What do we do or what may we do with your personal information?

Although this is not an exhaustive detailed list, the information below gives key examples of the purposes and rationale of why we deal with your information and what we do with it:

To process your personal information if it relates to a complaint where you have asked for our help or involvement.
When we receive a complaint from a person we make up a file containing the details of the complaint. This normally contains the identity of the complainant and any other individuals involved in the complaint.

We will only use the personal information we collect to process the complaint and to check on the level of service being provided.
We usually have to disclose the complainant’s identity to whoever the complaint is about. This is inevitable where, for example, the accuracy of a person’s record is in dispute.

If a complainant doesn’t want information identifying him or her to be disclosed, we will try to respect that. However, it may not be possible to handle a complaint on an anonymous basis.

We may use patient stories, following upheld complaints, but always anonymously, via our Quality Committee. The patient stories will provide a summary of the concern, service improvements identified and how well the complaints procedure has been applied. Consent will always be sought from the patient and carer or both before we use the story.

Funding Treatment
We will collect and process your personal information where we are required to fund specific treatment for you for a particular condition that is not already covered in our contracts. This may be called an “Individual Funding Request” (IFR).

Continuing Healthcare
We will collect and process your identifiable information where you have asked us to undertake assessments for Continuing Healthcare (a package of care for those with complex medical needs) and commission resulting care packages.

We will collect and process identifiable information where we need to assess and evaluate any safeguarding concerns.

Risk Stratification

Risk stratification is a process for identifying and managing patients who are at high risk of emergency hospital admission.

NHS England encourages CCGs and GPs to use risk stratification tools as part of their local strategies for supporting patients with long-term conditions and to help and prevent avoidable admissions. Knowledge of the risk profile of our population will help the CCG to commission appropriate preventative services and to promote quality improvement in collaboration with our GP practices.

Risk stratification tools use various combinations of historic information about patients, for example, age, gender, diagnoses and patterns of hospital attendance and admission and primary care data collected in GP practice systems. The CCG uses pseudonymised information to understand the local population needs.

If you do not wish information about you to be included in our risk stratification programme, please contact your GP Practice. They can add a code to your records that will stop your information from being used for this purpose. Further information about risk stratification is available from: https://www.england.nhs.uk/ourwork/tsd/ig/risk-stratification/  

Invoice Processing
A small amount of information that could identify you is used within a secure area within the CCG, known as a Controlled Environment for Finance (CEfF), so that the organisations that have provided you with care/treatment are reimbursed correctly.

Where we pay for care we may ask for evidence before paying. In such instances, we may use your personal confidential data to ensure that we are paying the right organisation the right amount for the right service(s) to the right people.

Patient and Public Involvement
If you have asked us to keep you regularly informed and up to date about the work of the CCG or if you are actively involved in our engagement and consultation activities or patient participation groups, we will collect and process personal confidential data which you share with us. Where you submit your details to us for involvement purposes, we will only use your information for this purpose. You can opt out at any time via our contact details on the ‘Contact Us’ page.

To collect NHS data about patients that we are responsible for.

Hospitals and community organisations that provide NHS-funded care must submit certain information to the Health and Social Care Information Centre (HSCIC) about services provided to our patients. This information is generally known as commissioning datasets. The CCG obtains these datasets from the HSCIC and they relate to people registered with GP Practices that are members of the CCG. These datasets are then used in a format that does not directly identify you, for wider NHS purposes such as managing and funding the NHS, monitoring activity to understand and plan the health needs of the population, and to gain evidence that will improve health and care through research.

The datasets include information about the people who have received care and treatment from those services that we are responsible for funding. The CCG is unable to identify you from these datasets. They do not include your name, home address, NHS number, post code or date of birth. Information such as your age, ethnicity and gender, as well as coded information about any clinic or accident and emergency attendances, hospital admissions and treatment will be included.

More information about how this data is collected and used by the Health and Social Care Information Centre (HSCIC) is available on their website http://www.hscic.gov.uk/patientconf  

We also receive similar information from GP Practices within our CCG membership that does not identify you. We use this datasets for a number of purposes such as:

• Performance managing contracts;
• Reviewing the care delivered by providers to ensure service users are receiving quality and cost effective care;
• To prepare statistics on NHS performance to understand health needs and support service re-design, modernisation and improvement;
• To help us plan future services to ensure they continue to meet our local population needs;
• To reconcile claims for payments for services received in your GP Practice; and
• To audit NHS accounts and services.

If you do not wish your information to be included in these datasets, even though it does not directly identify you to us, please contact your GP Practice and they can apply a code to your records that will stop your information from being included.

To support research oriented proposals and activities in our commissioning system.

Researchers can provide direct benefit to individuals who take part in medical trials and indirect benefit to the population as a whole. Patient records can also be used to identify people to invite them to take part in clinical trials, other interventional studies or studies purely using information from medical records.

Where identifiable data is needed for research, patients will be approached by the organisation where treatment was received, to see if they wish to participate in research studies.

If you do not wish your information to be used for research, whether identifiable or non-identifiable, please let your GP Practice know. They will add a code to your records that will stop your information from being used for research.