Digitisation of Paper Medical Records - Supplementary Privacy Notice

The NHS Long Term plan published in 2019 requires the digitisation of all primary care paper medical records, commonly known as ‘Lloyd George’ records or ‘A4 medical records’.

Having paper based medical records restricts the use of technology to provide ‘joined up’ services and therefore the current paper records will be transferred to a digital format and then destroyed.

This will involve the current patient paper medical records being scanned and then entered directly into a patient’s electronic medical record. This work will be completed by a third-party supplier, Iron Mountain UK plc, whose security standards have been reviewed by Buckinghamshire, Oxfordshire and Berkshire West Clinical Commissioning Group.

We are required by Data Protection law to provide you with the following information about how we handle your information.

Data Controller contact details Alchester Medical Group
Langford Medical Practice, 9 Nightingale Place, Bicester, Oxon OX26 6XX
alchester.medicalgroup@nhs.net
Data Protection Officer contact details George Thomas, Practice Manager
george.thomas3@nhs.net
Purpose of the processing Transferring the current paper medical records into patients’ electronic medical records.
Lawful basis for processing The following provisions of the General Data Protection Regulation permit us to digitise exisiting paper medical records:

Article 6(1)(e) - "processing is necessary...in the exercise of official authority vested in the controller..."

Article 9(2)(h) - "processing is necessary for the purpose of preventative...medicine...the provision of health or social care or treatment or the management of health or social care systems and services..."
Recipient or categories of recipients of the processed data The paper patient records will be shared with Iron Mountain UK plc, who will scan and digitise the current paper medical records before destroying them.
Right to access and correct You have the right to access your medical record and have any errors or mistakes corrected. Please speak to a member of staff or use our Contact Us form on our website.
Retention period GP medical records will be kept in line with the law and national guidance. Information on how long records can be kept can be found at: https://www.nhsx.nhs.uk/information-governance/guidance/records-management-code/records-management-code-of-practice-2021/ - or speak to the practice.

The paper medical records will be destroyed three months after they are transferred to an electronic format.

The practice holds medical records to provide medical treatment and advice and patients have a relationship with a GP in order for them to be provide health and care service to you. We therefore do not require your consent to transfer these papers records to an electronic format.

If you have any questions about this project, please contact Debbie Davies.

Details of Supplier:

Iron Mountain UK plc,
Ground Floor,
4 More London Riverside,
London
SE1 2AU
United Kingdom

This Privacy Notice will be reviewed and updated when required.

This was last reviewed July 2023.

INDEX - Policies

MAIN INDEX