Looking after your personal information:
From May 25 2018 there will be a new set of regulations that ensure that all of our personal information will be protected.
The General Data Protection Regulations (GDPR) will replace the existing Data Protection Act of 1998 and will bring the regulations up to date and help protect our personal information from our ever expanding digital footprint.
Our Data Protection Promise:
As ‘Data Controllers’ of your personal data, we take our role in the protection of your data very seriously. As such, we promise to:
1. Only collect data from you that is relevant to your physiotherapy treatment.
2. Not pass on your personal data to any third-parties for marketing purposes.
3. Contact you and get your consent if we need to communicate with other health professionals (such as your doctor) about your care.
4. Use Private Practice Software to store your personal information, physiotherapy notes and associated records. This means your information is well protected from theft or unauthorised access. Full details of this security is available at www.rushcliff.com.
5. We maintain registration with the Information Commissioner’s Office, the UK’s independent body set up to uphold information rights. Visit: www.ico.org.uk
Should you have any concerns about your personal data or you wish to have information about the personal data we hold about you you can contact us at firstname.lastname@example.org
Your Data Protection Rights under the GDPR:
When GDPR comes into effect in May 2018 you will have the right to:
• Access any of the information that we collect plus any other content that forms part of your patient record, including notes and expect to be able to read them and understand what they mean without expert medical knowledge.
• Know if you personal information has been forwarded to a third-party (such as a fellow healthcare professional, consultant or GP.)
• Have any invalid information about you corrected.
• Have your personal data deleted by us if you decide to switch to another physiotherapy provider.
• Prevent further use (or processing) of your information.
• Ask your physiotherapist to send you (or your new physiotherapist) your personal information in an open electronic format like a .csv file or text file.
• Request that your physiotherapist stops sending you any marketing information.
• Ensure that any profiling that is undertaken using your personal data is fair, appropriate, statistically valid and transparent.
• Expect your physiotherapist to take appropriate measures to protect your data.
• Be notified if critical information about you was inappropriately accessed and was deemed to be a critical breach.
• Not to have your personal information transferred outside the EU.
• Know how your personal information is being used by your physiotherapist.