Data Protection

A Caldicott Guardian is a senior role for an organisation which processes health and social care personal data. They make sure that the personal information about those who use the organisation’s services is used legally, ethically and appropriately, and that confidentiality is maintained. Caldicott Guardians should be able to provide leadership and informed guidance on complex matters involving confidentiality and information sharing. –  Caldicott Guardian role — UKCGC

In most GP surgeries, the Caldicott Guardian is a senior clinician—often a partner in the practice—who has the authority and experience to make complex decisions about data use. For example, at The Acorn Group Practice, the Caldicott Guardian is Dr Barbara Christie – the senior partner.

All GP practices in England are legally required to share data with NHS Digital under the Health and Social Care Act 2012 unless you tell us not to by ‘opting out’. More information about this requirement is contained in the data provision notice issued by NHS Digital to GP practices.

🛡️ Your Health Data and the National Data Opt-Out

What is the National Data Opt-Out?

The NHS uses health and care information to improve services, plan better care, and support vital research. Sometimes, this means using confidential patient information beyond your individual treatment.

The National Data Opt-Out allows you to choose whether your confidential information is used for research and planning.

What does it mean for you?

• Your care is not affected—your data will still be used to support your treatment.
• You can opt out of your data being used for anything beyond your direct care.
• You can change your choice at any time.

What kind of data is used?

• Information such as your NHS number, date of birth, and details about your health or care.
• It’s used to help the NHS:

• Understand health trends
• Improve services
• Support research into new treatments

Your data is never sold, and strict rules protect your privacy.

Who can opt out?

• Anyone aged 13 or over with an NHS number.
• You can opt out online, by phone, or by post.

INR Star – Patient data sharing:

Some of our patients take the medication Warfarin as a blood thinner. These patients need to attend our dedicated clinic to monitor the use of this medicine. We call this clinic the INR clinic. In order to offer the best advice to these patients, we use a third party software called INR STAR. This software is being migrated to a cloud based system which will require the sharing of some of your data digitally. This is notice is specific to our INR clinic patients only and not the general practice population.

Under General Data Protection Regulations (known as GDPR) we are required to post notification of the sharing of your data with INR STAR. Details of how INR STAR use this data can be found by clicking Here