The categories of information we collect, process, hold and share include:
- personal information (such as name and address, date of birth)
- characteristics (such as ethnicity and language)
- records about your health
- details of your appointments, clinic visits, etc.
- information from other health professionals
Why we collect and use this information
The information we collect is to ensure you are provided with the best possible care. We will ensure that your record is kept securely, is up to date and used appropriately.
The information we collect from you is held on a medical record system called SystmOne. Other health and social care organisations, for example GPs and community services, who also use this system may have the ability to view your record when they are providing care to you.
We will also use your information to check and review the quality of the care we provide. This helps us to improve our services to you.
The lawful basis on which we use this information
We must have a legal justification for using your information and we will usually rely on one of the following lawful bases:
- processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
- processing is necessary for compliance with a legal obligation to which the controller is subject
Healthcare staff will also respect and comply with their obligations under the common law duty of confidence.
Storing this information
SystmOne records will be kept in line with government guidance (Code of Practice for Health and Social Care) and Suffolk County Council’s Records Retention Scheme.
Who we share your information with
We routinely share information with:
- healthcare professionals who are involved with your care
- GP who is caring for you
- NHS Digital (anonymised data)
- Care Quality Commission
- Public Health England (anonymised data)
Why we share this information
We share data that Children's Services have gathered in line with our duties to:
- comply with a public task or legal obligation
- use for the prevention or detection of a crime
- allow a partner organisation to act on behalf of Children's Services
- safeguard individuals
Data collection requirements
You can find out more about the data collection requirements placed on us by the Department of Health and Social Care: Records management: code of practice for health and social care.
Your rights
You have several rights regarding your personal data. Find more information about your rights on our privacy and data protection page.
If you have a concern about the way we are collecting or using your personal data, we request that you raise your concern with us in the first instance.
You can contact us through our health visiting page.
Alternatively, you can contact the Information Commissioner’s Office.
