Privacy Notice Addendum 1
Zonio.ai
We are currently running a pilot with Zonio.ai for decision support.
How we use AI decision support at this practice (Zonio.ai)
What is Zonio? During your consultation, our clinicians may use a secure digital assistant called Zonio. It helps clinicians quickly find and check the latest official NICE national clinical guidance during your appointment — a bit like an instant, verified search engine for clinical guidelines. Your clinician always makes the decisions about your care; Zonio only retrieves and summarises official guidance, and every answer links to the original source so your clinician can check it.
Does Zonio see your health record? No. Zonio is not connected to your GP record. Your clinician types general clinical questions (for example, “what does NICE guidance say about managing adult asthma that is not responding to treatment?”). An automatic privacy filter removes any patient-identifiable information before a question is processed or stored.
What information is used?
● The clinical question typed by your clinician, with any patient-identifiable details automatically removed.
● Your clinician’s work account details (name, work email, role) to manage secure access.
● Feedback your clinician gives about the quality of an answer.
Why we use it (lawful basis)
● To support your direct care and the safe management of NHS services: Article 6(1)(e) (public task) and Article 9(2)(h) (provision of health care) of the UK GDPR.
● The supplier, Zonio Ltd, also reviews anonymised question-and-answer records to check the tool is safe and accurate, as required by NHS clinical safety standards (Article 9(2)(h) — management of health care systems). For this limited safety-evaluation purpose Zonio is a joint controller; the essence of that arrangement is in our Data Sharing Agreement with Zonio, available on request.
● We comply with the common law duty of confidentiality and the Caldicott Principles.
Who sees your information?
● Your clinician — during your consultation only.
● Zonio Ltd — our approved supplier, acting under a Data Sharing & Processing Agreement. Zonio stores its anonymised safety logs in the UK (AWS London). Some question processing happens briefly (transiently, never stored or used for training the AI) on secure enterprise systems in Sweden/Switzerland.
● We will never sell your information or use it for marketing. Your data is never used to train the AI.
How long is it kept? Questions typed in a consultation are deleted when the session ends. Anonymised safety and audit records are kept for up to 8 years to meet NHS clinical safety standards. Fully anonymised example questions may be kept indefinitely to keep testing the tool’s safety.
Your rights You have the same rights as under our main privacy notice, including access, correction, objection and complaints. Because Zonio only processes anonymised clinical questions, we cannot usually identify you in Zonio’s records. You can also simply ask your clinician not to use Zonio in your consultation — your care will be exactly the same, using standard reference sources.
Questions, concerns or complaints?
● Practice: [Practice Manager / Mark O’Neill], Cricket Green Medical Practice, [address/phone].
● Practice Caldicott Guardian: Mark O’Neill.
● Practice Clinical Safety Officer: Dr Simon Gilbert
● Zonio Ltd Data Protection Officer: Dr James Woolley — privacy@zonio.ai (also named on the ICO register).
● You may complain to the Information Commissioner’s Office (ICO) — ico.org.uk / 0303 123 1113.
This addendum supplements — and should be read with — the Cricket Green Medical Practice main patient privacy notice, available on our website and at reception.
