As data controllers, GPs have fair processing responsibilities under the Data Protection Act 2018 and the General Data Protection Regulation (GDPR). This means ensuring that your personal confidential data (PCD) is handled in ways that are safe, transparent and what you would reasonably expect. Please find documents and links below.
Data Protection Officer
The Practice Data Protection Officer is Paul Couldrey of PCIG Consulting Limited. Any queries regarding Data Protection issues should be addressed to him at: -
Email: [email protected]
Postal: PCIG Consulting Limited
7 Westacre Drive
Quarry Bank
Dudley
West Midlands
DY5 2EE
GDPR Privacy Notice v3.8 reviewed September 2025
Heidi AI
As part of the Digital First National programme of work, GP Practices are required to record accurate data about patient interaction, especially within consultations. To assist with this administrative task, the practice is using a new technology known as Heidi AI.
The primary purposes include improving clinical documentation, aiding healthcare professionals in notetaking, and generating consult summaries. Heidi technology enables clinicians to focus on patients during the consultation, contributing to improved patient care. It also acts as a valuable tool for medical practitioners, saving them hours of administrative time per week.
Heidi works by transcribing speech into text from a healthcare encounter such as conversations between clinicians and patients or by clinicians dictating their clinical findings, impression and/or management plans before, during and after the healthcare encounter. The clinician can also add additional contextual notes about the healthcare encounter.
This system is designed to alleviate the administrative burden on healthcare professionals, allowing them to focus more on patient care rather than paperwork. The Heidi Scribe will leverage natural language processing (NLP), speech recognition technology, and machine learning algorithms to understand and interpret complex medical dialogue, identify key health information, and categorise data into the appropriate sections of an Electronic Health Record (EHR).
Your consent will be sought for consultations that are transcribed using the Heidi AI tool. Heidi also uses aggregated de-identified information from these consults to improve its models and outputs, ultimately improving both patient care and clinician experience.
All Data that identifies you stays within the practice and its servers which are UK based, no identifiable data is used by the Heidi tool for machine learning.
Heidi AI will not make decisions about your care, it only transcribes verbal interactions with the practice, with your consent.
More information about the model can be found on the Heidi website here: -
https://www.heidihealth.com/uk
