Your Information, Your Rights

Please see below for definitions of terminology used throughout this page;

• Personally Identifiable Data and Special Category Data
• Data Subject
• Data Controller
• Data Processor
• Third Party/ Parties

Trust Privacy Notices

A Privacy Notice is a statement made to an indiviudal (data subject) that describes how the organisation collects, uses, retains and discloses personal information. A privacy notice is sometimes referred to as a privacy statement, a fair processing statement or sometimes a privacy policy.

• Patient Information
• Staff Information
• Volunteer's Information
• Occupational Health Information
• Research Information
• Member's Information
• National Fraud Initiative (staff information)

Individual Clinical Services - Specific Use of Information

• Adult Southampton Services*
• Adult Portsmouth Services*
• Children's and Families Services*
• Dental Services*
• Primary Care Services*
• Sexual Health Services

*Under Development

• Solent NHS Trust's Privacy Notice
• Information Sharing Agreements*
• Data Processing with Contractors*
• Data Protection Impact Assessments*
• Cookies

*Under development

Under GDPR data subjects (individuals) have eight specific rights..

1. The right to be informed

Individuals should be informed of how their data will be used. This applies to both patient and staff data. For more information on how data is used, please refer to Solent NHS Trust's Privacy Notices

2. The right of access

Individuals have the right to access their personal data, which is referred to as a Subject Access Request (SAR).

All requests of this nature should be submited to the Information Governance Team.

Find out how to request your information.

3. The right to rectification

Personal data can be rectified if it is inaccurate or incomplete.

Find out more about your right for data held about you to be rectified and destroyed

4. The right to erasure

This is often referred to as the “right to be forgotten”.

This right only applies in certain circumstances;

• the basis for lawful processing is consent and the this has been withdrawn and there is no other legal ground for processing
• the individuals whose data is being processed objects and there are no overriding legitimate grounds
• the personal data has been collected in relation to information society services
• the personal data is no longer necessary for the purposes for which it was collected for

Find out more about your right for data held about you to be rectified and destroyed

5. The right to restrict processing

Individuals have the right to require organisations to restrict processing where:

• accuracy is contested by the individual
• processing is unlawful and the subject opposes erasure
• the organisation no longer needs the data, but the subject requires it to be kept for legal claims
• the individual has objected, pending verification of legitimate grounds.

If you feel this is the case, please contact the Information Governance Team.

6. The right to data portability

7. The right to object

Individuals have the right to object to:

• Processing based on legitimate interests or the performance of a task in the public interest/ exercise of official authority (including profiling)
• direct marketing (including profiling); and
• processing for purposes of scientific/historical research and statistics

8. Rights in relation to automated decision making and profiling

• An easy guide to how your data is used*
• Care and Health Information Exchange (CHIE)
• Patient Information Sharing Poster
• SystmOne Patient Leaflet (Patient Records)

*Under development

You have the right to request non-medical/ non-personal records under the Freedom of Information Act 2000 from public organisations.

• Find out more about Freedom of Information.

Information Governance Team

Solent NHS Trust Headquarters

Highpoint Venue

Bursledon Road

Southampton

SO19 8BR

03001233919

InformationGovernanceTeam@solent.nhs.uk