Mental Health Concern is a charity providing a wide range of specialist services on behalf of the NHS and local authorities in the North East of England. We are registered as a data controller with the Information Commissioner’s Office. Our registration number is Z4639161.
Contact details for our Data Protection Officer are:
36 Brenkley Way
Newcastle upon Tyne
Tel: 0191 217 0377
Personal data is defined by the General Data Protection Regulation (EU Regulation 2016/679) as ‘any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier’. Personal data is, in simpler terms, any information about you that enables you to be identified.
In order for us to provide you with a service we need to collect personal data including health information which is a special category of personal data. We are committed to ensuring that the information we collect, and use, is appropriate for this purpose and does not constitute an invasion of your privacy. We will process (collect, store and use) the information you provide in a manner compatible with the EU’s General Data Protection Regulation (GDPR).
We will endeavour to keep your information accurate and up to date, and not keep it for longer than is necessary.
In accordance with the Health and Social care Act 2012 and Health and Social Care (Quality & Safety) Act 2015, personal and sensitive information we will collect from you may include:
We collect this personal information in order to provide treatment services to you (including communicating with you, your GP, your NHS referrer, other medical advisors, care and support providers as appropriate).
We securely store your information on our electronic care records system and in paper form.
At Mental Health Concern, we collect and process personal data in order to provide you with the best and most appropriate care. This is essential in helping us to:
The legal basis for the processing of your personal and special category data is covered under provisions of Article 6 and 9 of the General Data Protection Regulation, such as ‘…a task carried out in the public interest or in the exercise of official authority vested in the controller’.
Mental Health Concern has a data protection policy which means that relevant information is only shared with people involved in your health care. This will include:
We will only consider sharing your personal information with other organisations or professionals where we consider that it an important part of delivering effective care. We do share your information with consent; however, we can also share your information when there is another legal basis to do so.
There may be occasions when we are legally required to share your personal data. This includes sharing information for the prevention of harm to yourself or others, child protection, the prevention, investigation and detection of a serious crime, including terrorism, or a Court Order. In these circumstances, Mental Health Concern will always do its best to notify you of the sharing of information and only share the minimum information required for the purpose.
We only share information with your family, friends, or advocates with your explicit consent. You have the right to refuse/withdraw your consent to this sharing at any time.
The information we collect will form your health record and we will retain this for eight years after the end of your treatment. All confidential information is destroyed in line with the NHS Records Management Code of Practice.
At any point while we are in possession of or processing your personal information, you have the following rights:
You can find out more about your rights under the UK’s data protection laws at www.ico.org.uk.
In the event that you wish to make a complaint about how your personal information is being processed by Mental Health Concern (or third parties as described), you can contact the Data Protection Officer using the contact details above.
If you are not satisfied with how your complaint has been, or is being, handled, you have the right to lodge a complaint directly with the Information Commissioners Office who is the identified supervisory body:
Information Commissioner’s Office
Tel: 0330 8303 0338
We may change this Privacy Notice from time to time. This may be necessary, for example, if the law changes, or if we change our business in a way that affects personal data protection.
Any changes will be made available on our website www.mentalhealthconcern.org
For more information relating to our Data Protection Impact Assessments, please contact our Data Protection Officer at email@example.com
If you would like a copy of, or have any queries regarding, our IG Policies and Procedures, please contact our Governance and Quality Department at firstname.lastname@example.org.
The national data opt-out was introduced on 25 May 2018, enabling service users to opt out of the use of their data for search or planning purposes. This is in line with the recommendations of the National Data Guardian’s Review of Data Security, Consent and Opt-Outs.
You can view or change your national data opt-out choice at any time by using the following link: www.nhs.uk/your-nhs-data-matters.
If you require more information about the national opt-out, please visit: https://digital.nhs.uk/national-data-opt-out.
To contact us about anything to do with your personal data and data protection, including to make a request for access to your information (subject access request), please use the following details for the attention of the Data Protection Officer:
36 Brenkley Way
Newcastle upon Tyne
Tel: 0191 217 0377