Home Menu

GP Connect and Summary Care Record Additional Information beyond COPI

The temporary changes made to GP Connect and Summary Care Record Additional Information in response to the COVID-19 pandemic will continue in place beyond the end of the Control of Patient Information (COPI) Notice.

Please remove all mentions of COPI from your privacy or transparency notices for these services after 30 June 2022, when COPI expires.

The following paragraphs have been written to be included in an organisation’s privacy notice, should you wish to use it.

NoteWhen using the paragraph, it may need to be edited to include the services that reflect those available locally, although the record will be available wherever the patient presents for direct care within England provided the appropriate consent is in place.

GP Connect

End user organisation privacy notice statement

We use a facility called GP Connect to support your direct care. GP Connect makes patient

information available to all appropriate clinicians when and where they need it, to support direct patients care, leading to improvements in both care and outcomes.

GP Connect is not used for any purpose other than direct care.

Authorised Clinicians such as GPs, NHS 111 Clinicians, Care Home Nurses (if you are in a Care Home), Secondary Care Trusts, Social Care Clinicians are able to access the GP records of the patients they are treating via a secure NHS Digital service called GP connect.

The NHS 111 service (and other services determined locally e.g. Other GP practices in a Primary Care Network) will be able to book appointments for patients at GP practices and other local services.

Legal basis for sharing this data

In order for your Personal Data to be shared or processed, an appropriate “legal basis” needs to be in place and recorded. The legal bases for direct care via GP Connect is the same as the legal bases for the care you would receive from your own GP, or another healthcare provider:

  • for the processing of personal data: Article 6.1 (e) of the UK GDPR: “processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller”.
  • for the processing of “Special Category Data” (which includes your medical information): Article 9.2 (h) of the UK GDPR:  “processing is necessary for the purposes of preventive or occupational medicine, for the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services”.

Your rights

Because the legal bases used for your care using GP Connect are the same as used in other direct care situations, the legal rights you have over this data under UK GDPR will also be the same- these are listed elsewhere in our privacy notice.

SCR

The following paragraph regarding the changes to SCR has been written to be included in an organisation’s privacy notice, within any existing section regarding SCR, should they wish to use it.

End user organisation privacy notice statement

During the height of the pandemic changes were made to the Summary Care Record (SCR) to make additional patient information available to all appropriate clinicians when and where they needed it, to support direct patients care, leading to improvements in both care and outcomes.

These changes to the SCR will remain in place, unless you decide otherwise.

Regardless of your past decisions about your Summary Care Record preferences, you will still have the same options that you currently have in place to opt out of having a Summary Care Record, including the opportunity to opt-back in to having a Summary Care Record or opt back in to allow sharing of Additional Information.

You can exercise these choices by doing the following:

  1. Choose to have a Summary Care Record with all information shared. This means that any authorised, registered and regulated health and care professionals will be able to see a detailed Summary Care Record, including Core and Additional Information, if they need to provide you with direct care.
  2. Choose to have a Summary Care Record with Core information only. This means that any authorised, registered and regulated health and care professionals will be able to see limited information about allergies and medications in your Summary Care Record if they need to provide you with direct care.
  3. Choose to opt-out of having a Summary Care Record altogether. This means that you do not want any information shared with other authorised, registered and regulated health and care professionals involved in your direct care. You will not be able to change this preference at the time if you require direct care away from your GP practice. This means that no authorised, registered and regulated health and care professionals will be able to see information held in your GP records if they need to provide you with direct care, including in an emergency.

To make these changes, you should inform your GP practice or complete this form and return it to your GP practice.

Legal basis for sharing this data

In order for your Personal Data to be shared or processed, an appropriate 'legal basis' needs to be in place and recorded. The legal bases for direct care via SCR is the same as the legal bases for the care you would receive from your own GP, or another healthcare provider:

  • for the processing of personal data: Article 6.1 (e) of the UK GDPR: 'processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller'.
  • for the processing of 'Special Category Data' (which includes your medical information): Article 9.2 (h) of the UK GDPR:  'processing is necessary for the purposes of preventive or occupational medicine, for the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services'.

Your rights

Because the legal bases used for your care via SCR are the same as used in other direct care situations, the legal rights you have over this data under UK GDPR will also be the same- these are listed elsewhere in our privacy notice.

Related guidance...

National data sharing GP Connect and Summary Care Record Additional Information

National data sharing GP Connect and Summary Care Record Additional Information, COPI, Data, Protection, Sharing Background As a part...

GDPR - General Data Protection Regulation 

The GDPR is a regulation that will come into force from 25th May 2018. Its intention is to strengthen data protection for individuals...

Data Provision Notice (DPN) for GP Data for planning and research (GPDPR)

Data Provision Notice DPN for GP Data for planning and research GPDPR NHS Digital opt out Data Provision Notice (DPN) for GP Data for...

identification and management of patients with frailty

As part of the 2017/18 contract agreement the Avoiding Unplanned Admissions DES was ended. There will now be a contractual requirement...

Privacy Notice

Lincolnshire LMC ltd. Commerce House, Carlton Boulevard, Outer Circle Road, Lincoln, LN2 4WJ By virtue of our size, the data we hold...

NHS Digital - GP Workload Collection

This data collection will enable the NHS to better articulate general practice workload, understand appointment activity and utilisation...

Patient access to their GP-held records (TPP and EMIS systems)

Patient access to their GP-held records (TPP and EMIS systems), Online, Internet, Web, Medical Records General practices were previously...

Access to medical records for young people

Since the advent of The Data Protection Act 2018 and GDPR the LMC has received a number of queries regarding access to medical records...

CQC – New monitoring approach for GP practices

CQC – New monitoring approach for GP practices The Care Quality Commission (CQC) are moving on from their transitional monitoring...

Cancard Newsletter Article

Cancard Newsletter Article Some concerns have been raised by practices regarding the 'Cancard' website and its proposed 'GP endorsed'...