Re: Data protection?

[Guest guest]

Hi Helen

If I can now step back into just being herbalist and not NIMH VP

for the following commentBelow info is on the ICO website.Basically it

means you or I have to do all we can to make sure we keep personal data

safe. e.g lock your patient records away. As long as we do all we can we

are complying with the Act.

The cynic in me agrees with - a means of making money. (That is

not an official NIMH line but most definitely me speaking, but I'm no

different to anyone else and have to comply - no different to having to

have car insurance or MOT).

best wishes

What is the Data Protection Act?

The Data Protection Act applies to personal information and ensures that

it is handled properly...

Personal information is information about you. It can be your name,

address or telephone number. It can be the type of job you do, the

things you buy and the place you went to school.

The Act works in two ways. Firstly, it helps to protect your interests

by obliging organisations to manage the information they hold in a

proper way. It states that anyone who processes personal information

must comply with eight principles, which make sure that it is:

* fairly and lawfully processed;

* processed for limited purposes;

* adequate, relevant and not excessive;

* accurate and up to date;

* not kept for longer than is necessary;

* processed in line with your rights;

* secure; and

* not transferred to other countries without adequate protection.

[Guest guest]

Hi Carol

> The only thing I am unsure about now is discussion via email btween my

> mentor and myself about (anonymous) cases. This still seems to fall

> between the gaps. it is perhaps most similar to discussing a case on

> a forum excluded to public.

>

I didn't want to reply to this until I asked and got it spot on, and she

has contacted ICO again (best for her to do it as she has made previous

contact). This is what she sent me - so hopefully that clears it up for you.

" Hi – checked this out as promised. They say it is the same as the forum

issue – providing that all cases are anonymised and cannot in any way be traced

back to the individual patient then they will not have to register with data

protection. If the mentee were to say case history number 1 and mark that

patients file with a number one to correspond then they would have to

register. "

So if you say e.g. patient is 61 year old man suffering from osteoarthritis and

don't give anything to identify " him " you'll be ok.

best wishes

[Guest guest]

Did you contact them to let them know? - as you say disgraceful.

best wishes

[Guest guest]

Thankyou so much and . Now I know exactly and feel much better.

Such a confusing area. And Thanks for all the veiws and comments.

Best Wishes

Carol