Common Privacy Notices

: Category: RegISA Common Privacy Notices

Below you'll find the agreed and approved general privacy, fair processing and informing texts that can be linked to directly by data controllers or used by controllers in building their own notices.

Name	Status	Purpose
TVS Care Record – Example privacy leaflet	Current	An example privacy leaflet This page contains an example privacy leaflet that can be utilised while ICS comms teams are preparing ICS-specific materials. (Please note that the webpage at the embedded URL https://www.thamesvalleysurreycarerecords.net/yourinfo/ is currently still being established and it may be a few days before it is fully live.)
TVS Care Record – Privacy link text examples	Current	A short document containing suggested text This page contains suggestions for text to support links to the main privacy notice pages. (Also at https://www.thamesvalleysurreycarerecords.net/yourinfo/ )
TVS Care Record – A brief description	Current	A brief (2 page) description of the TVS Care Record processing arrangements. The audience for this page is data subjects wanting a quick summary of why and how information is used to support their care. The page provides a link to the TVS Care Record website for more information and also provides a brief summary of the data subjects rights, TVS Care Record controllers’ responsibilities and contact details for the lead controller for the TVS Care Record and the ICO. (Also at https://www.thamesvalleysurreycarerecords.net/yourinfo/ )
TVS Care Record – A summary description	Current	A 4 page summary-level description of the TVS Care Record processing arrangements. The audience for this page is data subjects wanting a slightly more detailed description of why and how information is used to support their care. In addition to the 2 page document, this document includes for its readers: More detail regarding the nature of the TVS Care Record The sort of information processed within the TVS Care Record The legal basis for processing Who information is shared with The page provides a link to the TVS Care Record website for more information and also provides a brief summary of the data subjects rights, TVS Care Record controllers’ responsibilities and contact details for the lead controller for the TVS Care Record and the ICO. (Also at https://www.thamesvalleysurreycarerecords.net/yourinfo/ )
TVS Care Record - The Story of Everything As a Web Page As a PDF document	Current	A detailed description of the TVS Care Record processing arrangements. The audience for this page includes: Patients and residents requiring a general understanding of processing arrangements for the Thames Valley and Surrey Care Record Healthcare professionals requiring a general understanding of processing arrangements for the Thames Valley and Surrey Care Record Social care professionals requiring a general understanding of processing arrangements for the Thames Valley and Surrey Care Record Digital, change management and system transformation professionals involved in the various digital and system transformation projects and programmes involving the Thames Valley and Surrey shared care records who require a general understanding of processing arrangements for the Thames Valley and Surrey Care Record Information governance professionals requiring a general understanding of processing arrangements for the Thames Valley and Surrey Care Record The page covers: Scope of the processing Identities of the controllers for the shared care records Purpose of the shared care record processing The data that is processed Types of processing Legal basis for the processing Controls in place Your rights Contacts and links Frequently asked questions (FAQs) (Also at https://www.thamesvalleysurreycarerecords.net/yourinfo/ )
General Referrals	Current	Example notice for referrals. This notice explains that information about the data subject will be shared with the organisation and professionals who receive the referral.
MDT/ICT Referrals	Current	Example notice for referrals to Multi-Disciplinary Teams and Integrated Care Services. This notice explains that information about the data subject will be shared with the organisation and professionals who receive the referral. The notice also provides details of the classes of organisations that may receive referrals and that may be involved in using and processing the data. The notice is accompanied by a checklist for MDT referrers.
Local COVID-19 Privacy Policy text for data controllers	Legacy	Example privacy policy text for data controllers in respect to the COVID-19 response. This notice describes how controllers may use data subjects' information to protect the data subject and others during the COVID-19 outbreak. It supplements controllers' main Privacy Notices and states that health and care information is essential to deliver care to individuals, to support health and social care services and to protect public health. Information will also be vital in researching, monitoring, tracking and managing the outbreak. (Please note that you will need to link this to your main privacy notice.) The policy text is based on the original issued by NHS Digital and NHS X with additional information added to cover local arrangements, controllers and processors.
Personal Health Record Privacy Policy	Retired	The privacy policy text for the Share Your Care Personal Health Record. This privacy policy statement describes the privacy and processing arrangements for the Share Your Care Personal Health Record service commissioned by Frimley Health NHS Foundation Trust and provided by the Share Your Care solution providers. The policy is published to ensure everyone understands how we capture, manage and use your data through the Share Your Care Personal Health Record and to explain how we use the personal information that you supply to us through the Share Your Care Personal Health Record. Locally, Share Your Care is also known to professional users as Connected Care.
Local Shared Care Record Privacy Policy for Primary Care	Legacy	Example privacy policy text for primary care relating to local shared care records. The example shared care record text outlines how local health and care services are working more closely together to provide a joined-up service to meet local residents' needs and explains that working together improves the quality of care because the clinicians and other professionals involved in treatment and care provision have better, more timely and more complete information on which to base their decisions.
Example Video	Legacy	Example of a patient facing video. This video outlines why and how confidential patient data is used for direct care as well as securely to support the management of the local health system and also how it can be used securely to improve care through research.