
NELFT (the Trust) processes information about you in order to provide health care services, and in doing so has to comply with the requirements of the Data Protection Act 2018.
This means that data held about you must only be used for specific purposes as defined by law. This Fair Processing Notice has been created to inform you about the types of information held about you, why that information is held about you, and to whom that information may be shared.
Your clinical care team and other health and care professionals caring for you keep records about your health and any treatment and care you receive from the NHS. These help ensure that you receive the best possible care from us. They may be written down (manual records), or held on a computer. The records may include:
What happens to patient information.pdf 36KB
Your records are used to direct, manage and deliver the care you receive to ensure that:
Your information will also be used to help us manage the Trust and protect the health of the public by being used to:
Some of this information is held centrally within the Trust, but where this is used for statistical purposes stringent measures are taken to ensure that individual service users cannot be identified. Anonymous statistical information may also be passed to organisations with a legitimate interest, including Universities and Research Institutions.
Where it is not possible to use anonymised information, personally identifiable information may be used for essential NHS purposes. They may include research and auditing services. This will only be done with your consent, and/or the consent of your carer or next of kin, unless the law requires information to be passed on to improve public health.
Everyone working for the NHS has a legal duty to keep information about you confidential and secure.
You may be receiving care from other organisations as well as the NHS e.g. Social Services and the Voluntary Sector. We may need to share some information about you so we can all work together for your benefit. We will only ever use or pass on information about you if others involved in your care have a genuine need for it. When we pass on any information we will ensure it is kept confidential and secure.
Anyone who receives information from us is also under a legal duty to keep it confidential and secure.
We are required by law to report certain information to the appropriate authorities. This is only provided after formal permission has been given by a qualified health professional, as defined under the Data Protection Act 2018. Occasions when we must pass on information include:
Everyone working within the NHS has a legal duty to keep information about you confidential. Similarly, anyone who receives information from us has a legal duty to keep it confidential.
We will share information with the following main partner organisations:
You may be receiving care from other service providers as well as the NHS, for example Social Care Services. We may need to share some information about you with them so we can all work together for your benefit if they have a genuine need for it as part of your care or we have your permission. Therefore, we may also share your information with:
We share information in line with the legislation from the Health and Social Care Act 2015 and we process/share your information under the Data Protection Act legislation and the new GDPR (General Data Protection Regulation) legislation of article 6(1)(c), 6(1)(d), 6(1)(f) and article 9 EU GDPR (processing of special categories of personal data) e.g., 9(2)(h), 9(2)(j) Research Purposes and 9(2)(b) Safeguarding.
9(2)(h) – Processing is necessary for the purposes of preventative or occupational medicine, for assessing the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or management of health or social care systems and services on the basis of Union or Member State law or a contract with a health professional.
Patient Information Leaflet.pdf [pdf] 5MB
We share information in line with the legislation from the Health and Social Care Act 2015 and we process/share your information under the Data Protection Act legislation and the new GDPR (General Data Protection Regulation) legislation of article 6(1)(c), 6(1)(d), 6(1) (e), 6(1)(f) and article 9 EU GDPR (processing of special categories of personal data) e.g., 9(2)(h), 9(2)(j) Research Purposes and 9(2)(b) Safeguarding.
9(2)(h) – Processing is necessary for the purposes of preventative or occupational medicine, for assessing the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or management of health or social care systems and services on the basis of Union or Member State law or a contract with a health professional.
As stated above, information will be shared for Health and Social Care purposes, not sharing information may lead to a clinical risk, safeguarding implications, care concerns etc., and may have an impact on the care and treatment that we or our partners are able to provide. You may want to consider treatment through another provider if not happy with the above.
To keep our patients informed about appointments and to cut down on DNA’s, we send information out via SMS as appointment reminders for our patients, if you do not want to receive these alerts to your mobile phone etc., please let IG know below, and we will remove you from this appointment service.
We follow the Trust and the DOH policies and guidance in regards to the retention periods of data and information that we hold.
If you have any questions in regards to your information and how it is used, please contact the below IG department and we will do our best to help:
If your issues cannot be resolved by the IG department in regards to your query, and you are still not happy with our response, please see the Trust complaints department details below and the ICO details (Information Commissioners Office)
Trust Complaints Department
Tel: 0300 300 1711
Email: nelftcomplaints@nelft.nhs.uk
ICO (Information Commissioners Office)