The European Union’s General Data Protection Regulation (GDPR 2016/679) replaces the Data Protection Act 1998 and is effective from Friday 25th May 2018. The UK’s data protection law (which is expected to be referred to at the Data Protection Act 2018) has entered parliament and aims to modernise data protection laws for the future. Both the regulations and the new law will work alongside each other to address all issues of data protection. As well as increasing the security and accountability of organisations, it increases the rights of individuals on how their information is used. GDPR does not however change the underlying principles of the Data Protection Act 1998, which will be repealed and replaced by new UK data protection legislation over the next few months.
Under GDPR, the legal basis for the processing of your personal information is that the NHS is an official authority with a public duty to care for its patients as guided by the Department of Health, and Data Protection law says it is appropriate to do so for health and social care treatment of patients, and the management of health or social care systems and services.
The hospital has appointed Suzanne Crutchley from MIAA as the Data Protection Officer, Suzanne can be contacted via the following email address dpo@rlbuht.nhs.uk or via the Information Governance team on 0151 706 3671.
Privacy Notices
Part of the responsibilities of GDPR is to identify a legal basis to process personal and sometimes special category information and to communicate this to those who may be affected by the processing.
The below links provide details on the Trusts privacy notices.
Patient
The Trust has a responsibility to inform patients about all the information we collect/store/share and process regarding your treatment.
A full copy of our Patient Privacy Notice is available here.
Staff
The Trust has a responsibility to inform staff about all the information we collect/store/share and process regarding your employment.
A full copy of our Staff Privacy Notice is available here.
Research
The Trust has a responsibility to inform participants about all the information we collect/store/share and process regarding any involvement you may have with any research studies.
Charity
The Trust has a responsibility to inform patients and staff about all the information we collect/store/share and process regarding any involvement you may have with the RCharity.
A full copy of our Charity Privacy Notice is available here (coming shortly).