Menu Home Search

C THE SIGNS PATIENT CONSENT TO DATA UPLOAD

Updated on Tuesday, 21 December 2021, 150 views

C THE SIGNS PATIENT CONSENT TO DATA UPLOAD

The LMC has heard concerns about patient consent to upload data to the C the Signs platform. CCG DPO Mr Kevin Caldwell has reassured us that a DPIA was completed in which consent was not judged the appropriate legal basis for the processing of patient data for this direct care purpose. Under GDPR Article 6(1)(e) – public task & Article 9(2)(h) – management of health and social care apply. Under Common Law, reasonable expectations/implied consent were considered appropriate. This was supported by the amended template privacy notice circulated to practices earlier this year which includes reference to the use of third party digital tools and software by practices to support specialist areas of care. Practices remain the data controllers for C the Signs as data processor in a similar way that practices use EMIS (a third party) to create a record when a patient registers. You wouldn’t seek formal consent from a patient to create the record as it would be within the reasonable expectations of a new patient and implied as part of the registration process. “As long as practices are letting patients know via their privacy notice that they use digital tools to support direct care with assurance that appropriate due diligence has been completed and documented, then my view is it is legitimate to rely on reasonable expectations/implied consent as a basis to process.”

Related guidance...

Somerset LMC Weekly Update Thursday 23rd December 2021

Sent to all Somerset GPs and Practice Managers This and previous updates are available here Merry Christmas & a Happy New...

Privacy Notice

PRIVACY NOTICE FOR SOMERSET LOCAL MEDICAL COMMITTEE, THE SOMERSET GENERAL PRACTICE EDUCATION TRUST & THE SOMERSET LOCAL MEDICAL...

Intelligent General Practice Reporting Tool (iGPR)

The GPC’s IT Subcommittee has received a number of queries from LMCs about the iGPR tool, which allows practices to respond to requests...

Somerset LMC Weekly Update Friday 14th December 2018

Sent to all Somerset GPs, Practice Managers and Lead Nurses This and previous updates are available here A Tale of Two...

Insurance and Other Third Party Reports

Insurance Reports using the Data Protection Act Increasingly , insurance companies have taken to submitting requests for full copies...

Somerset LMC Weekly Update Friday 23rd October 2020

Sent to all Somerset GPs and Practice Managers This and previous updates are available here New advice for patients at high...

Confidentiality

Medical confidentiality is at the bedrock of the Doctor-Patient relationship and it is enshrined in a number of codes, guidelines and...

Information sharing with Separated Parents

Some important information for you to note when you are asked by separated parents for information about their child: Parents may have...

Somerset LMC Weekly Update Friday 9th July 2021

Sent to all Somerset GPs and Practice Managers This and previous updates are available here LMCs Buying Group Home delivery...

GDPR- Headline Requirements with GPC and NHS Digital guidance

NHS Digital have now published a GDPR guidance note . This guidance is from the national GDPR working group and Information Governance...