Close
- Privacy statement
- Confidentiality in Workplace Health
- Obtaining your Workplace Health medical record - Subject Access Request (SAR)
Privacy statement听
In line with the General Data Protection Regulation (GDPR) we want to provide you with more details about how we collect and use your personal information. To make it easy for you to find out why we collect or use your information we have created a 鈥楽taff Privacy Notice鈥� which includes details about:听
- your rights relating to the information we hold about you听
- how we ensure your personal information is kept safe听
- the types of personal information UCL or any third parties collect and use your information听
- the legal basis we rely on to use your information听
- why 澳门历史开奖记录is processing your information听
- what information of yours is shared with others听
- contact details of whom you can contact if you have concerns听
The Workplace Health privacy notice can be found here:鈥�鈥疻orkplace Health privacy notice鈥�
Confidentiality in Workplace Health听
All medical information that is shared with us will be treated in the same way as anything you discuss with your GP.听
All staff (clinical and administrative) within Workplace Health have a legal and contractual obligation to maintain client confidentiality, whether working in a clinical or administrative capacity.听
If confidentiality is broken without good reason (for example, the individual is at risk of harm - see below) an individual can sue through a civil court. That person can also complain to the Information Commissioners Office if there is a breach of General Data Protection Regulations (2018), the General Medical Council (GMC) or the Nursing and Midwifery Council (NMC).听
The right to confidentiality is protected by:听
The Common Law Duty of Confidentiality.鈥疶he general position is that if information is given in circumstances where it is expected that a duty of confidence applies, that information cannot normally be disclosed without the information provider鈥檚 informed consent.听
Article 8 of the European Convention on Human Rights鈥痺hich covers the 鈥榬ight to respect for private and family life鈥欌�痭ow incorporated in UK law by Human Rights Act 1998听
General Data Protection Regulations (2018) / UKDPA (2018鈥疶he General Data Protection Regulation (GDPR) & Data Protection Act (DPA) 2018 applies to all 鈥榩ersonal data鈥�. Personal data is defined as any data which relate to a living individual who can be identified from that data.听
All data subjects should be made aware of the boundaries of confidentiality within Workplace Health. Data subjects must be made aware of who has access to the records kept in Workplace Health.鈥�
Disclosure of confidential information:听
The Department of Health (2018) advises three circumstances making disclosure of confidential information lawful are;听
Where the individual to whom the information relates has consented听
Where disclosure is necessary to safeguard the individual, or others, or is in the public interest听
Where there is a legal duty to do so, for example a court order.鈥�疉ny practitioner considering making a disclosure in the public interest must ensure that they are acting within their professional boundaries and codes of conduct and must always discuss their intention to make such a disclosure with the Director of Workplace Health or a Consultant Occupational Physician if the Director is unavailable.
To discuss this further please don鈥檛 hesitate to鈥�contact us.听
Obtaining your Workplace Health medical record 鈥� Subject Access Request (SAR)听
Data subjects have the right to access personal data about themselves, which is held in either computerised or manual form, whenever the record was compiled.听
All requests for access to occupational health records must be made in accordance with UCL's Data Protection Policy鈥痸ia the UCL Data Protection Officer. All responses to an SAR must be made within a month and the data subject cannot be charged for an initial copy.听