GDPR Privacy Notice v3.2 Decmeber 2023
COVID19 Privacy Notice v6 August 2023
National Data Sharing Arrangement-Direct Care APIs
PPG Privacy Notice 1 July 2023
How we use your information - GDPR
Data Protection Impact Assessment - March 2020
Data Protection Impact Assessment - December 2020
 03.2018.pdf)
NHS Diabetes Prevention Programme - Privacy Notice
The practice shares data on eligible patients with the NHS Diabetes Prevention Programme, a joint initiative between NHS England, Public Health England and Diabetes UK. This service is provided by Ingeus, who ensure they adopt enhanced security requirements in line with national standards. The purpose of the programme is to deliver behavioural and lifestyle intervention services for people who have already been identified with non-diabetic hyperglycaemia, and who are therefore at high risk of developing Type 2 Diabetes. The legal basis that allows the practice to do this is direct care as detailed under articles 6 and 9 of the DPA18/GDPR as follows:
Article 6
- 6(1)(e) processing is necessary for the performance of a task carried out in the public interestor in the exercise of official authority vested in the controller.
Article 9
- 9(2)(h) – Processing is necessary for the purposes of preventative or occupational medicine, for assessing the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or management of health or social care systemsand services on the basis of Union or Member State law or a contract with a health professional.