The information held about you, within your CHIE record is about your health and social care history. This information is a snapshot of your medical and social care history and not your entire health and social care information. This information is sourced from NHS organisations and other health and social care providers. Being the primary ‘subject’ of the information (or data) held on CHIE, means that you have certain rights provided to you.
Individuals should be informed of how their data will be used. For more information on how data is used, please refer to CHIE’s privacy notice.
Individuals have a right to know what information is contained in their health record (referred to as a Subject Access Request or SAR).
CHIE is data repository and not the main or sourced health record, therefore if a you wish to obtain a copy of your health record(s) or wish to know what information is contained within your health record(s), you should refer to the treating health or social care provider and seek information from the source organisation
Personal data can be rectified if it is inaccurate or incomplete. However, as CHIE is not the source of this data, you will need to make contact with the original health or social care provider.
This is often referred to as the 'right to be forgotten' and it only applies in certain circumstances:
• the basis for lawful processing is consent and this has been withdrawn, and there is no other legal ground for processing
• the individuals whose data is being processed objects and there are no overriding legitimate grounds
• the personal data has been collected in relation to information society services
• the personal data is no longer necessary for the purposes for which it was collected for.
However, as CHIE is not the source of this data, you will need to make contact with the original health or social care provider.
Individuals have the right to require organisations to restrict processing where:
- accuracy is contested by the individual
- processing is unlawful and the subject opposes erasure
- the organisation no longer needs the data, but the subject requires it to be kept for legal claims
- the individual has objected, pending verification of legitimate grounds.
However, as CHIE is not the source of this data, you will need to make contact with the original health or social care provider.
Individuals have the right to receive personal data about them in a ‘commonly used and machine-readable format.’
This right is only available where the processing is based on consent and the processing is automated.
Please note, this is not the legal basis for CHIE data processing. Therefore, with regards to the data held by CHIE, this right does not apply.
Individuals have the right to object to:
• processing based on legitimate interests or the performance of a task in the public interest/exercise of official authority (including profiling)
• direct marketing (including profiling)
• processing for purposes of scientific/historical research and statistics.
Should you have any queries relating to the process of your date you can contact the CHIE team here.
Profiling analysis aspects of an individual’s personality, behaviour, interests, and habits to make predictions or decisions about them.
Automated decision-making is the process of making a decision by automated means without any human involvement. These decisions can be based on factual data, as well as on digitally created profiles or inferred data.
Automated decision-making often involves profiling, but it does not have to.
Please be advised that this right, also does not apply to CHIE.