Who We Share Personal Information With

Everyone working within the NHS has a legal duty to keep information about you confidential. Similarly, anyone who receives information from us has a legal duty to keep it confidential.

We will share information with the following main partner organisations:

  • Other NHS trusts and hospitals that are involved in your care
  • Integrated Care Board (ICB) and other NHS bodies (see below)
  • General practitioners (GPs)
  • Ambulance services

You may be receiving care from other people as well as the NHS, for example Social Care Services. We may need to share some information about you with them so we can all work together for your benefit if they have a genuine need for it or we have your permission. Therefore, we may also share your information, subject to strict agreement about how it will be used, with:

  • Social care services
  • Education services
  • Local authorities
  • Voluntary and private sector providers working with the NHS

We will not disclose your information to any other third parties unless: 

We have your permission

  • We have to share by law
  • We have good reason to believe that failing to share the information will put you or someone else at risk of serious harm or abuse
  • We hold information that is essential to prevent, detect, investigate or punish a serious crime

Please ask our staff if you have any concerns or would like further information. Alternatively you can contact the Information Governance Team, Mary Seacole Building, Willerby Hill, Willerby, HU10 6ED, Tel: 01482 477854 or email: HNF-TR.IGTeam@nhs.net.

National Record Locator Service

The Trust is part of the NHS Digital National Records Locator Service (NRLS).  When you contact the Ambulance Service or NHS 111 they can use the NRLS to see if you are receiving a mental health service and get a Trust contact number for further information to help them make decisions about how best to treat you.

The NRLS is secure and confidential and can only be accessed by healthcare professionals directly involved in your care.

Only your NHS number, the type of records and the contact number of someone at the Trust will be shared with the NRLS.

If you do not want to be part of the NRLS, please contact your Care Worker or the Team involved in your care.

Integrated Care Board (ICB)

ICBs are responsible for planning the health needs of their patients, and for paying to keep their local health services running. Information in computerised form is sent to ICBs, with your name and address removed, but including NHS numbers and postcodes. Exactly the same information is sent to the Office of National Statistics which produces information about the performance of hospitals.

East Riding Health & Care Partnership and Hull Health and Care Partnerships

The Trust works with both Hull and East Riding Health and Care Partnerships. Information will be shared amongst partners to support strategic, tactical and operational level decision making for the benefit of the people of Hull and East Riding. Partners in the Partnerships may share information for the following purposes:

  • Understanding demand for public
  • Determining the heaviest users of public
  • Ensuring that appropriate agencies are engaged within their statutory remit with individuals.
  • Commissioning partners to undertake interventions within their statutory
  • Improved shared decision making at a strategic, tactical and operational level, specifically at an individual person / patient level for direct care
  • Monitoring the effectiveness of

 Each flow of information will be supported by a data protection impact assessment. Only the minimum data required to fulfil the purpose will be shared between Partners and where possible aggregated, annonymised or pseudonymised data will be used. If partners need to share identifiable data they will, wherever possible, obtain consent from an individual prior to the sharing to satisfy Common Law Duty of Confidentiality however, there may be times when this is not achievable and the benefits of sharing outweighs obtaining consent in advance.  As soon as is practicable, informed consent will be obtained.

The organisation wanting to share data is responsible for obtaining and recording informed consent. If consent is subsequently withdrawn that agency is responsible for informing partners promptly.

Partners include but are not limited to NHS Humber & North Yorkshire Integrated Care Board, General Practices, Acute Trusts, Social Care Providers and Voluntary Sector Providers within the geographical areas.

Integrated Neighbourhood Teams (INT)

The INT framework involves health and care teams from across primary care, community care, mental health and social care as well as third sector partnerships, working together in collaboration to improve wider population health and reducing health and social inequalities.

