What your rights are

Data protection law provides you with the following rights:

  • The right to be informed, which requires the practice to supply information about the collection and use of your personal data, known as ‘privacy information’. The managing patient data section of the website provides this information
  • The right of access, which allows you to obtain confirmation whether your data is being processed, as well as access to the information we hold about you.
  • For more information please visit the how to access the information we hold about you page.
  • The right to rectification, which allows you to have inaccurate information corrected, and any incomplete information completed.
  • The right to restrict processing, which means that you can limit the way that the practice uses your data in certain circumstances, for a certain period of time e.g. if you have raised concerns over the accuracy of your information, you may also request that your data is not used while we consider whether it needs to be corrected.
  • The right to object, which allows you to request that we stop using your information for specific purposes.
  • Where the practice processes your information using the lawful basis of ‘public task’, the practice has the right to refuse your request if there are legitimate grounds to continue to process your information.
  • where the practice processes your information using the lawful basis of ‘legal obligation’, your right to object does not apply.
  • Rights in relation to automated decision making and profiling.

You also have the right to complain about the way in which we use your information. You can complain directly to the practice, or to our Data Protection Officer or the Regulatory Authority.

Additional rights which do not apply

Data protection law also provides 2 other rights, however these do not apply to information which is being processed using the lawful basis of ‘public task’ or ‘legal obligation’, or the special category data of health information.

  • The right to erasure, also known as the ‘right to be forgotten’
  • The right to data portability