[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"doc-detail-167603-en":3,"doc-seo-167603-105":30,"detail-sidebar-cat-1-en-105":92},{"code":4,"msg":5,"data":6},0,"success",{"doc_id":7,"user_id":8,"nickname":9,"user_avatar":10,"doc_module":11,"category_id":12,"category_name":13,"doc_title":14,"doc_description":15,"doc_content":16,"file_id":17,"file_url":18,"file_type":19,"file_size":20,"view_count":11,"is_deleted":4,"is_public":11,"is_downloadable":11,"audit_status":11,"page_count":21,"language":22,"language_code":23,"site_id":24,"html_lang":23,"table_of_contents":25,"faqs":26,"seo_title":27,"seo_description":15,"update_tm":28,"read_time":29},167603,1099523882367,"Jordan Avery","https://ap-avatar.wpscdn.com/davatar_9964176cb1d06d4a9deccf72a44ae3dc",1,17,"Forms","General Practice Privacy Notice - GDPR v8 - Patients","General Practice Privacy Notice explains why the GP practice collects and processes patients’ personal data, describes the roles of the Data Controller, Caldicott Guardian, and Data Protection Officer, and sets out how data is protected and kept secure. It details what data types are used, including personal data, special category data, Personal Confidential Data, pseudonymised, anonymised, and aggregated data. It also outlines the legal bases and conditions for processing, covering direct care, administrative purposes, and statutory obligations under UK GDPR and the Data Protection Act 2018.","General Practice Privacy Notice\nProtecting Your Data\nIntroduction\nThis privacy notice explains in detail why we use your personal data which we, the GP practice, (Data Controller), collects and processes about you.  A Data Controller determines how the data will be processed and used with the GP practice and with others who we share this data with.  We are legally responsible for ensuring that all personal data that we hold and use is done so in a way that meets the data protection principles under the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018.  This notice also explains how we handle that data and keep it safe.\nCaldicott Guardian\nThe GP Practice also has a Caldicott Guardian. A Caldicott Guardian is a senior person within a health or social care organisation, preferably a health professional, who makes sure that the personal information about those who use its services is used legally, ethically and appropriately, and that confidentiality is maintained.  The Caldicott Guardian for the GP practice is:\nDR M Mirza – gmicb-bol.p82002@nhs.net\nData Protection Officer (DPO)\nUnder GDPR all public bodies must nominate a Data Protection Officer.  The DPO is responsible for advising on compliance, training and awareness and is the main point of contact with the Information Commissioner’s Office (ICO).  The DPO for the practice is:\nMr Deiler Carrillo  \u0013 HYPERLINK \"mailto:gmicb-bol.practicedpo@nhs.net\" \u0014gmicb-bol.practicedpo@nhs.net\u0015\nWe will continually review and update this privacy notice to reflect changes in our services and to comply with changes in the Law.  When such changes occur, we will revise the last updated date as documented in the version status in the header of this document.\nWhat we do?\nWe are here to provide care and treatment to you as our patients.  In order to do this, the GP practice keeps personal demographic data about you such as your name, address, date of birth, telephone numbers, email address, NHS Number etc and your health and care information.  Information is needed so we can provide you with the best possible health and care.  We also use your data to:\nConfirm your identity to provide these services and those of your family / carers\nUnderstand your needs to provide the services that you request\nObtain your opinion on our services (with consent)\nPrevent and detect fraud and corruption in the use of public funds\nMake sure we meet our statutory obligations, including those related to diversity and equalities\nAdhere to a legal requirement that will allow us to use or provide information (e.g. a formal Court Order or legislation)\nDefinition of Data Types\nWe use the following types of information / data:\nPersonal Data\nThis contains details that identify individuals even from one data item or a combination of data items. The following are demographic data items that are considered identifiable such as name, address, NHS Number, full postcode, date of birth. Under GDPR, this now includes location data and online identifiers.\nSpecial categories of data (previously known as sensitive data)\nThis is personal data consisting of information as to: race, ethnic origin, political opinions, health, religious beliefs, trade union membership, sexual life and previous criminal convictions. Under GDPR, this now includes biometric data and genetic data.