Privacy Notice


The purpose of The Confederation Hillingdon CIC is to provide and assist our member GP practices to provide healthcare services in our Borough. We keep records about you, your health and the care we have provided or plan to provide to you.

Most of the time we use information that does not identify individuals, such as statistical or anonymous data.

However, there are some areas where we may use data such as:

  • Evaluation and review of services such as checking their quality and efficiency
  • Paying your GP for the care they provide
  • Checking NHS accounts and services
  • Working out what illnesses people will have in the future, so we can prioritise NHS


  • Making sure our services can meet patient needs in the future
  • Preparing statistics on NHS performance
  • Reviewing the care we provide to make sure it is of the highest standard.

Some of our commissioning functions use data with your NHS number only; this is only done under the current legal permissions of Section 251 of NHS Act 2006.

Examples are:

  • Monitoring how care is delivered to patients
  • Making sure services are working well and using resources properly
  • Redesigning and modernising services
  • Understanding particular health needs in different geographic areas
  • Enabling only clinicians who are involved in a patient’s care to identify and contact


  • who would benefit from active case management
  • who are at risk of needing hospital care in the future.
  • Supporting care service planning and commissioning

There are some functions where we use small amounts of confidential information, this may include your name, date of birth, address, summary of health details or outcomes of needs assessments.

This information may be kept in written form and/or on a computer; in most of these instances you would have given us consent while we were carrying out those functions or it is information you send directly to us.

Some of those functions include: 

  • Assessments for continuing healthcare (a package of care for those with complex medical needs) assessments
  • Securing specialist services
  • Responding to your queries, concerns or complaints
  • Assessment and evaluation of safeguarding concerns


The Confederation Hillingdon CIC is committed to protecting your privacy, we will only use information collected lawfully in accordance with the General Data Protection Regulation 2016 (“GDPR”) and undertake not to use any information we may hold about you for any purpose other than that for which it was collected, unless we have obtained your consent.

In addition, all staff are subject to the Common Law Duty of Confidence. Under the NHS Confidentiality Code of Conduct all our staff are also required to protect your information, inform you of how your information will be used and allow you to decide if and how your information can be shared unless there is a legal exemption.

We ensure that our partner agencies handle our information under strict conditions and in line with the law. All staff have contractual obligations of confidentiality, enforceable through disciplinary procedures. Staff with access to patient identifiable information have received appropriate on-going training to ensure they are aware of their responsibilities and staff are granted access to personal data on a need-to-know basis only.

Data collected will not be sent to countries where the laws do not protect your privacy to the same extent as the law in the UK. We do not send any data outside the EUA.


In order for The Confederation Hillingdon CIC to perform its functions mentioned above, information that we may hold is shared from various organisations which include: general practices, acute and mental health hospitals, community services, walk in centres, nursing homes, directly from service users and many others.

Information may also need to be shared for your benefit with other non-NHS organisations, from which you are also receiving care, such as social services and other providers from which we commission services. Where information sharing is required with third parties, we will not disclose any health information without your explicit consent unless

  • You ask us to do so
  • A court order has been served on us
  • To assist the police in the prevention and detection of crime
  • To protect children and vulnerable adults
  • We have special permission for health and research purposes (granted by the Health Research Authority)
  • For the health and safety of others, for example to report an infectious disease such as meningitis or measles
  • The law requires it or to carry out a statutory function.


You have the right at any time, to refuse/ withdraw consent to information sharing. The possible consequences will be fully explained to you and could include delays in receiving care.

If you have any questions or concerns regarding the information we hold on you or the use of your information, please contact us at:

Information Governance

The Confederation Hillingdon CIC


Belmont Road




For independent advice about data protection, privacy and data-sharing issues, you

can contact the Information Commissioner at: Wycliffe House, Water Lane, Wilmslow,

Cheshire, SK9 5AF. Phone: 08456 30 60 60 or 01625 54 57 45 Fax: 01625 524 510


November 2018