Data Protection Privacy Notice for Patients

Data Sharing

How your information is used for medical research and to measure the quality of care

Medical research

Bideford Medical Centre shares information from medical records:

This is important because:

We share information with the following medical research organisations with your explicit consent or when the law allows:

Prevalence of inflammatory Back Pain in Young Adults –



Network South West Peninsular -

Royal Devon and Exeter Foundation Trust -

You have the right to object to your identifiable information being used or shared for medical research purposes. You can manage your preference online - see the national data opt out scheme or if you do not wish to use this service but still object then please call the practice.


Checking the quality of care - national clinical audits

Bideford Medical Centre contributes to national clinical audits so that healthcare can be checked and reviewed.

We are required by law to provide you with the following information about how we share your information for medical research purposes.

Data Controller - contact details: Bideford Medical Centre, Abbotsham Road, Bideford, EX39 3AF

Data Protection Officer - Bex Lovewell email or postal address: Sentinel Healthcare SouthWest Community Interest Company, c/o Express Diagnostics & Treatment Services, 6 Research Way, Plymouth, PL6 8BU

Purpose of the processing:

Medical research and to check the quality of care which is given to patients (this is called national clinical audit).

Lawful basis for processing:

The following sections of the GDPR mean that we can use medical records for research and to check the quality of care (national clinical audits)

Article 6(1)(e) – ‘processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller’.

Article 9(2)(a) – ‘the data subject has given explicit consent…’

Recipient or categories of recipients of the processed data

For medical research the data will be shared with GARFIELD, Network South West Penninsular, Royal Devon and Exeter Foundation Trust.

For national clinical audits which check the quality of care the data will be shared with NHS Digital.

Rights to object and the national data opt-out

You have a right to object under the GDPR and the right to ‘opt-out’ under the national data opt-out model. The national data opt-out model provides an easy way for you to opt-out of:

information that identifies you being used or shared for medical research purposes and quality checking or audit purposes.

To opt-out of your identifiable information being shared for medical research or to find out more about your opt-out choices please go to NHS Digital’s website:

Right to access and correct

Retention period

We are required under UK law to keep your information and data for the full retention periods as
specified by the NHS Records management code of practice for health and social care and national archives requirements.
More information on records retention can be found online at:

Right to complain

You have the right to complain to the Information Commissioner’s Office. If you wish to complain follow this link or call the helpline 0303 123 1113

Data Sharing