Staff Extranet >
A few services will make fair processing notices available on their page if they use, for example, text messaging to gather feedback or to help you.
Dorset HealthCare University NHS Foundation Trust recognises the importance of protecting personal and confidential information in all that we do and takes care to meet its legal and regulatory duties. This notice is one of the ways in which we can demonstrate our commitment to our values and being transparent and open, and commitment to our values of:
This notice also explains what rights you have to control how we use your information.
The key pieces of legislation/guidance we are governed by are:
Our consultants, doctors, nurses, healthcare professionals and registered support staff are also regulated and governed by professional bodies including numerous royal colleges.
We may ask for or hold personal confidential information about you which will be used to support delivery of appropriate care and treatment. This is to support the provision of high quality care.
These records may include:
It may also include personal sensitive information such as sexuality, race, your religion or beliefs, and whether you have a disability, allergies or health conditions. It is important for us to have a complete picture, as this information assists staff involved in your care to deliver and provide improved care, deliver appropriate treatment and care plans, to meet your needs.
Information is collected in a number of ways, via your healthcare professional, referral details from your GP or directly given by you.
There is huge potential to use your information to deliver care and improve health and care services across the NHS and social care. The information can be used to help:
It helps you because;
Information is retained in secure electronic and paper records and access is restricted to only those who need to know.
It is important that information is kept safe and secure, to protect your confidentiality. There are a number of ways in which your privacy is shielded; by removing your identifying information, using an independent review process, adhering to strict contractual conditions and ensuring strict sharing or processing agreements are in place.
The Data Protection Act 1998 regulates the processing of personal information. Strict principles govern our use of information and our duty to ensure it is kept safe and secure. Dorset HealthCare University NHS Foundation Trust is registered with the Information Commissioners Office (ICO). Details of our registration can be found on https://ico.org.uk/esdwebpages/search Enter our registration number (Z8054274) and click ‘search register’.
Technology allows us to protect information in a number of ways, in the main by restricting access. Our guiding principle is that we are holding your information in strict confidence.
Everyone working for the Trust is subject to the Common Law Duty of Confidentiality and the Data Protection Act 1998. Information provided in confidence will only be used for the purposes to which you consent to, unless there are other circumstances covered by the law.
Under the NHS Confidentiality Code of Conduct, all staff are required to protect information, inform you of how your information will be used and allow you to decide if and how your information can be shared. This will be noted in your records.
All Trust staff are required to undertake annual training in data protection, confidentiality, IT/cyber security, with additional training for specialist, such as healthcare records, data protection officers and IT staff.
Teaching clinicians - Some medical files are needed to teach student clinicians about rare cases. Without such materials, new doctors and nurses would not be properly prepared to treat you.
Clinical placements - Clinical placements for students commonly take place within the NHS. Students, such as student nurses, medical students, social work students, could be receiving training in the service that is caring for you. This may be when you are an inpatient, in a community setting such as a day hospital, or when you are being visited by health or social care staff at home.
If staff would like a student to be present they will always ask for your permission before that meeting or episode of care. The treatment or care you receive will not be affected if you refuse to have a student present during your episode of care.
Occasionally, for assessment purposes, students may request that their supervisor be present. You may refuse this if it makes you feel uncomfortable.
To provide best care possible, sometimes we will need to share information about you with others. We may share your information with a range of Health and Social Care organisations and regulatory bodies. You may be contacted by any one of these organisations for a specific reason; they will have a duty to tell you why they have contacted you. Information sharing is governed by specific rules and law.
For your benefit, we may also need to share information from your records with non-NHS organisations, from whom you are also receiving care, such as social services or private healthcare organisations. However, we will not disclose any health information to third parties without your explicit consent, unless there are exceptional circumstances, such as when the health or safety of others is at risk or where the law requires the disclosure of information.
We may also be asked to share basic information about you, such as your name and parts of your address, which does not include sensitive information from your health records. Generally, we would only do this to assist them to carry out their statutory duties (such as usages of healthcare services, public health or national audits). In these circumstances, where it is not practical to obtain your explicit consent, we are informing you through this notice, which is referred to as a Privacy Notice, under the Data Protection Act.
