Patient Confidentiality And Data Protection
All patient information is considered to be confidential and we comply fully with the Data Protection Act. All employees have access to this information in relation to their role and have signed a confidentiality agreement. Information may be shared, in confidence, with other NHS organisations in the interests of patient care.
The Organisation’s Responsibilities
The organisation will ensure that employees fully understand all their responsibilities with regard to confidential data. The employees will sign a written statement of the responsibilities they are undertaking towards the security of the data.
The organisation will also ensure that arrangements are in place for the confidential disposal of any paper waste generated at work or the employees’ home.
The organisation will monitor and record when it is passing ownership of data to an individual (e.g. for project work or, research and development) and this will be individually and specifically authorised by the Caldicott Guardian. The individual may then need to be separately registered under the Data Protection Act 1998. The practice will otherwise fully comply with all aspects of data security as required under the Act.
The organisation will strictly apply the rules of confidentiality and in general will not release patient information to a third party without proper valid and informed consent, unless this is within the statutory exempted categories such as in the public interest, in which case the release of the information and the reasons for it will be individually and specifically documented and authorised by the responsible clinician.