As practices you are sharing your patients’ and staff’s personal data with other organisations and healthcare professionals.
You should consider whether you need to actively inform the data subjects about this.
This is a clear example of where it is appropriate to actively communicate a privacy notice and attached here are the GPC approved Privacy Notices for you to edit and publish on your websites and within your practices.
In order to treat people fairly prior to sharing information, you must carefully consider what any recipient organisation is going to do with it and what the effect on people is likely to be. It is good practice to obtain an assurance about this, for example in the form of a contract or a written data sharing agreement.
The following are templates for you to use:
More information on privacy statements can be found here.