\nPersonal Confidential Data (PCD)\nThis term came from the \u0013 HYPERLINK \"https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/192572/2900774_InfoGovernance_accv2.pdf\" \u0014Caldicott review\u0015 undertaken in 2013 and describes personal information about identified or identifiable individuals, which should be kept private or secret. It includes personal data and special categories of data but it is adapted to include dead as well as living people and ‘confidential’ includes both information ‘given in confidence’ and ‘that which is owed a duty of confidence’.\nPseudonymised Data or Coded Data\nIndividual-level informa","cbCaid2i1ilHiGoj","https://ap.wps.com/l/cbCaid2i1ilHiGoj","docx",218922,22,"English","en",105,"# Protecting Your Data\n## Introduction\n## Caldicott Guardian\n## Data Protection Officer (DPO)\n## What we do?\n## Definition of Data Types\n## Our data processing activities","[{\"question\":\"Who determines how patients’ personal data is processed in the GP practice?\",\"answer\":\"The GP practice acts as the Data Controller, determining how personal data is processed and used and with whom it is shared.\"},{\"question\":\"What is the role of the Caldicott Guardian?\",\"answer\":\"The Caldicott Guardian ensures personal information is used legally, ethically, and appropriately and that confidentiality is maintained.\"},{\"question\":\"What kinds of data does the privacy notice cover?\",\"answer\":\"It covers personal data, special category data, Personal Confidential Data (PCD), pseudonymised/coded data, anonymised data, and aggregated data.\"}]","General Practice Privacy Notice - GDPR v8 - Patients | DOCX",1788216961,8,{"code":4,"msg":31,"data":32},"ok",{"site_id":24,"language":23,"slug":33,"title":14,"keywords":34,"description":15,"schema_data":35,"social_meta":87,"head_meta":89,"extra_data":91,"updated_unix":28},"general-practice-privacy-notice-gdpr-v8-patients","",{"@graph":36,"@context":86},[37,54,69],{"@type":38,"itemListElement":39},"BreadcrumbList",[40,44,48,51],{"item":41,"name":42,"@type":43,"position":11},"https://docshare.wps.com","Home","ListItem",{"item":45,"name":46,"@type":43,"position":47},"https://docshare.wps.com/template/","Template",2,{"item":49,"name":13,"@type":43,"position":50},"https://docshare.wps.com/template/forms/",3,{"item":52,"name":14,"@type":43,"position":53},"https://docshare.wps.com/template/general-practice-privacy-notice-gdpr-v8-patients/167603/",4,{"url":52,"name":14,"@type":55,"author":56,"headline":14,"publisher":58,"fileFormat":61,"inLanguage":23,"description":15,"dateModified":62,"datePublished":63,"encodingFormat":61,"isAccessibleForFree":64,"interactionStatistic":65},"DigitalDocument",{"name":9,"@type":57},"Person",{"url":41,"name":59,"@type":60},"DocShare","Organization","application/vnd.openxmlformats-officedocument.wordprocessingml.document","2026-09-04","2026-08-31",true,{"@type":66,"interactionType":67,"userInteractionCount":47},"InteractionCounter",{"@type":68},"ViewAction",{"@type":70,"mainEntity":71},"FAQPage",[72,78,82],{"name":73,"@type":74,"acceptedAnswer":75},"Who determines how patients’ personal data is processed in the GP practice?","Question",{"text":76,"@type":77},"The GP practice acts as the Data Controller, determining how personal data is processed and used and with whom it is shared.","Answer",{"name":79,"@type":74,"acceptedAnswer":80},"What is the role of the Caldicott Guardian?",{"text":81,"@type":77},"The Caldicott Guardian ensures personal information is used legally, ethically, and appropriately and that confidentiality is maintained.",{"name":83,"@type":74,"acceptedAnswer":84},"What kinds of data does the privacy notice cover?",{"text":85,"@type":77},"It covers personal data, special category data, Personal Confidential Data (PCD), pseudonymised/coded data, anonymised data, and aggregated data.","https://schema.org",{"og:url":52,"og:type":88,"og:title":14,"og:site_name":59,"og:description":15},"article",{"robots":90,"canonical":52},"index,follow",{"doc_id":7,"site_id":24},{"code":4,"msg":5,"data":93},[94,99,104,109,114,119,122,127,132],{"id":95,"doc_module":11,"doc_module_name":46,"category_name":96,"show_sort_weight":97,"slug":98},11,"Presentations",90,"presentations",{"id":100,"doc_module":11,"doc_module_name":46,"category_name":101,"show_sort_weight":102,"slug":103},12,"Resumes",80,"resumes",{"id":105,"doc_module":11,"doc_module_name":46,"category_name":106,"show_sort_weight":107,"slug":108},14,"Invoices",70,"invoices",{"id":110,"doc_module":11,"doc_module_name":46,"category_name":111,"show_sort_weight":112,"slug":113},15,"Posters",60,"posters",{"id":115,"doc_module":11,"doc_module_name":46,"category_name":116,"show_sort_weight":117,"slug":118},16,"Social Media",50,"social-media",{"id":12,"doc_module":11,"doc_module_name":46,"category_name":13,"show_sort_weight":120,"slug":121},40,"forms",{"id":123,"doc_module":11,"doc_module_name":46,"category_name":124,"show_sort_weight":125,"slug":126},18,"Letters",30,"letters",{"id":128,"doc_module":11,"doc_module_name":46,"category_name":129,"show_sort_weight":130,"slug":131},21,"Paper Templates",5,"papers-templates",{"id":133,"doc_module":11,"doc_module_name":46,"category_name":134,"show_sort_weight":4,"slug":135},158,"General","general-158"]