Privacy Notice

NHS Grampian

Privacy notice

Emergency Care Summary (ECS) and Key Information Summary (KIS) Access for approved Pharmacists, Optometrists and Dentists

What is happening?

NHS Grampian is making your Emergency Care Summary (ECS) and Key Information Summary (KIS) avaialble to approved Pharmacists, Optometrists and Dentists in our region. This is to allow them to access key information about you, your healthcare and your medication when they are providing support to you. This reduces the risk to you and improves the quality of the advice and care they can offer you.

Your data is only accessed when you are receiving care from an approved Pharmacist, Optometrist or Dentist.

To be approved to access the system, the Pharmacist, Optometrist, or Dentist must sign and Information Sharing Agreement with NHS Grampian that sets the standards for their access to your data.

NHS Grampian is making this information avaialble to Pharmacists, Optometrists and Dentists in compliance with this Scottish Government Directive – https://www.publications.scot.nhs.uk/files/ecs-kis-summary.pdf.

Personal data and special categories of personal data

Your ECS includes your demographic data (name, address, contact information, date of birth, CHI number etc) and your health data. For more information about the data that will be available please see Schedule 1 of the Directive linked above.

Data controller

Your GP practice is the data controller for the information in your ECS and KIS insofar as they code the data that is included in the summaries. This is jointly controlled by NHS Grampian who provide

appropriate access to the system. When your Pharmacist, Optometrist or Dentist accesses the data and writes their own professional notes around your care they control their copy of your information.

Lawful processing

The processing of your data is further to the official authority of your GP and NHS Grampian and a task in the public interest (ie making information available for the provision of safe care in compliance with a Scottish Government Directive). The processing of your health data in this way is lawful for the purposes of the provision of health or social care and the management of the health and social care system.

Please note that this access is not provided further to your consent. This is a change from earlier approaches to KIS in particular. The change is made under the direction of Scottish Government – https://www.publications.scot.nhs.uk/files/key-information-summary.pdf.

Your rights

If you wish to update, access, erase, or limit or complain about the use of your personal data please let NHS Grampian’s Data Protection Officer know in the first instance by contacting Information Governance – gram.infogovernance@nhs.scot – or 01224 551549. You may also wish to contact the Information Commissioner’s Office – https://ico.org.uk/your-data-matters/raising-concerns/ or seek to enforce your rights through judicial remedy.