Protecting your privacy
We are committed to protecting your privacy and will only process personal information in accordance with GDPR/ data protection law, the Human Rights Act 1998 and the Common Law Duty of Confidence.
The CCGs forming the Greater Nottingham Clinical Commissioning Partnership are Data Controllers under the terms of data protection law and are legally responsible for ensuring that all personal information that is processed i.e. held, obtained, recorded, used or shared about individuals is done in compliance with the six Data Protection Principles.
All data controllers must notify the Information Commissioner’s Office of all personal information processing activities. Our registration details can be found on the public register of Data Controllers: Information Commissioner’s Office public register of Data Controllers.
All information that we hold about individuals will be held securely and confidentially.
We use administrative and technical controls to do this. All of our staff, contractors and committee members receive appropriate and on-going training to ensure they are aware of their personal responsibilities and have contractual obligations to uphold confidentiality, enforceable through disciplinary procedures. We will only use the minimum and proportionate amount of personal information necessary.
Where possible we will use information that does not directly identify individuals, but when it becomes necessary for us to know or use personal information a person, we will only do this when we have either a legal basis or have that person’s consent. We use strict controls to ensure that only authorised staff are able to see information that identifies you.
Only a limited number of authorised staff have access to information that identifies individuals, where it is appropriate to their role, and is strictly on a need-to-know basis.
The CCGs have a Caldicott Guardian (see the Contact us section of the website) who is the person responsible for protecting the confidentiality of patient information and enabling appropriate and lawful information sharing.