GDPR Data processing modelPatient management in a medical practice

PrivateHealthPublic

Processing of patient personal data for the purpose of telemedicine, appointment scheduling, healthcare record keeping, and administrative and accounting tasks related to private or public medical practice operations.

Purposes (6)

A purpose is the objective pursued by the setting up of your file. It indicates what the processing of personal data will be used for, its purpose. This purpose must be clear and understandable

telemedicine (physicians)

Legitimate interest

Art. 6(1)(f) Legitimate Interests and Art. 9(2)(h) – medical diagnosis and treatment

appointment scheduling

Legitimate interest

Art. 6(1)(b) Contract or 6(1)(f) Legitimate Interests, depending on patient relationship stage

bookkeeping

Legal obligation

Art. 6(1)(c) Legal obligation – accounting under UK Companies Act 2006 and HMRC retention rules

health care record keeping

Legal obligation

Art. 6(1)(c) Legal obligation, Art. 9(2)(h) – Records Management Code of Practice 2021

Telecare (paramedics/pharmacists)

Legitimate interest

Art. 6(1)(f) Legitimate Interests and Art. 9(2)(h) – medical diagnosis and treatment

medical record keeping

Legal obligation

Art. 6(1)(c) and Art. 9(2)(h) – required by NHS practice codes and medical professional guidance

Data categories (6)

Personal data is any information relating to an identified or identifiable natural person. A natural person can be identified either directly (eg surname and first name) or indirectly (eg phone number, social security number, email or postal address, but also voice or image)

health

Data details

any element likely to characterize the patient's healthrequiredsensitive data

nature of acts performedrequiredsensitive data

prescribed treatmentsrequiredsensitive data

Therapyrequiredsensitive data

medical diagnosesrequiredsensitive data

Medical Historyrequiredsensitive data

weight and sizerequiredsensitive data

Data conservation rules

Active base:

5 years

Intermediate archiving:

15 years

Destruction

Professional situation

Data details

working conditionsrequired

professionrequired

Data conservation rules

Active base:

5 years

Intermediate archiving:

15 years

Lifestyle & Family

depending on the context, as long as it is collected with the patient's consent and is necessary for the diagnosis and care of the patient

Data details

leisurerequired

diet and eating behaviorrequired

exercise

required

assistance

required

dependence

required

Data conservation rules

Active base:

5 years

Intermediate archiving:

15 years

Destruction

Audit trails

Data details

Technical audit trails

optional

Functional audit trails

optional

Data conservation rules

Active base:

5 years

Intermediate archiving:

15 years

Destruction

family situation

Data details

Number of childrenrequired

Marital status

required

Data conservation rules

Active base:

5 years

Intermediate archiving:

15 years

Destruction

Patient identification

Data details

Identifiant national de santé (INS) required

National Insurance numberrequiredsensitive data

phone numberrequired

Email addressrequired

Postal Addressrequired

Date of birth

required

name

required

First namerequired

Data conservation rules

Active base:

5 years in active base

Intermediate archiving:

15 years in intermediate archive

Destruction

Data subject (1)

A data subject is any person whose data is collected, retained or processed by the data processing. e.g. In a recruitement process, any candidate for a position proposed in recruitement management process

Other

Created at:07/08/2023

Updated on:07/07/2025

Nb using:3

GDPR Data processing modelPatient management in a medical practice

Purposes (6)

Data categories (6)

health

Professional situation

Lifestyle & Family

Audit trails

family situation

Patient identification

Data subject (1)

Access the full processing template