What happens to patient data during the pilot
One principle: the less data reaches us, the better for both sides. Below are three ways of working, ordered from the safest. In dietetics they cover data from plans and consultations; in law firms, client data and case files under professional privilege.
Three ways of working
Option A is the first choice and option C the last resort. Which one applies is decided by what can be done at your end, not by what is convenient at ours.
| Option | What it means | Personal data at our end | Processing agreement |
|---|---|---|---|
| A | you anonymise the set yourselves | none reaches us | not needed |
| B | we work inside your system, on written authorisation | never leaves you | depends on the scope |
| C | you entrust a limited scope of data | a limited scope | full, on European Commission clauses |
What anonymisation means
Names, addresses, national identity numbers, telephone numbers, email addresses and document numbers come out of the export. We help with that process: we advise which fields to cover and how, and the data stays in your infrastructure.
What remains is the description of the case, an age band, the dates of visits and the record of what was done.
The record in your program
- name
- Anna Kowalska
- identity number
- 92040512345
- telephone
- 600 100 200
- address
- ul. Polna 14, Warsaw
- date of birth
- 05.04.1992
- record number
- K-2211
- case description
- painful shoulder syndrome, acute phase
- visits
- 11
- period
- 03.2024-06.2024
- what was done
- manual therapy, home exercises
What reaches us
- name
- removed
- identity number
- removed
- telephone
- removed
- address
- removed
- age
- 30-39
- record number
- K-2211
- case description
- painful shoulder syndrome, acute phase
- visits
- 11
- period
- 03.2024-06.2024
- what was done
- manual therapy, home exercises
Which fields we accept
- the record number, your own
- the description of the case, as text
- the number of visits and the period
- the record of what was done
What we do not do with the data
- we pass the set to nobody outside the pilot team
- we do not combine your set with another facility's
- we use the set for nothing except the pilot with you
- we publish no extract of any document, including in material about the project
Deleting the set
We delete the set within fourteen days of the pilot ending, or immediately on your written request. We confirm the deletion in writing.
This document describes how the pilot is intended to work and does not replace an agreement.