Your information, your rights

The information in this section explains what information the Trust collects about you, why we collect it, how we use it, and your rights under the Data Protection Act 2018 and the General Data Protection Regulations (GDPR).

What is a Privacy Notice?

GDPR requires that data controllers provide certain information to people whose information (personal data) they hold and use. A privacy notice is one way of providing this information.

This is sometimes referred to as a fair processing notice.

So that we can provide you with the best possible service, a variety of information is collected about you from a range of sources, such as your GP. This information is used to support your healthcare.

Under the GDPR information about your physical and mental health, racial or ethnic origin and religious belief is considered to be special category  personal information and is subject to strict laws governing its use.

Southport and Ormskirk Hospital NHS Trust is a data controller under the GDPR and the Data Protection Act 2018.

The Trust is legally responsible for ensuring its processing of personal information is in compliance with the General Data Protection Regulation and the Data Protection Act 2018.

The NHS Constitution

• You have the right of access to your own records and to have any factual inaccuracies corrected
• You have the right to privacy and confidentiality and to expect the NHS to keep your confidential information safe and secure
• You have the right to be informed about how your information is used
• You have the right to request that your confidential information is not used beyond your own care and treatment and to have your objections considered, and where your wishes cannot be followed, to be told the reasons including the legal basis

The NHS also commits:

• To ensure those involved in your care and treatment have access to your health information so they can care for you safely and effectively (pledge)
• To anonymise the information collected during the course of your treatment and use it to support research and improve care for others (pledge)
• Where identifiable information has to be used, to give you the chance to object wherever possible (pledge)
• To inform you of research studies in which you may be eligible to participate (pledge)
• To share with you any correspondence sent between clinicians about your care (pledge)