Information that is anonymous 

​​​​​​​​​​​​​​​​​​​​Information that is anonymous to us may be used for​:

​​​Your GP uses your data to provide the best care they can for you.  As part of this process, your GP will use your personal and health data to undertake risk stratification.

Risk stratification involves using computer based algorithms or calculations to identify who most is at risk from certain medical conditions. This informs your GP of who will benefit from clinical care to help prevent or better treat their condition.

To identify those at risk manually out of everyone registered with your GP would be a lengthy and time-consuming process. This approach could result in identifying those at risk later on, and reducing the time to provide care. This is why a computerised process is used.

Your GP Surgery uses the services of a health partner, NHS South East CSU to undertake this process. We arrange this contract.

We will not have access to your personal or confidential data at any time and neither will South East CSU. They act on behalf of your GP to organise this service with appropriate contractual and security measures only.

South East CSU will process your personal and confidential data. Typically this will process your data using indicators such as your age, gender, NHS number and codes for your medical health to identify those who will benefit from clinical intervention. This processing takes place automatically and without human or manual handling, nobody sees this information. Data is extracted from your GP computer system, automatically processed, and the results are matched against those on your GPs system. Only your GP is able to view the outcome.

We have implemented strict security controls to protect your confidentiality and recommend this as a secure and beneficial service to you. At all times in this process your GP remains accountable for how your data is processed. However, if you wish, you can ask your GP for your data not to be processed for this purpose and your GP will mark your record as not to be extracted so it is not sent to South East CSU for risk stratification purposes.​

We have identified key areas to concentrate on with regards to the health of East Surrey residents. You can read about these on the Our Plans page of our website.

We use the local Accredited Safe Haven which processes personal data securely on our behalf to allow it to be used without anyone being identified. This Safe Haven is located within NHS South East Commissioning Support Unit (CSU), which has been accredited by the Health and Social Care Information Centre.

The information used by South East CSU within the Safe Haven will include details such as your NHS number, GP practice, and information about your treatment at hospital or within the community. It may also include other elements of your health record. This allows South East CSU to link information from each area of healthcare to give us a fuller picture of health within East Surrey. It helps us understand which services are required to support you and others to stay healthy. As part of this process, any information that might allow us to identify you is removed before it is sent to us at the CCG.

Where we are responsible for care that has been provided, we will need to make a payment to the provider of that care. In most cases limited data is required to make these payments. However, in some instances we will need information to confirm that you are registered at one of our member GPs to make these payments. This is done in line with the Who Pays Invoice Validation Guidance issued by NHS England and is explained further below.​

We do not have a legal right to access your personal confidential data to validate invoices. Neither do other CCGs, NHS England, or Commissioning Support Units. However, in November 2013, the Secretary of State for Health approved an application from NHS England to legally allow personal data to be used to validate invoices without the consent of the patient. This application is known as a Section 251 and you can read more about it here. It occurs within a secure controlled environment. The invoice validation process supports the delivery of patient care across the NHS by ensuring that:

  • Service providers are paid for the patient's treatment
  • Services can be planned, commissioned, managed, and subjected to financial control
  • Commissioners can confirm that they are appropriately paying  for the treatment of their patients
  • The commissioners' duties of fiscal probity and scrutiny are fulfilled
  • Invoices can be challenged and disputes or discrepancies resolved

We support local GP practices with prescribing queries. This generally does not require identifiable information.

Where specialist support is required the medicines management team will order this on behalf of a GP to support your care, for example to order a drug that normally comes in solid form in a gas or liquid form instead.

Surrey Downs CCG provides the Medicines Management Service on our behalf.​

​In order for us to perform our commissioning functions various organisations share information with us including: GPs, acute and mental health hospitals, other CCGs, community services, walk-in centres, nursing homes, directly from service users and many others. 

This information is not personal information and you cannot be identified by it.