Picture of Mercers Medical Centre clocktower

Privacy Statement and GDPR

Practice Privacy Statement and GDPR

Practice Name

Mercer's Medical Centre

Practice Addres 

Stephen Street Lower, Dublin 2, D02 P294

Practice Phone Number 

01 4022300 

Data Controller

Dr. Kilian McGrogan on behalf of the Royal College of Surgeons in Ireland

Lead for Data Protection

Veronica Quadu, Practice Manager 

Practice Privacy Statement

This Practice wants to ensure the highest standard of medical care for our patients. We understand that a General Practice is a trusted community governed by an ethic of privacy and confidentiality. Our approach is consistent with the Medical Council guidelines and the privacy principles of the Data Protection Regulations. It is not possible to undertake medical care without collecting and processing personal data and data concerning health. In fact, to do so would be in breach of the Medical Council’s ‘Guide to Professional Conduct and Ethics for Doctors’. This leaflet is about advising you of our policies and practices on dealing with your medical information.

Legal Basis for Processing Your Data

This practice has signed up for the ICGP Data Protection Guideline for GPs. The processing of personal data in general practice is necessary in order to protect the vital interests of the patient and for the provision of health care and public health. You can access the Guideline at http://www.icgp.ie/data

Managing Your Information

In order to provide for your care here we need to collect and keep information about you and your health on our records. 

Disclosure of Information to Other Health and Social Care Professionals

We may need to pass some of this information to other health and social care professionals in order to provide you with the treatment and services you need. Only the relevant part of your record will be released. These other professionals are also legally bound to treat your information with the same duty of care and confidentiality that we do.

Disclosures Required or Permitted Under Law

The law provides that in certain instances personal information (including health information) can be disclosed, for example, in the case of infectious diseases.

Disclosure of information to Employers, Insurance Companies and Solicitors:

Use of Information for Training, Teaching and Quality Assurance

It is usual for clinicians to discuss patient case histories as part of their continuing medical education or for the purpose of training clinicians and/or medical students. In these situations the identity of the patient concerned will not be revealed.

In other situations ,however, it may be beneficial for other doctors within the practice to be aware of patients with particular conditions and in such cases this practice would only communicate the information necessary to provide the highest level of care to the patient.

Our practice is involved in the training of GPs and is attached to a General Practice Training Programme. As part of this programme GP Registrars and Interns will work in the practice and may be involved in your care.

Use of Information for Research and Audit

It is usual for patient information to be used for research and audit in order to improve services and standards of practice. GPs on the specialist register of the Medical Council are required to perform yearly clinical audits. Information used for such purposes is done in an anonymised or pseudonymised manner with all personal identifying information removed.

If it were proposed to use your information in a way where it would not be anonymous or the Practice was involved in external research we would discuss this further with you before we proceeded and seek your written informed consent. Please remember that the quality of the patient service provided can only be maintained and improved by training, teaching, audit and research.

Your Right of Access to Your Health Information

You have the right of access to all the personal information held about you by this practice. If you wish to see your records, in most cases the quickest way is to discuss this with your doctor who will review the information in the record with you. You can make a formal written access request to the practice and receive a copy of your medical records. These will be provided to you within thirty days, without cost.

Transferring to Another Practice

If you decide at any time and for whatever reason to transfer to another practice we will facilitate that decision by making available to your new doctor a copy of your records on receipt of your signed consent. For medico-legal reasons we will also retain a copy of your records in this practice for an appropriate period of time.

Other Rights

You have other rights under data protection regulations in relation to transfer of data to a third country, the right to rectification or erasure, restriction of processing, objection to processing and data portability. Further information on these rights in the context of general practice is described in the Guideline available at http://www.icgp.ie/data. You also have the right to lodge a complaint with the Data Protection Commissioner.

Categories of Personal Data

Category of Personal Data

Purpose of Processing

Lawfulness of Processing

name, address, contact details (phone, mobile, email), dates of appointment

Necessary to support the administration of patient care in general practice

Article 6.1(d): processing is necessary in order to protect the vital interests of the data subject or of another natural person;


Special Categories are processed under the derogations in Articles 9.2(h) and 9.2(i). Please see the notes under this table.