Where patient information is shared with other non-NHS organisations, an information sharing agreement is drawn up to ensure information is shared in a way that complies with relevant legislation.
Non-NHS organisations may include, but are not restricted to: social services, education services, local authorities, the police, voluntary sector providers and private sector providers.
You have the right to refuse/withdraw consent to information sharing at any time. We will fully explain the possible consequences to you, which could include delays in you receiving care.
Each organisation has a senior person responsible for protecting the confidentiality of your information and enabling appropriate sharing. This person is known as the Caldicott Guardian. You can contact Dorset HealthCare University NHS Foundation Trust, Caldicott Guardian by using the Contact Us section of this website.
If you have any questions or concerns regarding the information we hold on you, the use of your information or would like to discuss further, please contact the Information Governance team.
Information Governance TeamSentinel HouseNuffield Trading Estate4-6 Nuffield RoadPooleBH17 0RBEmail: firstname.lastname@example.orgPhone: 01202 277327
Under the Data Protection Act 1998 a person may request access to information (with some exemptions) that is held about them by an organisation. For more information on how to access the information we hold about you please refer to our Freedom of information - Confidentiality pages.
Every person registered with the NHS in England and Wales has their own unique NHS number. It is made up of 10 digits for example 123 456 7890.
Your NHS Number is used by healthcare staff and service providers to identify you correctly. It is an important step towards improving the safety of your healthcare.
Always bring your NHS number with you to all hospital appointments or quote it if you need to telephone the hospital for any enquires. This will allow staff to check that they have the right patient details by checking this against your NHS number.
To improve safety and accuracy always check your NHS number on correspondence the NHS sends to you.
If you do not know your NHS number, contact your GP. You may be asked for proof of identity, for example a passport or other form of identity. This is to protect your privacy. Once you have obtained your NHS Number, write it down and keep it safe.Further information on NHS Choices
We try to meet the highest standards when collecting and using personal information. We encourage people to bring concerns to our attention and we take any complaints we receive very seriously. You can submit a complaint through the Trust’s Complaints Procedure, or you can write to:
The Complaints DepartmentSentinel HouseNuffield Industrial Estate4-6 Nuffield RoadPooleBH17 0RB
If you remain dissatisfied with the Trust’s decision following your complaint, you may wish to contact:
Information Commissioner’s OfficeWycliffe HouseWater LaneWilmslowCheshireSK9 5AFwww.ico.gov.uk The Information Commissioner will not normally consider an appeal until you have exhausted your rights of redress and complaint to the Trust.
Our copyright and database right material is licensed for use and re-use under the Open Government Licence (OGL). To view this license, visit www.nationalarchives.gov.uk or write to:
Information Policy TeamThe National ArchivesKew, RichmondSurreyTW9 4DU
Use of information expressly made available under this license indicates your acceptance of the terms and conditions as set out in the OGL. When you use our information under the OGL, you should include the following attribution: [Insert name of information resource, Dorset HealthCare University NHS Foundation Trust, date of publication], licensed under the Open Government License www.nationalarchives.gov.uk
For information where the copyright is owned by another person or organisation, you must apply to the copyright owner to obtain their permission to use/re-use.
The information supplied to you continues to be protected by the Copyright, Designs and Patents Act 1988. You are free to use it for your own purposes, including any non-commercial research you are doing and for the purposes of news reporting. Any other re-use, for example commercial publication and subscription charge, would require the permission of the copyright holder. In accordance with the Re-Use of Public Sector Information Regulations 2005, information provided to you may not be used for commercial publication, subscription charge or sold on to a third party, without the permission of Dorset HealthCare University NHS Foundation Trust.
If you need further clarification, please contact the Information Governance team on 01202 277327 or email email@example.com
Where any contact details are given for members of Trust staff, notice is hereby given, under Section 11 of the Data Protection Act 1998, on behalf of the individual or individuals that this personal information may not be used for the purposes of direct marketing.