IT Policy

We recognise that the information you entrust to us is highly sensitive. We are committed to preserving the security and privacy of all data within our information systems to ensure your peace of mind and the highest standard of care.

Our Commitment to You

We take all reasonable actions to ensure your data is handled with care, accuracy, and absolute confidentiality. Our strategy is built on three core pillars:

1. Confidentiality: Keeping Your Data Private

We ensure that your personal and clinical information stays between you and your healthcare team.

  • Controlled Access: Only authorised personnel with a legitimate “need to know” can access our systems.
  • Strict Disclosure: We do not share information with third parties unless there is a legal right or a clinical necessity to do so.

2. Integrity: Ensuring Your Records are Accurate

Your health depends on accurate data. We maintain the highest standards of record-keeping by:

  • Identity Verification: Confirming the correct patient record is on-screen before any update is made.
  • Careful Input: Rigorous data entry standards to prevent errors.
  • Proactive Monitoring: Reporting and resolving any data discrepancies immediately.

3. Availability: Data When You Need It

We ensure that your medical history is available to your clinician at the point of care by:

  • System Protection: Safeguarding all hardware against theft, damage, or unauthorised intrusion.
  • Regular Backups: Performing automated backups daily.
  • Disaster Recovery: Maintaining and testing contingency plans to ensure service continuity in the event of equipment failure.

Legal and Regulatory Compliance

As a healthcare provider in Northern Ireland, we operate under a strict legal framework. We comply with all statutory responsibilities, including:

  • The UK General Data Protection Regulation (UK GDPR)
  • The Data Protection Act (2018)
  • The Access to Health Records (Northern Ireland) Order 1993
  • The Health and Safety at Work (Northern Ireland) Order 1978

Your Rights

Under data protection law, you have the right to access the information we hold about you. If you wish to make a Subject Access Request (SAR) or have concerns about how your data is handled, please contact our Practice Manager.

Privacy Note: This practice participates in the Northern Ireland Electronic Care Record (NIECR) to ensure that your clinical information is available to authorised health professionals treating you across the HSC.