PKB Relationships

PKB allows for patients to take control of their health record and to facilitate the sharing of their health information between provider organisations

​

Patient Record

PKB

PKB Platform

1. When a care Provider (normally within a local collaboration/sharing arrangement) contracts with PKB, they send a copy of the patient’s health record to PKB. This creates the PKB Patient Record.

PKB act as a Processor on behalf of the Provider (Controller).

Patient Account

PKB

PKB Platform

2. When a patient first logs-in to PKB, they create a Patient Account. PKB is singularly the Controller for data contributed by the patient to this account by the patient until it is accessed by a Provider.

Patient Account

Patient Record

PKB

PKB Platform

3. If accessed by a Provider, PKB and the Provider are Joint Controllers for the data accessed by the Provider which is provided by the patient.

Data in the Patient Account and the Patient Record can be accessed by the patient and anybody else to who they choose to give access. They can also choose to restrict what Providers can see when shared between themselves.

Patient Account

Patient Record

PKB

PKB Platform

4. Further Providers can contract with PKB and add to the Patient Record of patients in common. 

​

The patient is able to determine with who they share their personal data once they have activated their Patient Account. 

Joint Data Controllers

5. When a Provider ends the contractual relationship with PKB, PKB will destroy or return (at the choice of the Provider) the Patient Records

Patient Record

PKB

PKB Platform

Joint Data Controllers

Patient Account

6. When a Provider ends the contractual relationship with PKB, PKB will retain the Patient Account for 8 years after the record was last accessed by the patient. 

PKB

PKB Platform

Key Notes

• PKB and Provider organisations act as Joint Controllers data within the Patient Account which has been accessed by the Provider.
• PKB act as Processor for the Patient Record.
• PKB act as Controller for the Patient Account where it has not been accessed by the Provider
• PKB can rely on 6(1)(f) and 9(2)(h)/9(2)(g)
• Data subjects are able to decide who to share the personal data within PKB with
• Data is retained until 8 years after last activity on an individuals account

Version Control