What information would you like to access?
Information related to a living person which is governed by the Data Protection Act.
Information related to a deceased patient that is protected by the Health Records Act.
How we manage your records
Right to be informed
- The right to be informed encompasses your obligation to provide ‘fair processing information’, typically through a privacy notice.
- It emphasises the need for transparency over how you use personal data.
Right of access
- Individuals have the right to access their personal data and supplementary information.
- The right of access allows individuals to be aware of and verify the lawfulness of the processing.
Right of rectification
- The GDPR gives individuals the right to have personal data rectified.
- Personal data can be rectified if it is inaccurate or incomplete.
Right of erasure
- The right to erasure is also known as ‘the right to be forgotten’.
- The broad principle underpinning this right is to enable an individual to request the deletion or removal of personal data where there is no compelling reason for its continued processing.
Right to restrict processing
- Individuals have a right to ‘block’ or suppress processing of personal data.
- Then processing is restricted, you are permitted to store the personal data, but not further process it.
- You can retain just enough information about the individual to ensure that the restriction is respected in future.
Right to object
- processing based on legitimate interests or the performance of a task in the public interest/exercise of official authority (including profiling);
- direct marketing (including profiling); and
- processing for purposes of scientific/historical research and statistics.