Accurx Scribe
Privacy Notice Statement: Use of Accurx Scribe at Crown Medical Centre
At Crown Medical Centre, we are committed to providing you with the best possible care, and this includes ensuring our clinical documentation is accurate and efficient. To support this, we are introducing Accurx Scribe powered by Tandem, a secure, cloud-based medical scribe platform that uses Artificial Intelligence (AI) to assist our clinicians with recording and summarising your consultations.
Why we are using Accurx Scribe: The primary purpose of using Accurx Scribe is to enhance the quality and efficiency of our clinical records, allowing our healthcare professionals to focus on listening to you rather than on typing or drafting documents. This aims to improve your consultation experience, ensure comprehensive and accurate documentation, and free up valuable time for direct patient care, ultimately improving care outcomes and productivity.
What data is collected and how it is used: During your consultation, if Accurx Scribe is turned on, the audio of the conversation between you and your healthcare professional will be captured. This audio stream is processed in real-time and automatically deleted as soon as it is transcribed. Accurx Scribe then generates a text transcription and an AI-assisted summary of your consultation, which can include sensitive health data such as symptoms, diagnoses, and treatment plans. Your patient demographic details (e.g., name, date of birth, gender, NHS number) will be obtained from the Personal Demographics Service (PDS) or our electronic medical systems to ensure the clinical notes are saved to your correct record. The email address of the healthcare professional is also processed for platform access.
How data is processed and stored: The transcription service and AI model processing occur securely within Microsoft Azure data centres located in the European Union (EU) and London. All personal data processed through Accurx Scribe is stored and handled exclusively within the EU. Patient data is not stored on user devices.
Data Retention:
· The audio stream is automatically deleted as soon as it is transcribed.
· Other outputs, such as transcriptions, clinical notes, and summaries, are retained as personal data for a period of 30 days within the Accurx Scribe product. This allows your healthcare professional time to review, edit, and save them to your permanent electronic medical record.
· After 30 days, the vast majority of these outputs are permanently and securely deleted. A very small fraction, specifically those substantially edited by the healthcare professional, are effectively anonymised (no longer considered personal data) and used exclusively for clinical safety purposes – never for AI model training or commercial use.
· Once saved to your EHR, your data will be retained according to NHS Records Management Code of Practice guidelines.
Who is involved in processing your data:
· Crown Medical Centre acts as the Data Controller, determining why and how your data is used.
· Accurx acts as the Data Processor, providing the platform and services.
· Tandem Health AB and Microsoft Azure are sub-processors involved in powering the service and providing cloud infrastructure.
Important safeguards:
· Human Oversight: Accurx Scribe is a supportive tool, not a decision-making system. All AI-generated outputs require mandatory Clinician review and validation before finalisation and integration into your record. No unsafe functionality is permitted, such as prompt injection.
· Data Security: Your data is encrypted across all sessions and at the point of storage on hardened Microsoft Azure infrastructure. Accurx is ISO 27001 certified, Cyber Essentials Plus certified, maintains DSPT annually (exceeding standards), and undergoes regular CREST-approved Pen Testing. Access to the platform is secured by NHS SSO or NHS email/password with mandatory two-factor authentication.
· No AI Model Training: Your identifiable patient data is explicitly not used to train models by Accurx or its sub-processors.
· GDPR Compliance: Accurx confirms full compliance with UK GDPR and the Data Protection Act 2018.
Your choices and rights:
· Right to be Informed: We will inform you about Accurx Scribe's use through this privacy notice, clear signage in our consultation rooms, and a verbal explanation from your Clinician at the start of your appointment.
· Right to Object: You have the explicit choice to object to the use of Accurx Scribe for your consultation. If you object, your Clinician will respect your decision and revert to traditional manual note-taking methods, noting your objection in your record.
· Right of Access: You have the right to request access to your personal data, including the summaries and transcriptions generated by Accurx Scribe, which will be retrievable.
For further information on how your data is used, your rights, or to raise any concerns, please speak to a member of our practice team or refer to our full practice privacy notice.
Heidi Health
We are also trialling a useful AI (Atrificial Intelligence) dictation tool to record patient consultations, called Heidi Health. This tool will transcribe the data and input it into your medical records. The purpose of using this tool, is to allow the Clinician to focus entirely on your during your consultation, whilst still allowing them to accurately capture medical information. The clinicians will ask for your consent before using Heidi and you can withdraw your consent ay any time. The data is transcribed by Heidi simultaneously while they happen, meaning that no recordings are ever stored with Heidi.
If you would like more information or have any questions, please ask your Clinician or visit Resource Centre | Heidi Health.
