Clinical Governance Documentation

Data transparency

Your rights

Data protection laws in the UK give people a number of rights concerning their personal data. Not all rights apply equally to all our processing activity, as certain rights are not available depending on the lawful basis for the processing. These rights are:

• Right to be informed
• Right of access
• Right to rectification
• Right to erasure
• Right to restrict processing
• Right to data portability
• Right to object
• Rights in relation to automated decision making and profiling

We want you to feel confident that we look after everyone’s personal data in line with the law. If you have any questions about your rights, you can get in touch with us at [email protected].

Requesting a copy of your information

Typically, we collect information from health and care organisations providing your care, and we would advise contacting them directly for a more complete record of your care or treatment. We do not hold your whole medical or care record.

If you would like to request a copy of your personal data that Secure Care UK is processing, you will need to complete a subject access request. Please email [email protected] and place “Subject Access Request” in the title of the email.

Following your request, we may write back to you within the 30-day timeframe to ask you to narrow or modify your requirements. This may also result in an extension of a further 40 days while we examine your request. Some information requests may fall under the Freedom of Information Act, in which case, if the request is significant, it may be appropriate to charge for the time to complete the report.

Sharing information

There are very strict rules about who can access the personal data we process, and what it can be used for. When information is shared with other organisations, those organisations have to go through an audit and have a clear data management agreement in place with us.

Where necessary, Secure Care UK will undertake a Data Protection Impact Assessment prior to the commencement of any new major system project or any substantial new business relationship or contract. Copies of Data Protection Impact Assessments can be requested by emailing [email protected].