The National Data Opt-Out and Privacy Notices
Supplementary Privacy Notice for COVID-19 Patients ** please click to read
The link to opt out of the National Data Collections is National Data Opt Out Link
The national data opt-out is a new service that allows people to opt out of their confidential patient information being used for research and planning.
The national data opt-out is introduced on 25 May 2018, providing a facility for individuals to opt-out from the use of their data for research or planning purposes. This is provided in line with the recommendations of the National Data Guardian in her Review of Data Security, Consent and Opt-Outs. The service will initially be in beta, while we ensure the service design is optimal.
Individual preferences will be collected from 25 May and by 2020 all health and care organisations are required to have applied these preferences in all research and planning situations in which confidential patient information is used. NHS Digital will apply these preferences with immediate effect.
The national data opt-out will replace the previous ‘type 2’ opt-out, which required NHS Digital to refrain from sharing a patient’s confidential patient information for purposes beyond their direct care. Any person with an existing type 2 opt-out will have it automatically converted to a national data opt-out from 25 May 2018 and will shortly receive a letter giving them more information and a leaflet explaining the new national data opt-out. We will continue to collect and convert type 2 opt-outs during the beta phase.
The national data opt-out choice can be viewed or changed at any time by using the online service at www.nhs.uk/your-nhs-data-matters.
Fact sheet below
The National Data Opt Out (NDOO)
NHS Digital has launched the National Data Opt Out on 25th May, to coincide with the EU GDPR. www.nhs.uk/your-nhs-data-matters
What is the National Data Opt Out (NDOO)?
The NDOO is a mechanism by which individuals in England can control, to a limited degree, certain aspects of their confidential medical information and, in particular, what NHS Digital can do with it once in their possession.
The NDOO only applies to confidential information, that is medical information that can identify you, for example by containing your name, DOB, address, NHS number etc.
And the NDOO only applies to uses of your confidential medical information for secondary purposes, that is unrelated to, and beyond, the direct medical care that GP surgeries and other healthcare organisations provide you with when you are unwell, or to keep you well.
Secondary purposes include healthcare planning, audit, population analytics, “risk stratification”, research, “commissioning”,commercial and even political uses.
The NDOO is not limited to electronic data and so includes paper records. It simply replaces the Type 2 (9Nu4) opt-out that has been in force for some years, and which you were able to express via your GP surgery.
It is, therefore, nothing new.
If I set, or keep, my NDOO status at “do not share”, what will this mean?
- Confidential medical information obtained by NHS Digital from GP surgeries, hospital trusts, mental health providers and social care, will not be released/disseminated/sold by them in a format that can identify you.
- In due course, the NDOO will prohibit certain data extractions from your GP record, where this involves confidential medical information, sand where your permission or consent has not been sought before your data was released (so-called section 251 approval).
- The NDOO will, eventually, prevent confidential medical information leaving the Cancer Registry, certain other disease registries, the Clinical Practice Research Datalink (CPRD); and
- By 2020, hospitals and other healthcare providers.
What will the NDOO not do?
- The NDOO will in no way affect the sharing of information for the purposes of an individual’s care and treatment, e.g. where information is shared between a GP surgery and a hospital.
- It will not stop your GP using the Electronic Referral Service (eRS), the Electronic Prescription Service (EPS), or GP2GP transfers of medical records.
- The NDOO will in no way affect the National Summary Care Record (SCR).
- You can opt-out of the SCR via your GP surgery.
- The NDOO will in no way affect any local shared care record project or scheme, such as the Hampshire Health Record, the Great North care Record, the Bolton Care Record etc. (except if such schemes additionally process your uploaded information for secondary purposes).
- You can opt-out of your local shared care record scheme via your GP surgery.
- The NDOO will in no way affect situations where your GP surgery, or other healthcare organisation, is legally required to share your information (such as a court order or when mandated under section 259 of the Health and Social Care Act – but see later).
- The NDOO will in no way affect you being invited, when appropriate, for any of the National Screening Programmes, such as cervical/breast/bowel/abdominal aortic aneurysm/diabetic eye screening.
- You can opt-out of these separately, if you wish.
- The NDOO will in no way affect situations where your GP surgery, or any other healthcare organisation, shares data in an anonymised or aggregate (numbers only) format, in other words where that data cannot identify an individual.
- The NDOO will not stop:
What about Research?
The NDOO will in no way prevent you from taking part in accredited medical research, at your GP surgery/local hospital/other health organisation, where you have given your explicit consent to be involved (i.e. you have been asked first).