Medical Record:

Individual Health identifier, GMS number, PPSN, date of birth, religion, sexual orientation, gender, family members, family history, contact details of next of kin, contact details of carers, vaccination details, medication details, allergy details, current and past medical and surgical history, genetic data, laboratory test results, imaging test results, near patient test results, ECGs, Ultrasound scan images, and other data required to provide medical care.

Necessary to provide patient care in general practice.


The PPS number is needed for specific schemes such as sickness certification (Department of Social Protection), childhood immunisation programme, mother and child scheme, cervical screening, etc. (HSE).

Account Details:
record of billable services provided, patient name, address, contact details, billing and payment records for GMS and private patients

Required for providing a service and billing. Also required for submission of reimbursement claims to the HSE Primary Care Reimbursement Service.

Article 6.1(c): processing is necessary for compliance with a legal obligation to which the controller is subject (Revenue, Medical and Legal Obligations), and Article 6.1(b) in relation to getting paid for providing a service to private patients.


Recipients with whom we share personal data

Categories of Recipient


Health and Social Care Providers

Other GPs, Health Service Executive, Voluntary Hospitals, Private Hospitals and Clinics, Private Consultants, Physiotherapists, Occupational Therapists, Speech and Language Therapists, Social Workers, Palliative Care Services, Out of Hours Services, Pharmacies, Nursing Homes, Counselling Services, Diagnostic Imaging Services, Hospital Laboratories, and other health care providers

Data Processors, with a contract

GP Practice Software Vendor (Clanwilliam Health), Online Data Backup Companies (RCSI), Healthlink

Legal Arrangements

Coroner, Revenue, Social Protection, Medical Council

Public Health

Infectious disease notifications, influenza surveillance

Third Parties, with explicit patient consent

Solicitors, Insurance Companies, Health Insurance Companies, Banks


We hope this leaflet has explained any issues that may arise. If you have any questions, please speak to the practice secretary or your doctor.

Cookies on this website

This website uses Google Analytics 4 which is set to anonymise tracking by default. All advertising features (‘Signals’) and ‘Advanced Settings to Allow for Ads Personalisation’ have been disabled and the reporting identity has been set to device only, not by User ID [it is assigned a random integer], so we cannot identify users or access any personal data.

There are no other cookies set for this website.

Visits to this website are logged for statistical purposes only. No information is collected that could be used by us to identify website visitors and we will make no attempt to identify individual visitors, or to associate technical details with any individual.


Terms and Conditions

Copyright restrictions: Commercial use or separate publication of any part of this website is strictly prohibited without prior authorisation. Documents may be copied for personal use only on the condition that copyright and source indications are shown.

Some documents and images have been published on this site with the permission of the relevant copyright owners; All rights are reserved on these items and permission to copy them must be requested from the copyright owners (the sources are indicated within these pages).

This website and the information or images regarding or relating to Mercer's Medical Centre are provided "as is" without any representation or endorsement made and without warranty of any kind whether express or implied. In no event will we be liable for any damages including, without limitation, indirect or consequential damages, or any damages whatsoever arising from the use or in connection with such use or loss of use of the website, whether in contract or in negligence.

We do not warrant that the functions contained in the material contained in this site will be uninterrupted or error free, that defects will be corrected, or that this website or the server that hosts it are free of viruses or bugs or represents the full functionality, accuracy and reliability of the materials.

Where this website contains links to third party websites, these links are provided solely as a convenience to you and not as an endorsement by Mercer's Medical Centre of the content on such third party websites.

These terms and conditions shall be governed by and construed in accordance with the laws of the Republic of Ireland, and the parties hereby submit to the non-exclusive jurisdiction of the Irish courts to settle any disputes that may arise in connection with these terms and conditions. 

Any changes to our terms or privacy statement will be posted on this page.

Mercer's Medical Centre is part of Royal College of Surgeons in Ireland Coláiste Ríoga na Máinleá in Éirinn