Confidentiality
How does Highland Sexual Health protect my information?
We care about your personal data and it’s important that you know how we use it and keep it safe. We use a computer system just for sexual health clinics in Scotland Called ‘NaSH’. You have been asked to complete a registration form so we can create an electronic record using your personal details. We prefer to download your name and address details using your NHS Scotland number (CHI number); this saves time and reduces errors. The registration form will record your permission to use CHI.
You will either be given a personal reference number (e.g. AN012345678); please keep this number safe as it may be required to access test results or we will use your CHI number. We are committed to protecting your privacy and will only process personal confidential data in accordance with the Data Protection Act 2018.
Who can access NaSH and my personal information?
NaSH can only be accessed by staff working within Sexual Health and HIV services across Scotland and they have a legal duty to keep information about you confidential. At the time of registration we will ask if your clinical information can be shared across Health Boards or if you wish it restricted to one Health Board area. Please be aware that access to your information is strictly controlled.
Only staff directly involved in your care or investigating complaints or clinical incidents are allowed to access this information.
All of our staff receive information governance training to ensure they are aware of their personal responsibilities and have contractual obligations to uphold confidentiality, enforceable through disciplinary procedures.
Can I access my information on NASH?
You have a right to access any information held about you and we would be happy to provide the necessary information from your electronic record on request and free of charge. Under the Data Protection Act 2018, you have a right to know who holds personal information about you. This
person or organization is called the data controller, and for this purpose is NHS Highland. The request should be made to High-UHB.CentralRecsAccessAdmin@nhs.net
How is my information used?
Your information is used mainly to provide care and treatment.
Service information such as the number of users, their ages, and reasons for attending is used to carry out research and audit projects in order to improve services and teach health professionals, to protect or improve public health, and for administration of the services. This information does not identify individuals.
The registration form also records whether you have given consent for your information to be shared with other organisations or people and this is checked and updated at each attendance. You can change these permissions at any time.
Would you share my clinical information without my consent?
Information may be disclosed without your consent where there is a legitimate interest in accordance with the Data Protection Act 2018. This can include;
· Where there is a legal requirement
· Where a child or vulnerable adult may be in need of protection or at risk of harm
· To aid the police in the prevention or detection of a serious crime
Where appropriate we would contact you to inform you that your information had been shared and with whom.
Further Information
Each NHS Board has Caldicott Guardians and data protection officers who are responsible for protecting the confidentiality of service users and their information and enabling appropriate and lawful information sharing. If you are unhappy with the way in which we use your personal information you can contact your local data protection officer; high-uhb.dpohighland@nhs.net
You also have the right to complain to the Information Commissioner’s Office
If, at any time, you would like to know more about how we use your information, you can speak to any member of staff or write to your local data protection officer at high-uhb.dpohighland@nhs.net
Further information about how NHS Scotland protects data confidentiality is available here NHS Data Protection and NHS Inform or for further information on how NHS Highland protects data confidentiality please see visit this link: NHS Highland - Your Rights