Protecting your data
This privacy notice explains in detail the type of information (including personal data) that we, Heywood, Middleton and Rochdale (HMR) CCG, process about you. The CCG is a Data Controller. A Data Controller determines how the data will be processed and used within the CCG and with others who we share data with. We are legally responsible for ensuring that all personal data that we hold and use is done so in a way that meets the data protection principles under the General Data Protection Regulation (GDPR) and Data Protection Act 2018. This notice also explains how we handle that data and keep it safe.
The CCG also has a Caldicott Guardian. A Caldicott Guardian is a senior person within a health and social care organisation, preferably a health professional, who makes sure that personal information about those who use its services is used legally, ethically, appropriately and that confidentiality is maintained. The Caldicott Guardian for the CCG is: Dr Chris Duffy (HMR CCG Chair)
We will continually review and update this privacy notice to reflect changes in our services and to comply with changes in the law. When such changes occur, we will revise the last updated date as documented in the version status in the footer of this document.
What do we do?
Heywood, Middleton & Rochdale Commissioning Group is an NHS commissioning organisation. We are responsible for planning, buying and monitoring (also known as commissioning) health services from healthcare providers, such as hospitals and GP practices, for our local population to provide the highest quality of healthcare.
Accurate, timely and relevant information is essential for our work. This helps us design and plan current and future health and care services, evidence and review our services and manage budgets.
We also have a performance monitoring role of these services, which includes responding to any concerns or complaints (or if appropriate referring you to NHS England) for our patients regarding the services we offer.