GP Connect Privacy and Transparency Notice

​

Responsive Care Group Ltd (and Harris James, a Tradong name of Responsive Care Group Ltd) – Use of CareLineLive GP Connect Integration

​

Privacy Notice

 

At Responsive Care Group Ltd, we are committed to protecting the privacy and confidentiality of the people we support. As part of our delivery of high-quality care services, we use a secure system called CareLineLive, which integrates with GP Connect, a service provided by NHS England.

​

What is GP Connect and how do we use it?

​

GP Connect allows authorised clinicians and care professionals to securely access essential GP record information to support. At Responsive Care Group Ltd, we use CareLineLive’s secure connection to GP Connect to view up-to-date clinical information that may be relevant to your care and wellbeing. This may include medications, allergies, and medical history.

​

Access is strictly limited to authorised staff, and only for the purposes of providing you with safe, effective care.

​

Why is this important?

​

Having access to GP information through CareLineLive helps us:

​

• Support you more effectively during care visits.

​

• Reduce the need for repeated questions or delays in accessing important health information.

​

• Communicate more efficiently with NHS services involved in your care.

​

GP Connect is not used for any purpose other than direct care.

​

Who can access your data?

​

Only appropriately authorised Responsive Care Group Ltd staff involved in your care may access information via GP Connect through CareLineLive. Access is logged and monitored for safety, confidentiality, and audit purposes.

​

Legal basis for using this data

​

We access information through GP Connect under the same lawful basis as any other direct care provision:

​

• Article 6(1)(e) UK GDPR – “Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.”

​

• Article 9(2)(h) UK GDPR – “Processing is necessary for the purposes of preventive or occupational medicine, for the provision of health or social care or treatment, or the management of health or social care systems and services.”

​

This legal basis ensures we can support your care safely, appropriately, and in line with national standards.

​

Your rights

​

Your rights under UK GDPR remain unchanged when your data is accessed for direct care purposes. For more details about how we handle your information.

​

Deceased individuals

​

In the event that information about a deceased individual is required (e.g. by a Medical Examiner), records may be shared in line with the Access to Health Records Act 1990. While UK GDPR does not apply to deceased individuals, confidentiality duties remain and are respected accordingly.

​

Review and changes to this notice

​

This privacy notice may be updated to reflect changes in how we use GP Connect or CareLineLive. We encourage you to review it regularly.

​

Transparency Notice

​

Overview

​

At Responsive Care Group Ltd, we use CareLineLive, a secure digital care management platform, to access GP Connect. This enables our authorised staff to view key GP health record information where appropriate, to support direct care for individuals using our service.

​

GP Connect helps ensure that care staff involved in your support have timely access to relevant health information—such as current medications or allergies—where this is necessary to provide safe and effective care. This is particularly helpful when care is delivered away from your GP practice and where traditional communication routes (e.g. telephone, fax) are less secure or efficient.

​

How we use GP Connect

​

We only access information through GP Connect to support direct care. Our staff do not use the service for administrative, research, or indirect care purposes. Access is role-based and controlled, and audit trails are kept for transparency and security.

​

Information accessed through GP Connect via CareLineLive:

​

• Is only viewed by staff directly involved in providing your care

​

• Is subject to strict role-based access controls and information governance

​

• Remains confidential and is not stored outside the GP systems

​

We do not create or hold a copy of your full GP record.

​

Legal Basis for Accessing Your Information

​

We access GP Connect as part of our duty to provide direct health or social care. The lawful bases under the UK GDPR are:

​

• Article 6(1)(e) – Public task: processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority.

​

• Article 9(2)(h) – Special category data: processing is necessary for the provision of health or social care or the management of health or social care systems and services.

​

Your Rights

​

If your GP record is accessed using GP Connect, you have the following rights under UK GDPR:

​

• To be informed – This transparency notice and our main privacy notice explain how your data is used.

​

• To access – You can request a copy of the information accessed.

​

• To object – You can opt out of GP Connect by contacting your GP directly.

​

• To rectification – If the information in your GP record is incorrect, contact your GP to correct it.

​

• To restrict processing – You can ask that information not be processed while any concerns are being reviewed.

​

Please note that the National Data Opt-out does not apply to GP Connect, as it only covers data used for research or planning, not direct care.

​

Confidentiality and Security

​

All Responsive Care Group Ltd staff accessing GP Connect via CareLineLive:

​

· Are trained in data protection and confidentiality

​

• Agree to professional codes of conduct and system-specific conditions of access

​

• Access information only where necessary for the delivery of direct care

​

The GP Connect system and the CareLineLive platform have been assured by NHS England, and all access is auditable both within our organisation and by your GP.

​

Consumer and Provider Roles

​

• Providers are your GP practices who make the GP record available.

​

• Consumers are organisations like Responsive Care Group Ltd who access the record through approved systems like CareLineLive, for direct care purposes only.

​

Opting Out

​

If you do not wish for your GP record to be accessed via GP Connect, you must inform your GP practice, who will record your preference.

​

Medical Examiner Use Case

​

In the event of a death, your GP record may be accessed by a Medical Examiner. Although the UK GDPR does not apply to deceased individuals, access remains subject to confidentiality principles and the Access to Health Records Act 1990.