University Hospitals Bristol and Weston NHS Foundation Trust (UHBW) was formed on 1 April 2020 following the merger of University Hospitals Bristol NHS Foundation Trust and Weston Area Health NHS Trust.
The information on this page is historic. Visit the UHBW what we do with your information page for the latest information.
What Information do we collect from you?
Health and social care professionals working with you - such as doctors, nurses, support workers, psychologists, occupational therapists, social workers and other staff involved in your care - keep records about your health and any care and treatment you receive. This may include:
It is essential that your details are accurate and up to date. Always check that your personal details are correct when you visit us and please inform us of any changes as soon as possible.
Most of your records are electronic and are held on a computer system and secure IT network. New models of service delivery are being implemented, with closer working with GPs and other healthcare and social care providers. To make this possible, the use of other electronic patient record systems to share your information will be implemented. You will be given the opportunity to say no and to object to this sharing. Sharing your information via secure electronic methods, means that necessary information relating to you which is relevant to the care that you need, is shared more quickly and accurately. If you opt out of your information being shared via this method, then this information will still be shared via the slower more traditional routes such as letters, phone calls and emails. See also Connecting Care below.
Why do we collect this information about you?
Your information is used to guide and record the care you receive and is vital in helping us to;
What is your legal basis for processing my personal information?
When you consent to treatment we do not rely on that same consent to use your information as a 'legal basis for processing'. We rely on specific provisions under Article 6 and 9 of the General Data Protection Regulation, such as '…a task carried out in the public interest or in the exercise of official authority vested in the controller.'
In particular the Trust has a legal duty under the Health and Social Care Act 2008 (Regulated Activities) Regulations 2014 to maintain securely an accurate, complete and contemporaneous record in respect of each service user, including a record of the care and treatment provided to the service user and of decisions taken in relation to the care and treatment provided. Because of this there are limitations on your rights to object to the keeping of records or to ask for them to be deleted.
This means we can use your personal information to provide you with your care without seeking your consent.
Other legal duties may require us to use your information for processing a complaint, for assessing, monitoring and improving the quality and safety of the services we provide, to seek feedback on the quality of services, or for the general management of the NHS.
The NHS is supported by a complex network of statutory duties and powers. We have provided here an overview of the main provisions applying to the Trust. If you require specific information about the particular duty or power supporting any activity please contact the Data Protection Officer: wnt-tr.dpo@nhs.net.
What else do we use your information for
In addition to using your information for managing your care it may be used for some additional purposes including:
In some cases you have the right to opt-out of the use of your information for purposes other than your direct care. See the section on the National Data Opt-Out below.