Legal Ground for Processing

The law that allows us to process your health information

The Trust has to provide a legal basis for the processing of your information. The Trust is an NHS organisation and it has a public duty to provide care for its patients. Under the UK Data Protection Legislation, the Trust may process your information to provide you with health and social care treatment, as well as the management of health or social care systems and services.

If we need to use your personal information for any reason beyond those stated above, we will discuss this with you. You have the right to ask us not to use your information in this way, however there might be times when we still have to share your information, we will discuss this with you.

We will share information in line with the legislation from the Health and Social Care Act 2015 and we process/share your information under the Data Protection Legislation and the new GDPR (General Data Protection Regulation) legislation of Article 6(1)(c), 6(1)(d), 6(1)(f)  and Article  9 EU GDPR (processing of special categories of personal data) where

• Article 6(1)(e) ‘…necessary for the performance of a task carried out in the public interest or in the exercise of official authority…’.
• Article 9(2)(h) ‘necessary for the purposes of preventative or occupational medicine for the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services…”