Privacy Notice: Risk Stratification Prevention Care

The records we keep enable us to plan for your care.

Risk stratification for case finding’ is a process for identifying and managing patients who have or may be at risk of health conditions (such as diabetes) or who are most likely to need healthcare services (such as people with frailty).

Risk stratification tools used in the NHS help determine a person’s risk of suffering a particular condition and enable us to focus on preventing ill health before it develops.

Information about you is collected from a number of sources including NHS Trusts, GP Federations and your GP Practice. A risk score is then arrived at through an analysis of your de-identified information.  This can help us identify and offer you additional services to improve your health.

This practice keeps data on you that we apply searches and algorithms to in order to identify from preventive interventions.  This means using only the data we hold or in certain circumstances linking that data to data held elsewhere by other organisations, and usually processed by organisations within or bound by contracts with the NHS.

Despite this we have an overriding responsibility to do what is in your best interests. If we identify you as being at significant risk of having, for example a heart attack or stroke, we are justified in performing that processing in order to provide you with medical care.

1) Controller contact details

The Westwood Surgery
24 Westwood Lane 
Welling 
Kent
DA16 2HE
020 8303 5353

2) Data Protection Officer contact details

GP Data Protection Officer
gpdpo@selondonics.nhs.uk

3) Purpose of the processing

The practice performs computerised searches of some or all of our records to identify individuals who may be at increased risk of certain conditions or diagnoses i.e., Diabetes, heart disease, risk of falling). 

Your records may be amongst those searched. This is often called “risk stratification” or “case finding”.

The results of these searches and assessment may then be shared with other healthcare workers, such as specialist, therapists, technicians etc. The information that is shared is to enable the other healthcare workers to provide the most appropriate advice, investigations, treatments, therapies and or care.

4) Lawful basis for processing

The legal basis for this processing is

Article 6(1)(e); “necessary… in the exercise of official authority vested in the controller’.

And

Article 9(2)(h) ‘necessary for the purposes of preventative or occupational medicine for the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services...”

We will recognise your rights under UK Law collectively known as the “Common Law Duty of Confidentiality”

5) Recipient or categories of recipients of the processed data

The data will be shared for processing with [Practice to insert any Processor] and for subsequent healthcare with [Practice insert ICS / PCO/ frailty service etc]

6) Rights to object

If you do not wish information about you to be included in any risk stratification programmes, please let us know.

You have the right to object to this processing where it might result in a decision being made about you. Contact the Practice using the above details.

You should be aware that this is a right to raise an objection which is not the same as having an absolute right to have your wishes granted in every circumstance.

7) Right to access and correct

You have the right to access copies of the data that is being shared and have any inaccuracies corrected. There is no right to have accurate medical records deleted except when ordered by a court of Law.

8) Retention period

The data will be retained in line with the law and national guidance

9) Right to Complain.

You have the right to complain to the Information Commissioner's Office

Or calling their helpline Tel: 0303 123 1113 (local rate) or 01625 545 745 (national rate)

There are National Offices for Scotland, Northern Ireland and Wales, (see ICO website)