Privacy Information
Privacy Notice – Use of Your Personal Information and Artificial Intelligence (AI)
This Privacy Notice explains how Cyncoed Medical Centre collects, uses, shares and protects your personal information. It also explains your rights and who to contact if you have any questions about how your information is used.
Cyncoed Medical Centre is the Data Controller for the personal information we process, unless otherwise stated. You can contact the Practice by telephone, email or post. Further details can be found on our Practice Details webpage.
Practice Information Governance Lead
The Information governance Lead at the practice is the Practice Manager Sarah Thomas email -enquiries.w97010@wales.nhs.uk
Data Protection Officer
Under UK Data Protection legislation, the Practice is required to appoint a Data Protection Officer (DPO). This role is essential in facilitating the Practice accountability and compliance with data protection requirements.
The Practice DPO is:
DPO Support Service
Digital Health and Care Wales (DHCW)
Ty Glan-y-Afon
21 Cowbridge Road East
Cardiff
CF11 9AD
The Practice uses an Artificial Intelligence (AI) supported Care Navigator system to help improve patient access and administrative efficiency. The system currently enables patients to check, change and re-book appointments and submit repeat prescription and fit note (Med3) requests. As the service develops, it may also support the booking of nurse appointments, pre-bookable GP appointments and immunisation and vaccination appointments.
The AI Care Navigator may categorise patient requests and transcribe telephone interactions directly into the patient's clinical record to support accurate documentation and the efficient management of services. The system is used solely as a support tool and does not make decisions about your care. Responsibility for clinical decisions always remains with appropriately trained healthcare professionals.
We only process the minimum information necessary to provide your care and manage your requests safely and effectively. This may include your demographic details, appointment information and health information that you provide during your interactions with the Practice.
Your information is processed in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Common Law Duty of Confidentiality and NHS Wales Information Governance requirements. Appropriate technical and organisational measures are in place to protect your information and ensure it remains secure and confidential.
You have rights in relation to your personal information, including the right to be informed about how your information is used and to ask questions about the Practice's use of Artificial Intelligence technologies. If you would like further information, please contact the Practice Manager or the Data Protection Officer using the details above.