We use a number of locally built and 3rd party equipment/treatment specific patient databases to collect patient demographics and measurements recorded during lung function diagnostics, sleep and ventilation clinics, home oxygen assessments and for the review of treatment and compliance with sleep therapy . Namely Continuous Positive Airway Pressure devices or CPAP and Non-Invasive Ventilators (NIV).
Depending upon which clinic or diagnostic test you are attending will determine the data we may collect from you.
We will collect data such as your name, height and weight, date of birth, address, telephone numbers, GP details, next of kin, medical history, your current medication, smoking history, occupational history, alcohol intake, your collar size, driving status, family medical history. We may also ask you about your social circumstances and record this in your patient record.
We may also ask you to complete questionnaires as part of your clinic visit, the results of which will be recorded within our patient databases or in your patient record. For example we may ask you to complete an Epworth sleepiness questionnaire which gives us an idea of how sleepy you feel during the day. The results of which will be kept on your patient file within our databases.
We may also ask you about your current medication such as inhalers and other medications such as sleeping tablets, antidepressants, painkillers, steroids and other drugs known to have an impact on either respiratory function or your sleep.
Patient data is also collected for research purposes and audit but is anonymised. You will be asked to consent to your participation in any research and audit.
Return to top
Type of processing:
Direct Care and Administrative Purposes The legal basis which allows us to process the personal data listed above for the purpose of providing you with care is covered under GDPR Article 6(1)(e) '...for the performance of a task carried out in the public interest or in the exercise of official authority...’ and Article 9 9(2)(h) ‘...medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems…' for your special category personal data.
Research Purposes The department may also conduct research which could involve your personal data. Should this be the case, we will rely upon GDPR Article 6(1)(f) '...legitimate interests…except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject...'
Return to top
Return to top
Below is a list of the rights you have in relation to your data and when they apply. To make an application for any of the below rights please contact the Health Records Access Team firstname.lastname@example.org in the first instance. All rights should be considered within 30 calendar days from date of receipt, but may be extended if complex. What rights do I have in relation to my information?
The Right of Access You have the right to request a copy of any information held by the Trust as well as any supplementary information. See How do I request my information? for details on how to request your information.
The Right to Erasure The right to erasure is also known as the ‘right to be forgotten’ introduces a right for you to have personal data erased. Generally this right is not available with health care data. Where this right is available for specific processing you will be notified.
The Right to Restrict Processing The right to restriction allows you to request the restriction or suppression your personal data. This right is closely linked with the right to rectify and the right to object and will only apply if:
The Right to Object The right to object to processing means that data should cease to be processed. This right applies only where data is obtained with your consent. In most cases we rely on our legal basis to process your data and not consent and therefore for care purposes this right may not apply. If your data is used for any other reason this right may apply, but would have to be assessed on an individual basis.
If you believe your information may be inaccurate or incomplete you can make a request to have your information reviewed.
You have a right to see or have copies of any information held by the Trust that relates to you free of charge. We have the right to charge an administration fee in situations where repeated requests are received for the same information or the request is excessive. You will be required to prove your identity when making requests.
Subject Access Requests under GDPR rules (post 25 May 2018) will be processed within 30 days. However, once our teams have established the volume of records requested there may be a requirement to extend this up to a further 2 months. We will contact you within 30 days should this be the case.
To request access to health records please complete a Subject Access Request form and forward on to:
Health Records Access Team Health Records Library Location B19 New Cross Hospital Wednesfield Road Wolverhampton WV10 0QP
Email: email@example.com Telephone: 01902 307999 Extension 5544
All our records are destroyed in accordance with the NHS Retention Schedule, which sets out the appropriate length of time each type of NHS records is retained. We do not keep your records for longer than necessary.
All records are destroyed confidentially once their retention period has been met, and the Trust has made the decision that the records are no longer required. For more information please see the Record Management Code for Practice for Health and Social Care 2016, retention schedules.
How long is my information kept for?
If you have any questions about your care or a complaint, please speak to the health professional with your care in the first instance. If this is not resolved to your satisfaction you can contact the Patient Advice and Liaison Service (PALS). If you have any concerns about how your information is being processed or any of the rights as detailed above, please contact the Trust in the first instance through:
You also have a right to complain directly to the Information Commissioner’s Office if you feel the Trust has not responded effectively to any of the above.
Information Commissioners Office Wycliffe HouseWater LaneWilmslowSK9 5AF
Telephone: 0303 123 1113 Website: https://ico.org.uk/