This practice is committed to preserving, as far as is practical, the security of data used by our information systems. This means that we will take all reasonable actions to;

Maintain the Confidentiality of all data within the practice by:

• Ensuring that only authorised persons can gain access to our systems
• Not disclosing information to anyone who has no right to see it

Maintain the integrity of all data within the practice by:

• Taking care over input
• Ensuring that all changes are reported and monitored
• Checking that the correct record is on the screen before updating
• Reporting all apparent errors and ensuring that they are resolved

Maintain the availability of all data by:

• Ensuring that all equipment is protected from intruders
• Ensuring that backups are taken at regular, predetermined intervals
• Ensuring that contingency is provided for possible failure or equipment theft and that any such contingency plans are tested and kept up to date

Additionally we will take all reasonable measures to comply with our legal responsibilities under:

• The Data Protection Act (2018)
• The Health and Safety at Work Act (1992)
• The Access to Health Records Act (1990)

There are many social media platforms that are widely used by both staff and patients; these include Facebook, Twitter, Instagram, YouTube and LinkedIn.

Meddygfa Canna Surgery has a duty to maintain patient confidentiality and to safeguard vulnerable patients. We also have a duty to protect our staff from unacceptable behaviour.  You can help us achieve this by adhering to the code of conduct outlined in this policy.

Patients at the Practice are expected to adhere to the following code of conduct at all times:

• The Practice requires all users of portable devices to use them in a courteous and considerate manner and respecting their fellow patients. Portable devices are not to be used during consultations.
• If you wish to make a recording of your consultation with your GP or Nurse, then all parties must agree.  Any recording must only be used for personal reasons (ie to recall any advice or treatment) and must not be shared without consent of all parties.
• Patients are not permitted to disclose any patient-identifiable information about other patients, unless they have the express consent of that patient.
• Patients must not post any material that is inaccurate, fraudulent, harassing, embarrassing, obscene, defamatory or unlawful regarding the Practice or staff members.
• Patients are not permitted to take photographs in the waiting room or areas where other patients are present, nor are photographs of staff permitted.
• Patients are not permitted to record/film/photograph any interaction with practice staff unless they have the express permission of all parties.  Filming and/or recording in communal areas such as Reception or waiting areas, where other patients can be overheard is also NOT PERMITTED, as they have privacy rights and no recording of other patients must be made without their consent.
• Patients must not post comments on social media that identify staff who work at the Practice.
• Patients are requested not to make contact with any staff at the Practice via social media.
• Defamotary comments about our team are not to be shared on social media on any platform. Legal advice will be sought and the appropriate action taken against any patient who does not abide by this, which could include removal from the practice list.

Patient complaints via social media

The Practice has a full, robust complaints procedure for patients who wish to make a complaint. We will only investigate and respond to complaints made in this manner in accordance with our complaints policy. If you wish to make a complaint, please contact the Practice directly for further information.