A new data privacy law becomes statute in the UK on 25 May 2018. The new law is known as the General Data Protection Regulation (GDPR).
MOH understands the meaning of the new Act, and how the new Act is prescriptive in terms of the use and protection of sensitive medical information/data that we hold. We undernote for guidance purposes the main topics covered by the new Act.
⦁ The information we can collect
⦁ How this information is used by us
⦁ How this information is secured us
⦁ How this information is shared by us
⦁ Your rights in relation to the information we hold on you
1. Information we collect
We only collect information directly relevant to the services that we provide to our customers, and in compliance with legal and regulatory guidelines. We may collect information on you from various sources, including but not limited to:
⦁ information you personally provide us with
⦁ information provided by your employer to us
⦁ information you consent to providing us with from general practitioner, consultant or other clinicians
⦁ information from publicly available sources
⦁ information that we produce on you
2. How this information is used
We will only use the information we collect for the purposes of providing our services.
3. How this information is secured
We have up to date legal and regulatory compliant information systems security in place in order to safeguard all data that we hold on you. Access to this data is strictly controlled and monitored, and only available to our employees as required.
4. How this information is shared
Information is only shared for the purposes of providing our services and in compliance with contractual, legal and regulatory requirements. Information is not shared with any third parties and we only process information in the UK/EU.
5. Your rights in relation to the information we hold
You have various statutory rights available to you in relation to the information we hold on you as an individual or as a company. Examples include requesting to view what information we hold on you or requesting updates on the information we hold.