6LS

Data Protection Officer contact details

DELT Email

Purpose of the processing

Compliance with legal obligations or court order.

Lawful basis for processing

The following sections of the GDPR allow us to contact patients for screening.

Article 6(1)(c) – ‘processing is necessary for compliance with a legal obligation to which the controller is subject…’
Article 9(2)(h) – ‘processing is necessary for the purpose of preventative…medicine…the provision of health or social care or treatment or the management of health or social care systems and services...’

Recipient or categories of recipients of the processed data

The data may be shared with NHS England where required by law.
The data may be shared with the Care Quality Commission (CQC) for regulatory purposes where required by law.
The data may be shared with the UK Health Security Agency (UKHSA) and local public health teams where legislation requires this.
The data may be disclosed to a court where ordered by law.

Rights to object and the national data opt-out

There are limited circumstances in which you may object to your information being used or shared. However, where legislation requires information to be disclosed, there is generally no right to object.

The NHS operates a National Data Opt-out, which allows patients to choose whether their confidential patient information is used for research and planning purposes beyond their individual care and treatment where applicable. To find out more or to register your choice, visit: Your NHS Data Matters If you are happy with the use of your information in this way, you do not need to do anything. You can change your preference at any time.

Public health

Information may be shared with the UK Health Security Agency (UKHSA) or local public health teams where legislation requires this for the protection of public health, including the monitoring and management of infectious diseases. Where this applies, there is generally no right to object.

Care Quality Commission

Information may be disclosed to the Care Quality Commission (CQC) where required for its regulatory functions. In these circumstances there is generally no right to object.

Court order

Information must be disclosed where a valid court order requires it. In these circumstances there is generally no right to object

Right to access and correct

You have the right to request access to the personal information we hold about you and to request that factual inaccuracies are corrected. Please contact the practice if you believe any information we hold is inaccurate or incomplete.

You do not normally have the right to require accurate information contained within your health record to be deleted. Requests will be considered in accordance with UK data protection legislation, NHS guidance and professional record-keeping obligations.