Data Controller
NHS West Yorkshire Integrated Care Board
Purpose
Some of the pharmacists and pharmacy technicians employed by NHS West Yorkshire Integrated Care Board support general practice to provide safe, effective and value for money prescribing. These healthcare professionals are all registered with the General Pharmaceutical Council and are a valuable resource in helping general practice to maintain the best patient care around prescribing. In order to provide direct patient care and support the general practice, these professionals may require access to some clinical information about individual patients under the care of the practice.
Controlled Drugs Monitoring - The ICB has a duty to assist the relevant Controlled Drug Accountable Officer (CDAO) of NHS England in the carrying out of the CDAO’s functions under The Controlled Drugs (Supervision of Management and Use) Regulations 2013. These functions include the investigation into fraudulent prescriptions for Controlled Drugs. The regulations aim to strengthen the governance arrangements for the use and management of controlled drugs.
Lawful basis
GDPR Article 6(1)(e) processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority.
GDPR Article 9 (2)(h) processing is necessary for the purposes of the provision of health or social care or treatment or the management of health or social care systems and services.
Type of information used
Personal and clinical information.
Who we will share the information with (recipients)
Our pharmacists and pharmacy technicians process personal and clinical information on behalf of general practice to help maintain the best patient care around prescribing. This information is not shared with anyone outside of the patient’s general practice.
In relation to The Controlled Drugs (Supervision of Management and Use) Regulations 2013, sometimes we may be required to share information with other healthcare providers. For example, in investigating fraudulent prescriptions.
Do we use any processors
The Health Informatics Service (THIS), our IT supplier who store all our information securely on their servers.
Microsoft Azure, supported by IT staff, host our data.
How we collect (the source) and use the information
The general practice clinical system is the source of the information.
Details of recommendations and any actions are documented by the pharmacists and pharmacy technicians in the patient’s electronic primary health care record. Pseudonymised and anonymised information will be held securely for the purposes of resolving prescribing queries.
How long we will keep the information
One year.
Your Rights
With regards to Medicines Optimisation, under the UK GDPR you have the following rights:
- The right to be informed about the processing of your data (this notice)
- The right of access to the data held about you
- The right to have that information amended in the event that it is not accurate
- The right to restrict processing
- The right to object to processing
- Right not to be subjected to automated decision making and profiling
- To be notified of data breaches.