The Fair Processing Notice is intended to inform you about the type of patient information that GP Practices hold, how that information might be used, with whom we may share that information, and how we ensure it is kept secure.
Further Information
NHS Essex – How your data is used: NHS Essex – How your data is used
CVDPREVENT Audit – NHS England Transparency Notice: NHS England – CVDPREVENT Audit Transparency Notice
Your health and care information: NHS England – Understanding the health and care information we collect
The Caldicott Principles: GOV.UK – The Caldicott Principles
Records Management Code of Practice: NHS England – Records Management Code of Practice
National Data Opt-out / Your NHS Data Matters: NHS – Your NHS Data Matters
Accessing your records / Subject Access Requests – NHS Essex: NHS Essex – Access to health records and Subject Access Requests
CCTV – view our steps below
Closed Circuit Television (CCTV) – Privacy Information
East Lynne Medical Centre uses CCTV to help maintain the security and safety of patients, visitors, staff and the premises, and to assist with the prevention, detection and investigation of crime and security incidents.
| Data Controller | East Lynne Medical Centre |
| What information do we collect? | Images and video footage of individuals entering, leaving or moving within areas covered by the practice CCTV system. |
| Why do we use CCTV? | To protect patients, visitors, staff and property; prevent and detect crime; investigate security and safety incidents; and provide evidence where an incident has occurred. |
| Does this contain special category information? | CCTV primarily records images and does not routinely process health information. However, footage may incidentally capture information which could be sensitive or potentially reveal special category information. We do not use CCTV to profile individuals or infer health information. |
| Who may receive CCTV information? | Access is restricted to authorised practice personnel. Footage may be shared where necessary and lawful with the police or other law-enforcement agencies, insurers, legal advisers, regulators, or other organisations involved in investigating an incident. Our CCTV/security provider may have limited access where required for system maintenance or support and will act under appropriate contractual controls. |
| Is CCTV used to monitor staff? | CCTV is primarily used for safety, security and crime-prevention purposes. It is not routinely used to monitor staff performance or attendance. Where footage is relevant to a specific serious incident, complaint, safeguarding matter, security investigation or disciplinary investigation, it may be reviewed where this is necessary, proportionate and lawful. |
| How long is CCTV retained? | CCTV footage is normally retained for up to 30 days and then automatically overwritten or securely deleted. Relevant footage may be retained for longer where it is required for an investigation, complaint, legal claim, safeguarding matter or law-enforcement request. |
| Is information transferred outside the UK? | No, where CCTV footage and backups are stored within the UK. This should be reviewed if the practice changes its CCTV or cloud-storage provider. |
| Lawful basis | The practice processes CCTV information where it is necessary for its legitimate interests in maintaining the safety and security of patients, staff, visitors and premises, and preventing or investigating crime and security incidents. Where CCTV information is required for a legal obligation, safeguarding matter or law-enforcement purpose, an alternative lawful basis may apply. |
| Consent | Consent is not relied upon for the operation of CCTV. Individuals therefore do not need to consent to being recorded in areas appropriately covered by CCTV. |
| Automated decision-making | No automated decisions are made about individuals using CCTV footage. |
| Where does the information come from? | CCTV cameras located at or within East Lynne Medical Centre. |
Your rights
Subject to applicable data-protection exemptions, you have the right to:
- be informed about how your information is used;
- request access to CCTV footage containing your personal information;
- request restriction of processing in certain circumstances;
- request erasure in certain circumstances; and
- object to the processing of your information.
The right to data portability does not normally apply to CCTV information.
If you wish to request CCTV footage, please contact the practice as soon as possible and provide sufficient information to help us identify the recording, such as the date, approximate time, location and description of the individual concerned. Footage may need to be redacted to protect the privacy of other individuals.
CCTV signage
Appropriate CCTV signs are displayed to inform patients, visitors and staff that surveillance is in operation and identify who is responsible for the system.