Record consultations: Security details
We take the security and privacy of all data extremely seriously.
This page refers to the security on using the Improval platform to record patient consultations.
These meet NHS & UK GDPR standards, with the main aim of keeping patient data safe at every stage.
Handling of the recordings
Device security
Recordings are stored only briefly on the users device and they are not backed up to iCloud or visible in a Photos app.
Upload
After recording the file is uploaded securely, then deleted from the mobile device.
App securing
Users are advised to secure their phone with a passcode, Face ID, or Touch ID
Recording review
Recordings can only be reviewed on the secure Improval web platform, secured with 2-factor authentication.
Encrypted storage
Location
Recordings are encrypted and stored in the UK.
Transfer
All data transfers use TLS encryption
Controlled access
Access
Only the user and others that they invite to have access, for example their educational supervisor, can access the recordings.
Account control
All users must register to have access and set up 2-factor authentication
Audit
All recording access is logged with an audit trail.
Consent & Retention
Consent
- Patients must give informed consent before recording.
- Consent can be withdrawn at any time.
Retention
Recordings should only be kept as long as educationally useful.
Automatic deletion
- Medical students: Recordings deleted at the end of placement
- GP Registrars & others: 3 months (this can be extended if required)
AI-assisted feedback
Feedback
Optional AI feedback is available to help improve consultation skills.
Location
Processed using AI within the UK.
Data security
Data is not used to train the model.
Useful links
DPIA for practices
An example DPIA for practices to adapt in relation to using Improval to record consultations.
Information for practices
More Information specifically for GP practices using Improval to record consultations.
