GDPR: Patients, Family / Next of Kin

GDPR: What is it?
You will perhaps be aware of GDPR from your place of work or the media or through communications you are receiving from commercial or other charitable organisations about your personal data and preferences for being contacted.

The Information Commissioner’s Office (ICO) have given organisations the date of 25 May 2018 to be compliant with the updated General Data Protection Regulations (GDPR). Wirral Hospice St John’s has always and will continue to take Data Protection extremely seriously.

Patient and family / next of kin data:

We need to record information about those who receive Wirral Hospice’s care and support. Even if we visit you in the community and you do not come into the hospice, it is still likely we will need to record information / data about you. For example, you may be visited by one of our staff or volunteers in your home, or come along to one of our support groups.

GDPR does not change the duty we have to protect the personal and medical information you share with us. This will always remain a priority for Wirral Hospice St John’s.

The GDPR Principles: our commitment to you and your personal data

Lawfulness, fairness and transparency
We will process your personal data in a way that is fair, transparent and in keeping with the law

Purpose limitation
We will only process personal data for the purposes for which it was collected – in order to provide you with the best quality care and to operate our services.

Storage limitation
We will not keep your personal data for any longer than necessary for us to provide our care to you, and we will delete any data that we no longer need to keep.

Data minimisation
We will only collect the personal data that we need in order for us to provide our care to you and operate our services.

Accuracy
We will ensure that the personal data we hold on you is accurate and up to date – and update it promptly when you inform us of any changes

Integrity
We will ensure that we have the necessary measures in place to protect your personal data and make sure it’s kept secure.

The right to be informed
You have a right to know how your personal data is processed, how long we keep it for and who your data is shared with.

The right to rectification
You have the right to have your personal information corrected in a timely fashion if you believe it’s inaccurate or incomplete.

The right to erasure
Also known as the right to be forgotten, you have the right to ask for your personal data to be deleted when we no longer need your personal data.

The right to restrict
In certain circumstances, you have the right to restrict or limit the extent to which we process your personal data.

The right to data portability
You have the right to request a copy of your personal information in a structured, commonly-used, machine-readable format and ask for it to be sent to another clinical / medical establishment.

The right of access:
You will have the right to access any personal information we hold about you at the hospice, free of charge. You can ask for this by completing  Subject Access Request (SAR) and we will respond within one month.

Requesting information:
Under the Act, it is possible for individuals to request access to any of their personal data held by the hospice, subject to certain restrictions. A request for disclosure of such information is called a Subject Access Request (SAR) and should be addressed FAO:

Wirral Hospice St John’s Data Controller
Mount Road
Higher Bebington
Wirral CH63 6JE

Or please email data@wirralhospice.org

This page was last updated 24.05.18