You record is kept on a secure database that is maintained by the NHS in Hampshire. The data is never sent to other areas or companies outside the local NHS.
Access to the records is restricted to registered clinicians treating Hampshire patients and is only accessed through the secure NHS Network.
Viewing the record is only allowed with explicit consent from you. This means that you have to give permission for each person to access your record. This can be given for a once only view (i.e. at an Out Patient appointment) or for a period of time (i.e. when a District Nurse is treating you regularly). You can change your mind about this at any time.
The only time a clinician would be able to view this information without your permission is if you were unable to give this and there was a medical reason to see your record; for example if you were unconscious after an accident. If this did happen the clinician would have to give the reason why they accessed your record without your permission.
In all cases clinicians are aware that they will face disciplinary action if they misuse this service and may even lose their job.
Once the clinician has gained your consent, further controls, called Role Based Access Controls, ensures that they only see the type of information that is suitable for their job role.
On occasions, in order to help interpret the results of your laboratory tests, Pathology or Radiology specialists may need to access your care record - for example to see if any medicines you are taking or if you have any pre-existing conditions which may be affecting the results. This is no different from any other Healthcare Professional involved in your direct care accessing your health records for the purpose of delivering your healthcare. By agreeing to the test(s) you are also agreeing to the pathology specialists accessing your medical record where they feel this is appropriate.
http://www.nigb.nhs.uk/pubs/guidance/diagstaffguid
Every time anyone accesses your record and views any part of it a record is kept of who they were and what they did. This Audit Trail is regularly reviewed and is also available for you to see. If you would like to see the Audit Trail for your record then please contact the Hampshire Health Record Operational Team for more information.
Overall responsibility for the record is held by the Caldicott Guardians for the Hampshire Health Record. A Caldicott Guardian is a senior clinician or doctor who is governed by a strict set of rules and is responsible for ensuring your records are safe and only used to provide you with health care.
The Security and Consent Framework document identifies the data security and confidentiality arrangements in place to protect patient data within the Hampshire Health Record.