Privacy notice - Medical Interoperability Gateway (MIG)

This document details the privacy notice for the Medical Interoperability Gateway (MIG)

Publication date:
27 May 2020
Date range:
May 2020 - May 2021

Introduction

The Kent and Medway NHS and Social Care Partnership Trust keeps data about you relating to who you are, where you live, what you do, your family, possibly your friends, your employers, your habits, your problems and diagnoses, the reasons you seek help, your appointments, where you are seen and when you are seen, who by, referrals to and from specialists and other healthcare providers, tests carried out both here and in other places, investigations and scans, treatments and outcomes of treatments, your treatment history, the observations and opinions of other healthcare workers, within and without the NHS as well as comments and aide memoires reasonably made by healthcare professionals in this organisation who are appropriately involved in your health care.

When registering for NHS care within KMPT, all patients who receive care are registered on a organisational database, which is held by KMPT and hosted by Servelec,, a third party company which has legal responsibilities to protect your information. This system is called OpenRiO.

We work as a partnership organisation for mental health services and may need to share some clinical information with other groups of professionals involved in the provision of care. In order to enable us to do this safety and securely, KMPT have joined together with the Clinical Commissioning Groups, Hospital Trusts and Community Trusts based within the Kent and Medway area to commission a Patient Information Platform PIP, using the Medical Interoperability Gateway (MIG).

The MIG provides:

  • Support for viewing of GP record and GP Care Plan by IC24 (Out of Hours providers (OOH)), Kent Community Health NHS Foundation Trust( KCHFT), Kent and Medway NHS and Social Care Partnership Trust (KMPT), Pilgrims Hospice, South East Coast Ambulance Service (SECAmb), North East London Foundation Trust (for children’s services) and Connect Health (musculoskeletal and physiotherapy services)
  • Support for viewing your provider record, i.e. East Kent Hospitals University Foundation Trust, Kent Community Health Foundation Trust, etc. by your GP
  • The ability for the GP and provider system to receive updates to Care Plan from Out of Hours Provider, Kent Community Health Foundation Trust, Kent and Medway Social Care and Partnership Trust, Pilgrims Hospice, South East Coast Ambulance Service, Kent County Council via a mailbox system in the GP clinical system
  • The ability for the GP system to receive/view data provided by providers such as EKHUFT

Please be reassured, that only those with a legitimate need to access your information for direct care purposes will be able to. Every time someone accesses your record they will leave what we call an ‘audit trail’. These ‘audit trails’ are monitored regularly and if anyone is found to have accessed your record inappropriately, then disciplinary action will be taken.

You have the right to object to our sharing your data in these circumstances but we have an overriding responsibility to do what is in your best interest.

We are required by Articles in the General Data Protection Regulations to provide you with the information in the following 9 subsections.