• Illustration of a digital identity verification process featuring a large smartphone displaying a user profile. Two small human figures interact with the phone; one holds a pencil, while the other uses a magnifying glass to examine a fingerprint on the screen. Beside the phone, there's a checklist with green checkmarks on a clipboard and a yellow folder with gear icons, symbolising settings or configuration.

    Access to information

    Find out more about why we require your information, how you can access the information we hold about you, and more.

     

Why do you require my information?

NCH&C collects and uses a wide range of information to help provide services as well as keep the organisation running.

Our privacy notice may answer some questions you have about the sort of information we collect and use. Our Privacy Notice is available here.

How can I access the information you hold about me?

You are welcome to ask us for different types of information. You can request any information we have about you at any time.

In line with the General Data Protection Regulation (GDPR) this will be dealt with under the Subject Access Provisions of the Data Protection Act 2018 (DPA). Put simply, this act gives individuals the legal right to request access to their personal information. The information we hold about you will likely be in the form of health records.

If you would like to see or obtain a copy of your health record, you will need to make a subject access request.  There are some checks we will need to make to validate your identity and we have a team who can help you through this process. If you would like to do this now, please complete a request for information form.

There is no charge for the time and administration involved with processing subject access requests except when additional copies of already supplied information are requested. We have 30 days to supply your information from receipt of your request. Please note that we are unable to begin processing your request until proof of ID is received. As the data controller, we need to ensure that the request is actually from the data subject concerned. Proof of identity can be a copy of a formal document or bill with your name and address on it or your driving licence or passport.

If you would like more information on the information that you can request or have any questions about information we collect, please contact our team on 01603 785879 or email IG@nchc.nhs.uk.

How do I complain about the way my request has been handled?

If you are unhappy with any aspect of the way in which we deal with your Subject Access Request, you may complain both to NCH&C via this this link and in writing to the Information Commissioner at:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Email form: https://ico.org.uk/global/contact-us/email/

Tel: 0303 123 1113

Freedom of Information

The Freedom of Information Act gives everyone the right to request access to all types of recorded information held by public authorities. This is aimed at promoting a culture of transparency and accountability across the public sector. Guidance on making requests is available on the GOV.UK website.

Requests should be in writing and you can make a request to the Trust using an online request for information form or by sending your request to:

Room 1.38Woodlands HouseNorwich Community HospitalBowthorpe RoadNorwichNR2 3TU

If you are having difficulties or are unable to make a written request, please contact our Freedom of Information team on 01603 785876.

We you to check our publication scheme and FOI disclosure log before you make a request for information through the Freedom of Information process, as you may be able to find the information you are looking for. Please bear in mind that we can refuse a Freedom of Information Act request if the information is already readily available to you via our publication scheme.

NCH&C publication scheme

Our publication scheme explains what we as an organisation do, what we spend, what our priorities are, our decisions and policies. You can find it here.

Access to your health records

Under the Data Protection Act you have a right to access your health record.

This can be done through the Access to Health Records Officer, who can be contacted on AccesstoRecords@nchc.nhs.uk or 01603 785876.

National Data Opt-Out (NDOO)

The National Data Opt-Out is a service that allows patients to opt out of their confidential patient information being used for research and planning.

The service was introduced on 25 May 2018, enabling patients to opt out from the use of their data for research or planning purposes, in line with the recommendations of the National Data Guardian in her Review of Data Security, Consent and Opt-Outs. The deadline for health and care organisations to comply with National Data Opt-Out policy was extended to enable health and care organisations to focus their resources on the coronavirus (COVID-19) outbreak and is now 31 July 2022.

Patients can view or change their national data opt-out choice at any time by using the online service at www.nhs.uk/your-nhs-data-matters or by clicking on "Your Health" in the NHS App, and selecting "Choose if data from your health records is shared for research and planning".

NCH&C is committed to complying with the requirements of the National Data Opt-Out and further information can be found in our Privacy Notice here.

Caldicott Guardian

Every NHS Organisation has a Caldicott Guardian, who is a senior member of the Trust Board. They make sure that we only use any personal, identifiable information held about you in an appropriate way. 

NCH&C’s Caldicott Guardian is Carolyn Fowler, Director of Nursing and you can contact her by phoning 01603 697347 or emailing:  IG@nchc.nhs.uk 

Senior Information Risk Owner (SIRO)

Every NHS Organisation has a SIRO, who is a senior member of the Trust’s Board. They are accountable and responsible for information risk across the organisation. 

NCH&C’s SIRO is Andrew Hopkins, Director of Finance, and you can contact him by phoning 01603 697347 or emailing IG@nchc.nhs.uk

Data Protection Officer (DPO)

NCH&C is a public authority and therefore is legally required to appoint a DPO. The DPO assists with monitoring internal compliance, informing and advising on data protection obligations, providing advice regarding Data Protection Impact Assessments (DPIAs) and acting as a contact point for data subjects and the supervisory authority. 

NCH&C’s DPO is Matthew Poole, Head of Governance and Compliance and you can contact him by phoning 01603 272619 or emailing IG@nchc.nhs.uk