What personal information do we collect about you and how?

As a commissioner, we do not routinely hold or have access to your medical records. However, we may need to hold some personal information about you, for example:

  •  If you have made a complaint to us about healthcare that you have received and we need to investigate;
  •  If you ask us to provide funding for Continuing Healthcare services;
  •  If you ask us for our help or involvement with your healthcare, or where we are required to fund specific treatment for a particular condition that is not already covered in our contracts with organisations that provide NHS care;
  •  To help understand which patient groups are likely to get ill and attend hospital (risk stratification); or
  •  If you ask us to keep you regularly informed and up-to-date about the work of the CCG, or if you are actively involved in our engagement and consultation activities or service user/Patient Participation Groups.

Our records may include relevant information that you have told us, or information provided on your behalf by relatives or those who care for you and know you well, or from health professionals and other staff directly involved in your care and treatment.

Our records may be held on paper or in a computer system. The types of information that we may collect and use include the following types:

Personal Confidential Information
Information about identified or identifiable people, which should be kept private. For these purposes the information would include dead as well as living people. ‘Confidential’ includes both information ‘given in confidence’ and ‘that which is owed a duty of confidence’. This would include health information, your religion and ethnic origin, and whether or not you are subject to any protection orders regarding your health, wellbeing and human rights (safeguarding status).

Pseudonymised Information
This is data that has undergone a technical process that replaces your identifiable information such as NHS number, postcode and/or date of birth with a unique identifier, which obscures your ‘real world’ identity to those working with the information.

Anonymised Information
This is data that has been manipulated so that it is no longer possible to identify specific individuals.