As a patient of the Whittington Health NHS Trust your data will be collected and used for medical diagnosis, the provision of health or social care or treatment and the management of health or social care systems and services.
The Trust is the data controller and will process your data in accordance with the regulations that apply to:
- Article 6 (e) and Article 9 (h) of The General Data Protection Regulation 2016 (GDPR) /Data Protection Act 2018 (DPA18)
Data may be shared with our health or social care partners should they be involved or required to be involved in providing care or treatment to you.
The Trust is also required to produce datasets to submit for commissioning purposes by Clinical Commissioning Groups (CCGs) and national collections from NHS Digital. Your data may be provided in accordance with one or both of the above regulations.
In cases where your data is needed for reasons other than those already stated, your explicit consent will be sought prior to processing.
You have the right to object to your data being used for the research, planning and running of the NHS via the National Data Opt-out programme as well as your ‘right to object’ under Article 21 of the GDPR/DPA 18.
Further details on data collection can be found here on the NHS Digital website and more information on CCGs can be found here on the NHS England website.
Data will be stored on secure Trust systems and servers based in the UK and will not be transferred outside the EU.
Records will be retained as per the guidance set out in the Records Code of Practice for Health and Social Care 2016.
You can contact the Data Protection Officer at InformationGovernance.Whitthealth@nhs.net or by calling 0207 288 3077.
If you are dissatisfied with the service you have been provided and have exhausted the Trust’s complaints process, you can refer any complaints to the Information Commissioner’s Office (ICO) via the ICO website or by calling 0303 123 1113.