Why do you require my information?
NCH&C collect and use a wide range of information to help provide services as well as keep the organisation running. NCH&C has a privacy notice that may answer some questions you have about the sort of information we collect and use. Our Privacy Notice is available here.
How can I access the information you hold about me?
You are welcome to ask us for different types of information and this page will help you do that.
You can request any information we have about you at any time. In line with the General Data Protection Regulation (GDPR) this will be dealt with under the Subject Access Provisions of the Data Protection Act 2018 (DPA). Put simply, this act gives individuals the legal right to request access to their personal information. The information we hold about you will likely be in the form of health records.
If you would like to see or obtain a copy of your health record, you will need to make a subject access request. There are some checks we will need to make to validate your identity and we have a team who can help you through this process. If you would like to do this now, please complete a request for information form.
There is no charge for the time and administration involved with processing subject access requests except when additional copies of already supplied information are requested. We have 30 days to supply your information from receipt of your request. Please note though, we’re unable to begin processing your request until proof of ID is received. As the data controller, we need to ensure that the request is actually from the data subject concerned. Proof of identity can be a copy of a formal document or bill with your name and address on it or your driving licence or passport.
If you would like more information on the information that you can request or have any questions about information we collect, please contact our team on; 01603 785879 or email IG@nchc.nhs.uk
How do I complain about the way my request has been handled?
If you’re unhappy with any aspect of the way in which we deal with your Subject Access Request, you may complain both to NCH&C via this link here and in writing to the Information Commissioner at:
Information Commissioner's Office
Email form: https://ico.org.uk/global/contact-us/email/
Tel: 0303 123 1113
Freedom of Information
The Freedom of Information Act gives everyone the right to request access to all types of recorded information held by public authorities. This is aimed at promoting a culture of transparency and accountability across the public sector.
You can complete a request for information form online.
We would encourage you to check our publication scheme first before you make a request for information through the Freedom of Information process, as you may be able to find it here. Please bear in mind that we can refuse a Freedom of Information Act request if the information is already readily available to you via our publication scheme.
Access to your health records
Under the Data Protection Act you have a right to access your health record. This can be done through the Access to Health Records Officer, who can be contacted on 01603 785876.
Every NHS Organisation has a Caldicott Guardian, who is a senior member of the trust's Board. They make sure that we only use any personal, identifiable information held about you in an appropriate way. NCH&C’s Caldicott Guardian is Carolyn Fowler, Director of Nursing and you can contact her by phoning 01603 697347 or emailing: IG@nchc.nhs.uk
Senior Information Risk Owner (SIRO)
Every NHS Organisation has a SIRO, who is a senior member of the Trust’s Board. They are accountable and responsible for information risk across the organisation. NCH&C’s SIRO is Andrew Hopkins, Director of Finance, and you can contact him by phoning 01603 697347 or emailing IG@nchc.nhs.uk
Data Protection Officer (DPO)
NCH&C is a public authority and therefore is legally required to appoint a DPO. The DPO assists with monitoring internal compliance, informing and advising on data protection obligations, providing advice regarding Data Protection Impact Assessments (DPIAs) and acting as a contact point for data subjects and the supervisory authority. NCH&C’s DPO is Matthew Poole, Head of Governance and Compliance and you can contact him by phoning 01603 272619 or emailing IG@nchc.nhs.uk