The primary aims of Integrated Neighbourhood Teams as defined by the Fuller Report are:

  • streamlining access to care and advice for people who get ill but only use health services infrequently: providing them with much more choice about how they access care and ensuring care is always available in their community when they need it
  • providing more proactive, personalised care with support from a multidisciplinary team of professionals to people with more complex needs, including, but not limited to, those with multiple long-term conditions
  • helping people to stay well for longer as part of a more ambitious and joined-up approach to prevention.

If a Partner thinks an individual would benefit from the INT framework, then where possible the individual will be informed that they will be discussed by the organisation raising a concern and will have the opportunity to object to their information being shared. 


Sometimes we undertake studies for which we may ask you for additional co-operation; these studies may involve you in extra tests or visits to the hospital. You always have a choice whether or not to be involved after being given detailed information. If you choose not to take part this will not affect your future treatment in any way.

Please click here for further information about patient information and health and care research.

National Drug Treatment Monitoring Scheme

The Trust shares information about drug and alcohol treatment with the National Drug Treatment Monitoring Scheme (NDTMS).  This is only done with the explicit consent of the patient.  For further information, please see NDTMS: privacy notice - GOV.UK (www.gov.uk)

Primary Care Networks

Our practices are part of a Primary Care Network (PCN). Practices within the PCN work together to create more collaborative workforces which ease the pressure of GP’s, leaving them better able to focus on patient care.

Primary Care Networks form a key building block of the NHS long-term plan. Bringing general practices together to work at scale has been a policy priority for some years for a range of reasons, including improving the ability of practices to recruit and retain staff; to manage financial and estates pressures; to provide a wider range of services to patients and to integrate with the wider health and care system more easily. 

This means we may share your information with other practices within the PCN to support the provision of care and treatment. For example, if you attend a clinic appointment at another practice within the PCN, it is essential that the treating clinician has access to your health record.

The PCN employs health care staff to support practices to improve patient care. PCN health care staff may need access to patient level data to perform their role for the practice. For example, to review patient data to support Early Cancer Diagnosis as required by the PCN contract. Further information can be found NHS England » Network Contract DES.The PCN staff will be acting as our data processor and are covered by a data processing agreement. 


NHS England has been directed by the Government to establish and operate the OpenSAFELY service. This service provides a Trusted Research Environment that supports COVID-19 research and analysis.

Trust GP practices remains the controller of its own patient data but is required to let researchers run queries on pseudonymised patient data. This means identifiers are removed and replaced with a pseudonym, through OpenSAFELY.

Only researchers approved by NHS England are allowed to run these queries and they will not be able to access information that directly or indirectly identifies individuals.

Additional information about OpenSAFELY can be found here.

Clinically-Led workforcE and Activity Redesign (CLEAR)

The Trust is taking part in the Clinically-Led workforcE and Activity Redesign (CLEAR) | Health Education England (hee.nhs.uk) to look at new ways or working and delivering care. This will involve disclosing de-identified patient data to 33n, the company supporting the programme. Data will include a local patient identifier, referral ID, ethnicity, gender, age, structured health data. This is covered by an information sharing agreement and all data will be held and transferred securely. For further information on how 33n will process this data CLEAR and data privacy - CLEAR (clearprogramme.org.uk)


From time to time, staff caring for you may be accompanied by students for teaching purposes. You have the right to refuse the presence of a student. If you have strong feelings about this or require any further information do not hesitate to let staff know.

SMS Text messaging, telephone and videoconferencing

Your contact details are important to us; ensuring that we can contact you in regard to appointment bookings, appointment cancellations and as a means of reminding you of your forthcoming appointments. The contact information we store will only be used by us in relation to your care and treatment.  We will not pass on your information to any other party.  You will be asked for your agreement to contact you in this way.

We may offer you a consultation via telephone or videoconferencing.  By accepting the invitation and entering the consultation you are consenting to this.  Your personal/confidential patient information will be safeguarded in the same way it would with any consultation.

Sending Data to other countries

Sometimes your data may be processed outside of the UK. In most circumstances it will remain in the European Economic Area (EEA) and will have the same protection as if processed within this country.  When it is outside the EEA we will identify the data protections in place prior to transfer.