Your Data - Why it Matters

Overview

The NHS wants to make sure you and your family have the best care now and in the future. Your health and adult social care information supports your individual care. It also helps us to research, plan and improve health and care services in England.

Unless you have chosen to opt out, your confidential patient information can be used for research and planning.

Your confidential patient information

Confidential patient information identifies you and says something about your health care or treatment. Information that only identifies you like your name and address is not confidential patient information.

Using your confidential patient information

Your confidential patient information is used in two different ways:

Your individual care

Health and care professionals may use your confidential patient information to help with your treatment and care. For example, when you visit your GP, they may access your records for important information about your health.

Research and planning

Confidential patient information is also used to:

• plan and improve health and care services.
• research and develop cures for serious illnesses.

Where you have a choice

If you don’t want your confidential patient information to be used for research and planning, you can opt out of this.

Manage your choice

You may use the NHS online service. If you do not wish to opt out, you don’t have to do anything at all.

Benefits of data sharing

Research

• Prevent serious illness.
• Develop new treatments.
• Learn more about diseases.

Your confidential patient information provides numerous benefits. It is used in research to find cures and better treatments for diseases like diabetes and cancer.

With your data, we are better able to develop and improve health and care services for the future.

Planning

• Plan NHS health services.
• Make services safer.
• Improving quality of care.

Confidential patient information can also be used to plan health and care services more effectively. The NHS and local authorities can plan where they need to provide further care services more efficiently.

This helps to improve health and social care for you and your family.

How your data is used

The NHS collects health and care data from all NHS organisations, trusts and local authorities. Data is also collected from private organisations, such as private hospitals providing NHS funded care. Research bodies and organisations can request access to this data.

Research bodies and organisations include:

• university researchers.
• hospital researchers.
• medical royal colleges.
• pharmaceutical companies researching new treatments.

Most of the time, anonymised data for research and planning is used. So your confidential patient information isn’t always needed. If you do opt out, data that does not identify you may still be used.

Who can’t use your data

There are very strict rules on how your data can and cannot be used, and you have clear data rights.

Access to confidential patient information will not be given for:

• marketing purposes.
• insurance purposes (unless you specifically request this).

How your data is protected

Protection of your confidential patient information is taken very seriously and is looked after in accordance with good practice and the law.

Every organisation that provides health and care services will take every step to:

• ensure data remains secure.
• use anonymised data whenever possible.
• use confidential patient information to benefit health and care.
• not use confidential patient information for marketing or insurance purposes (unless you specifically request this).
• make it clear why and how data is being used.
• respect your decision if you decide to opt out.
• only use information about you where allowed by the law.

All NHS organisations must provide information on the type of data they collect and how it is used.

Data release registers are published by NHS Digital and Public Health England, showing records of the data they have shared with other organisations.

• Public Health England data release register
• More information on your data rights
• More information on how we protect your data

Privacy Notice: Use of AI Clinical Note-Taking Technology (Lyrebird) 

Introduction 

Denton Medical Practice is committed to providing high-quality, safe, and efficient healthcare services while protecting your personal information. 

To support clinicians during consultations, we may use an NHS-approved artificial intelligence (AI) clinical note-taking tool called Lyrebird. This privacy notice explains how Lyrebird works, how your information is used, and your rights as a patient. 

 

What is Lyrebird? 

Lyrebird is an AI-powered clinical documentation tool that assists healthcare professionals by listening to conversations between patients and clinicians during appointments. 

The system creates a draft version of the consultation notes or clinic letter in real time, allowing clinicians to spend more time focusing on patients rather than typing or writing notes. 

Lyrebird is registered as a medical device and has been designed specifically for use within healthcare settings. 

 

Why do we use Lyrebird? 

We use Lyrebird to: 

• Improve the quality and accuracy of clinical records. 

• Allow clinicians to focus more on patient care and communication. 

• Reduce administrative workload. 

• Improve efficiency in producing clinical documentation and correspondence. 

• Support timely communication with patients and other healthcare professionals. 

The use of Lyrebird does not replace clinical judgement. All decisions regarding your care remain the responsibility of your healthcare professional. 

 

What information is collected? 

If Lyrebird is used during your consultation, the system temporarily processes: 

• Your spoken conversation with the clinician. 

• Information you provide about your symptoms, medical history, medications, and treatment plans. 

• Relevant information discussed during your appointment. 

No decisions about your care are made by the AI system. 

 

What happens during my appointment? 

