How is patient information managed?
How is patient information managed?
The privacy and confidentiality of any and all patient information (communications, appointments, letters etc) is handled with great sensitivity and in full compliance with UK data protection law, regulatory (HCPC) and professional (BPS) standards for clinical psychologists.
In connection with our appointments, I make brief clinical notes that are kept separately, securely and confidentially, and are not shared with anyone else. I can also add clinical notes in hospital patient records at Imperial and King Edward when we both agree it would be helpful to share specific information with other professionals.
It is good clinical practice to write a brief communication to your cancer consultant and/or referrer after an initial consultation, to appraise them of key points and the agreed plan. However, this is not obligatory and I will be led by your views on what can be shared and with whom - it's okay to keep the consultation fully confidential. The only exception, which is an over-arching legal requirement for all healthcare professionals, is where there is specific and direct risk of harm to the patient or others.
My private practice company, KX Healthcare Ltd, is registered with the ICO as the data controller for your personal data. Your information is used to provide and coordinate your psychological care. The full Privacy Notice will be provided at the point of first appointment booking. The clinical records from my clinic are retained for a minimum of 7 years following the end of our professional relationship, in line with BPS guidance for private practice.
Data protection - complaints procedure
How to make a complaint
If you believe I have handled your personal data in a way that breaches data protection law, you can raise a complaint with me directly. This includes concerns about how I have stored, used, shared or retained your information, how I have responded to a subject access request, or any data security concern.
You can contact me by email at: data@kxhealth.uk
What happens then
I will acknowledge your complaint within 30 calendar days of receiving it. I will then investigate your concern without undue delay and keep you informed of progress. Once I have completed my investigation I will write to you with the outcome in plain language, and explain what steps I have taken or will take in response. I will keep a record of all data protection complaints received, the steps taken to investigate, and the outcome.
If you remain dissatisfied after I have responded, you have the right to escalate your complaint to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
Services provided by KX Healthcare Ltd, Registered in England and Wales, Company No. 17040118
Registered Office 27 Old Gloucester Street, London, WC1N 3AX