Patients – privacy notice
The Royal Hospital for Neuro Disability (RHN) collects and uses information about you, your health and the care we provide to you.
This Privacy Notice provides a summary of how we use your information.
RHN is registered as a Data Controller with the UK Supervisory Authority (Information Commissioner) – registration number: Z5621386
Due to the COVID-19 outbreak, please read this addition to our existing privacy notice: Covid-19 Privacy Notice (pdf) |
Information securityConfidentiality affects everyone. The RHN collects information which is paper-based or held on a computer. |
The information we collect:
We also collect information about your ethnicity, religion, disability, language preference and sexual orientation, in order to monitor that we are treating everybody fairly. |
Uses for personal informationThe people who care for you use your information in different ways.
|
Sharing your informationEveryone working in health or social care has a legal duty to keep information about you confidential; anyone who receives your information from us is also under legal obligation to keep it confidential.
The RHN’s partners who contribute to care provision are not always in the UK. In all circumstances, the partners are chosen from reputable companies and are required to sign a contract and confidentiality agreement with the RHN that they will protect and keep any information secure. There may be other circumstances when we must share your information legally with other agencies when we are not required to seek your consent. e.g.
|
Other organisationsOther organisations which manage overall Health and Social Care services e.g. NHS Counter Fraud Services, NHS Prescription Service, organisations that have a statutory duty to undertake financial or regulatory audits on Health Care Providers e.g The National Audit Office, Care Quality Commission. |
Other ways in which we use your informationWe also usually send a copy of letters sent to your GP to you at your home address. If you do not wish to receive this letter, please inform a member of staff or contact The Data Protection Officer at the below address. |
Surveillance Cameras (CCTV)We use CCTV around the hospital site in order to;
You have a right to make a Subject Access Request of surveillance information recorded of yourself and ask for a copy of it. Requests should be directed to: You will need to provide details which must contain sufficient information to identify you and assist us in finding the images on our systems. |
Legal backgroundAs a UK Health Care Provider, the RHN will continue to process your information under the General Data Protection Regulations from 25 May 2018. We do so through the contractual agreements we have with the NHS to provide your care and if you are a privately funded patients, by virtue of the contract in place between you as a patient and RHN as your care provider. The law requires that we use your information fairly, in a transparent and accountable way. |
Accessing your informationYou have a right to see or have a copy of the information the RHN holds about you. To obtain a copy, please write to; Health Records Manager, We will attempt to provide you the requested information in a format which is easy for reuse, however, until all patients’ records are electronic, this may not be possible. However, the RHN will provide you the information in the most convenient format. If you think any of the information about you is incorrect, please contact a member of staff or the Data Protection Officer at DPO@rhn.org.uk. The RHN will correct all demographic information after it has undertaken appropriate checks. Clinical opinions cannot be corrected however we will insert a note in the record that you wish to highlight that you disagree with the clinical opinion. We will also insert your requested amendments in the record. You have the right to restrict how and with whom we share information in your records that identifies you. The RHN keeps your health records for a defined period only as per the Department of Health guidance. As a charity, under GDPR, we have a legitimate interest to send letters or newsletters by post about our work or any fundraising appeals to individuals who have previously donated. 1. They donated to us in the recent past Once we are sure that we are not overriding the data subject fundamental rights i.e. the individual has not objected to receiving direct marketing, the material is not intrusive and there are no other reasons to believe that the individual would rather not receive it. Download SARs formTo open a PDF you may need to download Adobe Reader |
ConsentData subjects must give consent by a positive unambiguous action that they are happy to receive future communications – for fundraising consent a form of positing “opt-in”. It is important that when collecting consent, we have a system for recording consent, the conditions for consent, (i.e. can we use the data only for newsletter or also for fundraising activities etc), how will the opt-out system be managed. The RHN is not required to refresh all existing consent. If we are sure that our previous consent meets all the new criteria, then we can continue to use this consent as the legal condition for processing personal data. If you have any questions or concerns regarding the information we hold on you or would like to know more please contact us at Data Protection Officer, DPO@rhn.org.uk. For independent advice about data protection you can contact the Information Commissioner at: |