If your clinician is using Lyrebird: 

1. They will explain the technology and ask for your consent before using it. 

2. A microphone connected to the consultation system will capture the conversation. 

3. Lyrebird will generate a draft clinical note or letter during the consultation. 

4. The clinician will review, edit where necessary, and approve the document before it is saved to your medical record or shared with other healthcare providers. 

The appointment itself will otherwise proceed as normal. 

 

What is the legal basis for processing my information? 

The Practice processes personal and special category health information under the following legal bases: 

UK GDPR Article 6 

• Article 6(1)(e) – Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority. 

UK GDPR Article 9 

• Article 9(2)(h) – Processing is necessary for the provision of health or social care and treatment. 

Where consent is sought for the use of Lyrebird during a consultation, this is to provide you with choice and transparency regarding the use of the technology and does not replace the Practice's legal obligations to maintain accurate medical records. 

 

Is my information safe? 

Yes. Protecting your information is extremely important to us. 

The following safeguards are in place: 

• Audio recordings are used solely to generate consultation notes. 

• Once the draft note has been produced and approved, the audio recording is automatically and permanently deleted. 

• Audio recordings are not retained as part of your medical record. 

• Information is processed within secure environments that meet NHS information governance requirements. 

• Data is not used to train AI systems. 

• Data is not sold, shared with third parties, or used for marketing purposes. 

• Access to information is restricted to authorised healthcare professionals and approved technical support personnel where necessary. 

 

Data Protection and Security 

Lyrebird: 

• Complies with UK GDPR and Data Protection Act 2018 requirements. 

• Meets NHS Digital and NHS information governance standards. 

• Has undergone a Data Protection Impact Assessment (DPIA). 

• Is registered with the Medicines and Healthcare products Regulatory Agency (MHRA) as a medical device. 

 

Do I have to agree to Lyrebird being used? 

No. 

The use of Lyrebird is entirely voluntary. 

Before the system is activated, your clinician will ask for your permission. 

You may: 

• Agree to its use. 

• Decline its use. 

• Withdraw your consent at any point during the consultation. 

If you choose not to use Lyrebird, your consultation will continue in the usual way and this will not affect your care, treatment, or access to services. 

You will be asked for your consent at each appointment where the technology may be used. 

 

Who do we share information with? 

Information contained within your approved clinical record may be shared in the normal way with organisations involved in your care, including: 

• NHS Trusts 

• Other healthcare providers involved in your treatment 

• Community healthcare services 

• NHS England, where required by law 

We only share information where there is a lawful basis to do so. 

The temporary audio used by Lyrebird is not shared beyond what is necessary to produce the clinical note. 

 

How long is information kept? 

Clinical records created from your consultation are retained in accordance with the NHS Records Management Code of Practice. 

The temporary audio recording used by Lyrebird is automatically deleted once the draft documentation has been generated. A transcript of the consultation is retained for 7 days and then automatically deleted and is not retained as part of your health record. 

 

Your Rights 

Under UK GDPR, you have the right to: 

• Be informed about how your information is used. 

• Access your personal information. 

• Request correction of inaccurate information. 

• Request restriction of processing in certain circumstances. 

• Object to processing where applicable. 

• Complain to the Information Commissioner's Office (ICO). 

For further information about your rights, please contact the Practice. 

 

Contact Us 

Denton Medical Practice 
Telephone: 01613208788 
Website: www.dentonmedical.co.uk 

Data Protection Queries 

If you have any questions about how your information is processed, please contact the Practice Manager. 

Information Commissioner's Office (ICO) 

Website: www.ico.org.uk 
Telephone: 0303 123 1113 

 

Manage your choice

Use the service to request that your confidential patient information is not used beyond your own individual care.

If you decide to opt out, this will be respected and applied by NHS Digital and Public Health England. These organisations collect, process and release health and adult social care data on a national basis. Your decision will also be respected and applied by all other organisations that are responsible for health and care information by March 2020.

An opt-out will only apply to the health and care system in England. This does not apply to your health data where you have accessed health or care services outside of England, such as in Scotland and Wales.

If you choose to opt out, your data may still be used during some specific situations. For example, during an epidemic where there might be a risk to other people’s health.

More information on where opt-outs don't apply

Before you start

You must have an email address or phone number registered with an NHS service to continue online.

To continue you will need:

• to be aged 13 or over.
• access to your email or mobile phone.
• your NHS number or postcode registered with your GP.

Start now

Other ways to manage your choice

There are other ways to manage your choice if you are unable to use the online service or wish to set a choice on behalf of someone else.