GDPR Data processing modelPatient management in a medical practice
Purposes (6)
A purpose is the objective pursued by the setting up of your file. It indicates what the processing of personal data will be used for, its purpose. This purpose must be clear and understandable
Data categories (6)
Personal data is any information relating to an identified or identifiable natural person. A natural person can be identified either directly (eg surname and first name) or indirectly (eg phone number, social security number, email or postal address, but also voice or image)
health
Data details
Data conservation rules
Active base:
For as long as the patient is registered with or treated by the practice. When a patient registers with another GP practice, the GP record follows the patient.
NHS Records Management Code of Practice
Intermediate archiving:
Retain in line with the NHS Records Management Code of Practice retention schedule: GP records of deceased patients are kept for 10 years after death; other care settings apply the period set in the Code for the record type. Private practices not bound by the Code should apply the same periods and document them.
Destruction
Professional situation
Data details
Data conservation rules
Active base:
For as long as the patient is registered with or treated by the practice. When a patient registers with another GP practice, the GP record follows the patient. Only where recorded in the patient record.
NHS Records Management Code of Practice
Intermediate archiving:
Retain in line with the NHS Records Management Code of Practice retention schedule: GP records of deceased patients are kept for 10 years after death; other care settings apply the period set in the Code for the record type. Private practices not bound by the Code should apply the same periods and document them.
Destruction
Lifestyle & Family
depending on the context, as long as it is collected with the patient's consent and is necessary for the diagnosis and care of the patient
Data details
Definition
intensity, frequency, duration
Definition
aide-ménagère, familiale
Definition
alone, institutionalized, independent, bedridden
Data conservation rules
Active base:
For as long as the patient is registered with or treated by the practice. When a patient registers with another GP practice, the GP record follows the patient. Only where recorded in the patient record.
NHS Records Management Code of Practice
Intermediate archiving:
Retain in line with the NHS Records Management Code of Practice retention schedule: GP records of deceased patients are kept for 10 years after death; other care settings apply the period set in the Code for the record type. Private practices not bound by the Code should apply the same periods and document them.
Destruction
Audit trails
Data details
Definition
Audit trails that report on the activity of the software and hardware components used by the information system to provide the functionality requested by a user or machine.
Definition
Audit trails that report on the business actions of users or machines within the information system.
Data conservation rules
Active base:
No statutory period. Audit trails are kept for as long as the records they relate to, so that access and changes can be checked; the controller sets and documents the period.
Intermediate archiving:
Archived with the related patient record and destroyed at the end of its retention period (NHS Records Management Code of Practice).
Destruction
family situation
Data details
Definition
Single, married, cohabiting etc.
Data conservation rules
Active base:
For as long as the patient is registered with or treated by the practice. When a patient registers with another GP practice, the GP record follows the patient. Only where recorded in the patient record.
NHS Records Management Code of Practice
Intermediate archiving:
Retain in line with the NHS Records Management Code of Practice retention schedule: GP records of deceased patients are kept for 10 years after death; other care settings apply the period set in the Code for the record type. Private practices not bound by the Code should apply the same periods and document them.
Destruction
Patient identification
Data details
Definition
person's date of birth
Definition
Name of the person
Data conservation rules
Active base:
For as long as the patient is registered with or treated by the practice. When a patient registers with another GP practice, the GP record follows the patient.
NHS Records Management Code of Practice
Intermediate archiving:
Retain in line with the NHS Records Management Code of Practice retention schedule: GP records of deceased patients are kept for 10 years after death; other care settings apply the period set in the Code for the record type. Private practices not bound by the Code should apply the same periods and document them.
Destruction
Data subject (1)
A data subject is any person whose data is collected, retained or processed by the data processing. e.g. In a recruitement process, any candidate for a position proposed in recruitement management process
- Other
Attribution / Pas d'utilisation commerciale
CC-BY-NC
