6.1 The Right to be Informed (Articles 13 and 14)
Individuals have the right to be informed about the collection and use of their personal data under Articles 13 and 14 of the UK GDPR. This is a key transparency requirement under the UK GDPR and must be provided to individuals at the time personal data is collected from them. St. Thomas Surgery and West Cross Medical Centre are obliged to provide individuals with the following information
• the purposes of processing an individual’s personal data
• the lawful basis for processing
• the retention periods for that personal data
• the details of any third parties that the information is shared with
• the categories of data being processed
• the details of the Data Protection Support Officer/Service
• the name and contact details of the practice’s representative
• the rights available to individuals in respect of the processing
• the right to lodge a complaint with the supervisory authority (ICO)
• the source of the personal data
• the right to withdraw consent where consent is used as the legal basis
• the details of whether individuals are under a statutory or contractual obligation to provide the personal data
• the details of the existence of automated decision-making, including profiling
The practice meets individuals’ right to be informed by the provision of privacy information. The practice utilises a layered approach and provides privacy information in a variety of formats, including:
• All Wales Your Privacy, Your Rights posters and leaflets Your Privacy Your Rights Leaflet for web
• Detailed privacy information via the practice website
• Waiting room notice boards Your Privacy Your Rights A3 Poster for Print
• Printed leaflets in new patient registration packs Privacy Information – New Patients
Please complete the Individual Rights Request form and email to [email protected] or hand in at reception