Privacy Notice, Medical Records and Use of Artificial Intelligence (AI)
Privacy Notice, Medical Records and Data Protection
Riverside Medical Practice is committed to protecting your personal information and ensuring your medical records are used safely, appropriately and in line with data protection legislation.
How we use your information
The practice complies with data protection and access to medical records legislation. Identifiable information about you will only be shared with others where it is appropriate and necessary.
Information may be shared in the following circumstances:
- To provide further medical treatment for you, for example from district nurses and hospital services.
- To help you access other services, for example social services. This requires your consent.
- When we have a duty to others, for example in child protection cases.
- Anonymised patient information may also be used at local and national level to help the Health Board and Government plan services, for example diabetic care. This information would not identify you.
If you do not wish anonymised information about you to be used in this way, please let us know.
Notice to Patients: Improving Your Care with Artificial Intelligence (AI)
We are committed to providing patients with the highest standard of healthcare. As part of this, we are now using NHS-approved, GDPR-compliant Artificial Intelligence (AI) tools to support daily clinical practice.
How are we using AI?
We are using AI to support our clinicians in three main areas:
- Consultation Support: During your appointment, AI software may listen to, or transcribe, the conversation between you and the doctor or nurse. This allows the clinician to focus fully on you, rather than looking at a computer screen to type notes.
- Documentation: The AI helps draft clinical notes and letters. This reduces administrative workload for our doctors, allowing them to spend more time on clinical decisions and patient care.
- Workflow and Safety: We use AI to help prioritise clinical tasks, flag potential medication interactions, and remind us of necessary health checks, helping ensure nothing is overlooked.
What does this mean for you?
- Human Oversight: All clinical decisions are made by your doctor or nurse, not by a computer. AI is a tool to assist us; it does not replace professional judgement.
- Privacy and Security: We take data protection seriously. All AI systems used in this practice comply with UK GDPR and NHS data security standards. The software is securely integrated with our clinical systems, and your information is not shared with third parties for commercial use.
- Transparency: We will always let you know if AI is being used during your consultation.
Your Choice
You have the right to decline the use of AI transcription or documentation tools during your appointment.
If you have any concerns, or if you would prefer that we do not use AI for your consultation, please speak to the clinician at the start of your appointment. Your decision will not affect the quality of care you receive.
Welsh GP Record
The Welsh GP Record is a summary of important information from your full GP medical record. It is available to selected health professionals in Out of Hours services and certain secondary care providers.
Your Welsh GP Record includes:
- Your name, address and contact details.
- Current medication and medication you have been prescribed in the last two years.
- Allergies or any adverse reactions.
- Current problems or diagnosis.
- Results of any recent tests you have had in the previous year, for example blood tests and X-rays.
It does not include any private discussions you may have had with your GP.
More information is available on the Digital Health and Care Wales Welsh GP Record FAQ page.
Management of Records
Records and information management are key elements within the Information Governance agenda. They help ensure that we have the right information at the right time to make the right decisions.
Organisations are required to create and manage records appropriately, as set out in the requirements of the UK General Data Protection Regulation, the Data Protection Act 2018 and the Freedom of Information Act 2000.
Various standards and legislation govern the use of records within an organisation. These can include, but are not limited to, administrative records, paper and electronic documents, emails, audio and video recordings, X-rays and CCTV footage.