Health and Community Services is registered as a 'Controller' under the Data Protection (Jersey) Law 2018 (the “Data Protection Law"), as we determine the purpose and means of the processing of the personal information collected about you for the JHCI.
Primary Care: General Practice is registered as a 'Controller' under the Data Protection (Jersey) Law 2018 (the “Data Protection Law"), as we determine the purpose and means of the processing of the personal information collected about you for the JHCI.
Customer and Local Services is registered as a 'Controller' under the Data Protection (Jersey) Law 2018 (the “Data Protection Law"), as we determine the purpose and means of the processing of the personal information collected about you for the JHCI.
Health and Community Services and Primary Care: General Practice process your information in order to provide health and community services and meet your healthcare needs, as well as our statutory obligations. This notice explains in more detail how we use and share information relating to you (your “personal data") in order to provide the service described above.
Find information on how Primary Care: General Practice uses your personal data for other services on your GP's website.
We will continually review and update this privacy policy to reflect changes in the JHCI and feedback from service users, as well as to comply with changes in the law.
Health and Community Services and CLS are joining forces with the Islands' GPs to create the JHCI. The JHCI ensures that your personal information is the same across all healthcare systems and providers including:
This is an important step toward a more connected healthcare experience.
With JHCI, you'll enjoy a host of benefits:
- authorised healthcare providers have access to your most up-to-date personal information when they need it, including in an emergency
- if you update your personal details in one place, it is automatically updated across all the relevant healthcare systems and providers
- your GPs can refer you to a specialist more easily when they need to
- you won't miss important invitations for potentially life-saving screenings, such as diabetic and cancer screenings
How we collect information about you
Your personal data will, in most cases, be collected directly from you. This may be done in any of the following ways:
-
when you update your details via the Government of Jersey's Tell Us Once process
-
when you update your details at your GP practice, or with HCS services.
-
if you visit CLS in person and notify them of a change of details
Types of information we collect
For the purpose of the JHCI, the following information is processed:
- name
- date of birth
- place of birth
- Social Security Number and JY number
- URN
- gender
- address
- alternative contact
- communication details, such as fax number and email address
- Primary Care practice
- date created
- date last updated
Initially, we'll use the personal information held by your GP, CLS and HCS to create your JHCI record. It's important to note that JHCI does not contain any of your medical information or history, such as test results, referrals, diagnoses, or appointment dates.
How we use the information about you
We need to collect and hold personal data about you, in order to carry out the public functions of the [Health and Community Services and Customer and Local Services], as well as to deliver shared care with our partners in Primary Care: General Practice and other healthcare organisations.
The current process for sharing information is manual, reliant on burdensome administrative tasks and information is proliferated across organisations in a disjointed manner.
In time, the JHCI project will enable shared care by assuring data matches and provides the backbone of the Jersey Care Record, a system that will reduce patient safety events by enabling access to core information to improve patient outcomes and clinical decision making.
Our legal basis for processing personal data in most cases is that it is necessary for the exercise of Health and Community Services' functions (Schedule 2 para 4(c) of the Data Protection Law).
We have set out in further detail below why we use your personal data in each instance.
| To ensure that healthcare providers are able to access your most up-to-date contact details and that they are available, including in an emergency | Public functions (Data Protection (Jersey) Law 2018, Schedule 2, paragraph 4b) | Name, date of birth, URN, address, alternative contact, communication details, such as fax number and email address |
| To ensure that records across systems match and can be easily integrated across systems, meaning that data transfers are more secure and efficient. | Public functions (Data Protection (Jersey) Law 2018, Schedule 2, paragraph 4b) | Name, date of birth, Social Security number or JY number, URN |
| To ensure that GPs can refer you into hospital services more easily and can receive updates on the care delivered by HCS | Medical Purposes (Data Protection (Jersey) Law 2018, Schedule 2, paragraph 15) | Name, date of birth, Social Security number and JY number, URN |
| To ensure that screening teams and initiatives can identify those islanders eligible for screening and can deliver programmes to those that need it, when they need it | Public Health (Data Protection (Jersey) Law 2018, Schedule 2, paragraph 16) | Name, date of birth, Social Security number and JY number, URN
|
Who we may share your personal information with
Other Healthcare Providers
As the JHCI develops, it is envisaged that other healthcare providers will utilise the features of the JHCI in order to maintain accurate records, and interact with patients, clients and each other using appropriate identifiers and the most up to date details.
Organisations using the JHCI's Professional Portal will be required to sign up to a Service Use Agreement and Acceptable Use Policies to ensure that the organisation is aware of their obligations when processing data and accessing patients 'demographic' records.
The use of the Professionals Portal will be limited to personnel within those organisations that have been on-boarded in to the service. There will be an application to complete that will outline terms of use, and role based access controls will be clearly defined.
The use of the Administrative Portal will be limited to those that are responsible for data quality management, and there will be clear roles and responsibilities, and standard operating protocols developed, prior to go-live to ensure appropriate use.
Audits will be carried out on a regular basis to ensure compliance and issues addressed in accordance with the appropriate use policies and the service level agreement.
This Privacy Policy will be updated to reflect organisations that are using the JHCI.
Where necessary, and in the event of a complaint or query relating to the processing of the data in scope of the JHCI, HCS may need to pass your personal data to the following organisations for the purposes stated above:
- the Government of Jersey's Data Protection Officer
- the Jersey Office of the Information Commissioner
We may also disclose information to other public authorities where it is necessary, either to comply with a legal obligation, or where required under other legislation. Examples of this include, but are not limited to:
- where the disclosure is necessary for the purposes of the prevention and / or detection of crime
- for national security purposes
- for the purposes of meeting statutory obligations
- preventing risk of harm to an individual
Service Providers
Your personal data may be processed on our behalf by certain third parties who provide service to us, so that they can provide those services. We have strict contracts in place with these service providers to ensure they process your data only on our instructions and with appropriate security in place. The categories of third parties who may receive your personal data in order to provide us with a service are:
- Synanetics: support and development for the JHCI
- Digital Services: support, development and security for the platform
- EMIS: support and development
At no time will your information be passed to organisations for marketing or sales purposes or for any commercial use without your prior express consent.
How long we store the information about you
We will keep your personal data accurate and up to date and not keep it for longer than is necessary in order to ensure that we have the correct details in which to contact you or manage your healthcare needs. Ask to see our retention schedule for more detail about how long we retain your information.
Where we store the information about you
Government of Jersey and Primary Care: General Practice systems store data in Jersey, the UK and the European Union. The UK has been granted adequacy status by the European Commission and personal data stored there will be protected to the same standards as personal data held in Jersey and the EU.
Your rights
Find details of your rights under the Data Protection Law and how to exercise them on your personal data rights.
Contact details
If you wish to contact the HCS in relation to this privacy policy or you have an enquiry or concern regarding the processing of your personal data via the JHCI, email the HCS Information Governance Team at
ig@health.gov.je.
Complaints
If you wish to make a complaint about how your personal data is processed via the JHCI, contact the Government of Jersey's Data Protection Officer at DPO@gov.je.
If you believe that HCS, in relation to the JHCI, has contravened the Data Protection Law and the contravention affects your data protection rights, you have the right to make a complaint at any time to the
Jersey Office of the Information Commissioner (JOIC).
We would, however, appreciate the chance to deal with your concerns before you approach the JOIC, so please contact the DPO in the first instance.
Changes to this notice
We may, from time to time, revise this privacy to ensure it remains up to date. It is advisable to check it regularly to keep aware of any changes.
gov.je