Data Controller

NHS West Yorkshire Integrated Care Board

Purpose

Some of the pharmacists and pharmacy technicians employed by NHS West Yorkshire Integrated Care Board support general practice to provide safe, effective and value for money prescribing. These healthcare professionals are all registered with the General Pharmaceutical Council and are a valuable resource in helping general practice to maintain the best patient care around prescribing. In order to provide direct patient care and support the general practice, these professionals may require access to some clinical information about individual patients under the care of the practice.

Controlled Drugs Monitoring - The ICB has a duty to assist the relevant Controlled Drug Accountable Officer (CDAO) of NHS England in the carrying out of the CDAO’s functions under The Controlled Drugs (Supervision of Management and Use) Regulations 2013. These functions include the investigation into fraudulent prescriptions for Controlled Drugs. The regulations aim to strengthen the governance arrangements for the use and management of controlled drugs.

Lawful basis

GDPR Article 6(1)(e) processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority.

GDPR Article 9 (2)(h) processing is necessary for the purposes of the provision of health or social care or treatment or the management of health or social care systems and services.

Type of information used

Personal and clinical information.

Who we will share the information with (recipients)

Our pharmacists and pharmacy technicians process personal and clinical information on behalf of general practice to help maintain the best patient care around prescribing. This information is not shared with anyone outside of the patient’s general practice.

In relation to The Controlled Drugs (Supervision of Management and Use) Regulations 2013, sometimes we may be required to share information with other healthcare providers. For example, in investigating fraudulent prescriptions.

Do we use any processors

The Health Informatics Service (THIS), our IT supplier who store all our information securely on their servers.

Microsoft Azure, supported by IT staff, host our data.

How we collect (the source) and use the information

The general practice clinical system is the source of the information.

Details of recommendations and any actions are documented by the pharmacists and pharmacy technicians in the patient’s electronic primary health care record. Pseudonymised and anonymised information will be held securely for the purposes of resolving prescribing queries.

How long we will keep the information

One year.

Your Rights

With regards to Medicines Optimisation, under the UK GDPR you have the following rights: