NHS Kent and Medway rely on the following lawful basis under UK GDPR for processing your personal data for the purposes of risk stratification:
Article 6(1)(e) 'processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller..'.
Article 9(2)(h) 'processing is necessary for the purposes of preventive or occupational medicine, for the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services..'.
We will also recognise your rights established under UK case law collectively known as the “Common Law Duty of Confidentiality”.
NHS Kent and Medway ICB has Section 251 approval from the Secretary of State for Health and Social Care, through the Confidentiality Advisory Group (CAG) of the Health Research Authority, to allow it to receive this data, in line with specific technical and security measures in place, for the purposes of risk stratification.
This approval allows your GP or staff within your GP Practice who are responsible for providing your care, to see information that identifies you, but the ICB staff will only be able to see information in a format that does not reveal your identity.