Your Information, Your Rights
Whilst we will make every effort to fully respond to your request for information within the current statutory timescales, please be advised that Solent NHS Trust is working as part of the National Health Service response to the Coronavirus - Covid-19 and therefore will be prioritising activities that support the needs of Patients. There is therefore likely to be a delay in releasing the information to you because of this and ask for your understanding at this time.
This page has been created to provide you with further information as to why Solent NHS Trust collects information about you, how this information is used and information about your rights under Data Protection Laws, such as the General Data Protection Regulations (GDPR) 2016. See how Solent NHS Trust has ensured compliance with the new regulations and what it plans to do to ensure continued compliance.
Mr David Noyes
Chief Operating Officer
Dr Daniel Bayliss
Chief Medical Officer
Mrs Sadie Bell
Data Protection Officer & Head of Information Governance & Security
Please see below for definitions of terminology used throughout this page;
- Personally Identifiable Data and Special Category Data
- Data Subject
- Data Controller
- Data Processor
- Third Party/ Parties
Trust Privacy Notices
- Patient Information
- Staff Information
- Volunteer's Information
- Occupational Health Information
- Research Information
- Member's Information
- National Fraud Initiative (staff information)
Individual Clinical Services - Specific Use of Information
- Adult Southampton Services*
- Adult Portsmouth Services*
- Children's and Families Services*
- Dental Services*
- Primary Care Services*
- Sexual Health Services
- Solent NHS Trust's Privacy Notice
- Information Sharing Agreements*
- Data Processing with Contractors*
- Data Protection Impact Assessments*
Under GDPR data subjects (individuals) have eight specific rights..
1. The right to be informed
Individuals should be informed of how their data will be used. This applies to both patient and staff data. For more information on how data is used, please refer to Solent NHS Trust's Privacy Notices
2. The right of access
Individuals have the right to access their personal data, which is referred to as a Subject Access Request (SAR).
All requests of this nature should be submited to the Information Governance Team.
3. The right to rectification
Personal data can be rectified if it is inaccurate or incomplete.
4. The right to erasure
This is often referred to as the “right to be forgotten”.
This right only applies in certain circumstances;
- the basis for lawful processing is consent and the this has been withdrawn and there is no other legal ground for processing
- the individuals whose data is being processed objects and there are no overriding legitimate grounds
- the personal data has been collected in relation to information society services
- the personal data is no longer necessary for the purposes for which it was collected for
5. The right to restrict processing
Individuals have the right to require organisations to restrict processing where:
- accuracy is contested by the individual
- processing is unlawful and the subject opposes erasure
- the organisation no longer needs the data, but the subject requires it to be kept for legal claims
- the individual has objected, pending verification of legitimate grounds.
If you feel this is the case, please contact the Information Governance Team.
6. The right to data portability
7. The right to object
Individuals have the right to object to:
- Processing based on legitimate interests or the performance of a task in the public interest/ exercise of official authority (including profiling)
- direct marketing (including profiling); and
- processing for purposes of scientific/historical research and statistics
8. Rights in relation to automated decision making and profiling
Profiling analyses aspects of an individual’s personality, behaviour, interests and habits to make predictions or decisions about them.
Automated decision-making is the process of making a decision by automated means without any human involvement. These decisions can be based on factual data, as well as on digitally created profiles or inferred data.
Automated decision-making often involves profiling, but it does not have to.
Information about your health and care helps Solent NHS Trust and our healthcare partners to improve your individual care, speed up diagnosis, plan your local services and research new treatments.
As a result of these changes, you can choose whether your confidential patient identifiable information is used for clinical research and planning.
You have the right to request non-medical/ non-personal records under the Freedom of Information Act 2000 from public organisations.
Information Governance Team
Solent NHS Trust Headquarters