Solent NHS TrustHigh quality community and mental health services

Your Information, Your Rights

Please note, this page is under development. For further details while we develop this page, please contact:

This section has been created to provide you with further information as to why Solent NHS Trust collects information about you, how this information is used and information about your rights under Data Protection Laws, such as the new General Data Protection Regulations (GDPR) 2016. Click here to see how Solent NHS Trust has ensured compliance with the new regulations and what it plans to do to ensure continued compliance.

Who is responsible for your data?

Mr David Noyes
Chief Operating Officer
0300 123 3390

Senior Information Risk Owner (SIRO)

Dr Daniel Meron
Chief Medical Officer
0300 123 3390

Caldicott Guardian

Mrs Sadie Bell
Data Protection Officer and Head of Information Governance & Security
0300 123 3390

Data Protection Officer (DPO)

Privacy Notices

A Privacy Notice is a statement made to an indiviudal (data subject) that describes how the organisation collects, uses, retains and discloses personal information. A privacy notice is sometimes referred to as a privacy statement, a fair processing statement or sometimes a privacy policy.

Patient Information

Staff Information

Volunteer's Information

Occupation Health Information

Research Information *under development

Member's Information

National Fraud Initiative (Staff Information)    

Individual Clinical Services Specific Use of Information * Under Development

Sexual Health Services Adult Services Southampton Adult Services Portsmouth
Dental Services Child & Family Services Primary Care Services


How is your data used?

Personally Identifiable Data and Special Category Data

Solent NHS Trust's Privacy Notice (please see above)

Data Subject

Information Sharing Agreements *under development

Data Controller

Data Processing with Contractors *under development

Data Processor

Privacy Impact Assessments *under development

Third Party / Parties



An easy guide to how your data is used

*under development

Care and Health Information Exchange (CHIE)

Patient Information Sharing Poster

Systmone Patient Leaflet (Patient Records)

What are your rights?

Under GDPR data subjects (individuals) have eight specifics rights

The right to be informed

Individuals should be informed of how their data will be used. This applies to both patient and staff data. For more information on how data is used, please refer to Solent NHS Trust's Privacy Notices above.

The right of access

Individuals have the right to access their personal data, which is referred to as a Subject Access Request (SAR) – this is a free service as of the 25th May 2018.

All requests of this nature should be submited to the Information Governance Team.

For more information on this right, click here.

The right to rectification

Personal data can be rectified if it is inaccurate or incomplete

For more information on this right, click here.

The right to erasure

This is often referred to as the “right to be forgotten”.

This right only applies in certain circumstances

  • the basis for lawful processing is consent and the this has been withdrawn and there is no other legal ground for processing
  • the indivudals whose data is being processed objects and there are no overriding legitimate grounds
  • the personal data has been collected in relation to information society services
  • the personal data isno longer necessary for the purposes for which it was collected for

For more information on this right, click here.

The right to restrict processing

Individuals have the right to require organisations to restrict processing where:

  • accuracy is contested by the individual
  • processing is unlawful and the subject opposes erasure
  • the organisation no longer needs the data, but the subject requires it to be kept for legal claims
  • the individual has objected, pending verification of legitimate grounds.

If you feel this is the case, please contact the Information Governance (details are displayed at the bottom of this page)

The right to data portability

Individuals have the right to receive personal data about them in a ‘commonly used and machine readable format’.
This right is only available where the processing is based on consent and the processing is automated. Please note that this is not the legal basis for the majority of Solent NHS Trust's Data Processing, therefore for with regards to most of the data held by Solent NHS Trust, this right does not apply.

The right to object

Individuals have the right to object to:

  • processing based on legitimate interests or the performance of a task in the public interest / exercise of official authority (including profiling);
  • direct marketing (including profiling); and
  • processing for purposes of scientific/historical research and statistics.

Rights in relation to automated decision making and profiling

Freedom of Information

You have the right to request non-medical/ personal records under the Freedom of Information Act 2000 from public organisations. See our Freedom of Information Act 2000 pages for more information.

Contact us

Information Governance Team
Solent NHS Trust Headquarters
Highpoint Venue
Bursledon Road
SO19 8BR

Telephone: 0300 123 3919