The NDOO will in no way prevent you from:
- Giving blood
- Joining the NHS Organ Donor Register
- Signing up to the Anthony Nolan register to donate your blood stem cells or bone marrow
- Donating your DNA for medical research
- Joining the 100K Genomes project
- Taking part in clinical drug trials
- Donating your body to medical science after your death
- Giving money (in a tax-efficient way) to any medical charity of your choosing
Will the NDOO stop my confidential GP information being uploaded to NHS Digital in the first place?
NHS Digital does not rely upon section 251 approval (any more) for data gathering, preferring instead to make such data collections compulsory under section 259 of the Health and Social Care Act.
However, the existing secondary uses, Type 1 (9Nu0), opt-out that many people have in force on their GP record will prohibit data (confidential and, in some cases, de-identified) from being extracted and uploaded from your GP record to NHS Digital.
In addition, the Type 1 opt-out will also prohibit section 251 approved data extractions, for example for “risk stratification”, as well as the mandatory section 259 extractions.
So how do I maximally limit secondary uses of my medical records, beyond my direct medical care?
- Set your NDOO status to “do not share”, see later for how to do this. Or make sure that you have a Type 2 objection in force on your GP record.
- Make sure you have a secondary uses, Type 1 (9Nu0) objection in force on your GP record – do this via your GP surgery
- Consider contacting your local hospital trust, mental health provider, or social care organisation (local council) that you use (or have used) and express “the right to object” to the dissemination of confidential information about you to NHS Digital, where it is not legally mandated.
For example, you have the right to object where your data might be processed in this way and the organisation concerned is relying on Article 6(1)(e) – Official Authority – as the legal basis under the GDPR.
What about preventing NHS Digital releasing, disseminating, or selling anonymised and pseudonymised data about me?
You cannot – directly. And you have no control over why they are doing this, for what purpose(s), and to which organisation they are giving or selling your information to.
But you can limit how much information NHS Digital gathers about you from healthcare organisations, by maximally limiting the secondary uses of your medical records, as described above.
So how do I set, check, or update my National Data Opt Out status?
If you had previously requested a Type 2 objection to be in force, via your GP surgery, then this will have automatically have set your NDOO status to “do not share”. You will receive a letter from NHS Digital, confirming this, in due course. Any children aged 13 years or over will receive their own letter as well.
It is not possible to directly view, set or change your NDOO status at your GP surgery, although you may have set it indirectly by expressing a Type 2 objection to your GP surgery – but only until October 2018.
This will automatically set your NDOO status to “do not share”.
Anyone aged 13 years or over can set their NDOO status via an online service at www.nhs.uk/your-nhs-data-matters
Anyone aged 12 years or younger, or if you are acting on behalf of another individual (i.e. as a proxy, perhaps with lasting power of attorney authority) cannot do this online but will have to ring 0300 330 9412 instead (or via other so-called “non-digital” methods).
More information about NHS data sharing, opting-out and objecting, and the NHS databases can be found at www.nhsdatasharing.info
PRIVACY STATEMENT FOR ONLINE CONSULTATIONS
By law, all organisations that use personal information (personal data) must provide a clear description of how it is used and provide any related information to ensure the processing is carried out lawfully and fairly (this will be in addition to your Practice’s Privacy Notice, which should be available to patients, e.g. practice website or from reception when requested).
The additional information below only applies to the use of your information when you use our online consultation service.
***USING NHS APP FOR CONSULTATIONS***
Our Online Consultation Service
Middle Chare Medical Group have engaged a specialised online consultation supplier which has been approved to NHS England technical standards and has gone through stringent scrutiny and achieved all necessary requirements to comply with the Online Consultations. The contracts with the supplier ensure that we remain the Data Controller of your personal information when you use such services and that your information is used Only for the purposes of the online consultation.
The name of the organisation we have engaged to provide this service is displayed in the NHS App. The NHS App is provided by NHS Digital and provides health services such as viewing your medical record and can be downloaded from the App Store and Google Play.
NHS Digital connects the NHS App to our online consultation service so that the service can operate within the NHS App. NHS Digital does this on our behalf. Both NHS Digital and our online consultation supplier are our processors.
***PRACTICE CARRYING OUT OWN CONSULTATIONS***
Our Online Consultation Service
During the course of this online consultation with a clinician from Middle Chare Medical Group information will be shared between myself (the clinician) and you (the patient).
All information will be held in confidence and its use is covered by the Data Protection Act 2018 as well as the NHS Care Record Guarantee, which governs how the NHS can use your data.
Information will only be used by and shared with those who have a legitimate need to access the information to provide health care. The only information to be recorded and captured is the medical outcome of this discussion, which will be included on your patient record.
NHS Digital have said that it is fine to use video conferencing tools such as Accurx, Skype, WhatsApp, Facetime as well as commercial products designed specifically for this purpose.