Essex Partnership University NHS Foundation Trust (EPUT)

Address:
The Lodge
Lodge Approach
Wickford
SS11 7XX

Freephone: 0800 085 7935

Essex Partnership University NHS Foundation Trust (EPUT provides community health, mental health and learning disability services to support more than 3.2 million people living across Bedfordshire, Essex and Suffolk.

We are a large employer in the East of England with more than 5,400 staff working across more than 200 sites. We also provide services in people’s homes and community settings.

If you have any questions regarding your information and how it is used, please contact the below department and we will do our best to help:

Data Protection Officer (DPO)

epunft.dpo@nhs.net

Information Commissioners Officer registration number: ZA242481

If your issues cannot be resolved by the DPO regarding your query, and you are still not happy with our response, please see the Trust Complaints department details below and the ICO details (Information Commissioners Office).

Trust Complaints Department

01268 407817 / 01268 739717
epunft.complaints@nhs.net

Information Commissioners Office (ICO)

Call our helpline on 0303 123 1113 (local rate – calls to this number cost the same as calls to 01 or 02 numbers).

ICO website: Information Commissioner's Office (ICO)

You have the option to consult your own legal counsel for further opinions if you find the responses from the aforementioned contacts unsatisfactory.

Your clinical care team and other health and care professionals caring for you keep records about your health and any treatment and care you receive from the NHS. These help ensure that you receive the best possible care from us. They may be written down (manual records) or held on a computer. The records may include:

• Basic personal information about you, such as,
  • name
  • address
  • date of birth
  • contact details (telephone numbers/email address),
  • NHS number
  • next of kin details
• Contacts we have had with you, such as day care clinics and/or home visits
• ”Special categories” of information about you, such as,
  • Notes and reports about your health and any treatment and care you need
  • Details and records about the treatment and care you receive
• Relevant information from other health and social care professionals, local authorities, voluntary organisations, relatives or those who care for you and know you well

Other types of information used/processed by the Trust:

• Anonymised information/data, which is data about you, but you cannot be personally identified
• De-identified information/data (Pseudonymised), which is data about you, but you cannot be personally identified only your care pathway to help improve the services we provide
• We record CCTV images of people entering, approaching, or passing our buildings (there will be clear signs to advise you that CCTV is in operation) to;
  • Help staff and visitors feel safer
  • Act as a deterrent to offenders
  • Allow the collection of evidence to help find and convict offenders
  • Prevent, detect, investigate, and prosecute fraud
• Body Worn Video (BWV) footage is used by our Mental Health staff within our wards to reduce the potential escalation of incidents to protect patients and staff. This will allow the collection of evidence to help find and convict offenders. The BWV will only be activated if the staff feel there is a risk to safety. Should the BWV be activated, you will be advised by the staff.
• Realwear Headsets - Voice-activated headsets (Realwear) and use of SimplyVideo for real-time clinical assistance. Headset wearer (Clinician) will speak to the patient to make them aware of the headset and what it is to be used for. If patient does not want the headset used then they will not use it.
• Oxevision is a medical device that captures video footage to monitor the vital signs of patients. Footage can be used (clipped) in response to a patient safety incident or following a change in a patient's vital signs resulting in a system alert. The collection of evidence may be used to help with investigations, complaints, lessons learnt and inquests. The video data is stored on the system for 24 hours before being overwritten. Clipped footage is stored in line with local policy. The Lampard Inquiry has restricted the Trust from deleting records until the Inquiry has concluded.

Your information will also be used to help us manage the Trust and protect the health of the public by being used to:

• Review the care we provide to ensure it is of the highest standard and quality
• Ensure our services can meet service user needs in the future
• Investigate service users’ queries, complaints, and legal claims
• Prepare statistics on the Trust’s performance
• Audit Trust accounts and services
• Undertaking heath research and development (you may choose whether to be involved)
• Helping to train and educate healthcare professionals
• Test that current / new patient and clinical systems are working effectively
• Support the Lampard Inquiry which is a public inquiry established under the Inquiries Act 2005, and chaired by Baroness Kate Lampard CBE, to investigate mental health deaths in Essex in accordance with terms of reference which are available at lampardinquiry.org.uk. The Lampard Inquiry processes personal data provided to it by the Trust and others in accordance with its Privacy Information Notice which is available on its website, at lampardinquiry.org.uk/privacy/.”

Some of this information is held centrally within the Trust, but where this is used for statistical purposes stringent measures are taken to ensure that individual service users cannot be identified. Anonymous statistical information may also be passed to organisations with a legitimate interest, including Universities and Research Institutions.

Where it is not possible to use anonymised information, personally identifiable information may be used for essential NHS purposes. They may include research and auditing services.

You have a choice about whether your confidential patient information is used for research and planning.  If you are happy with this use, you do not need to do anything.  If you choose to opt-out, your confidential information will still be used to support your individual care.

To find out more or to register your choice to opt-out, please visit the Your NHS Data Matters website or call the national helpline on 0300 303 5678.  You can change your mind about your choice at any time. 

Everyone working for the NHS has a legal duty to keep information about you confidential and secure.

We keep your information safe and secure and comply with industry standards, such as, Cyber Security Essential and the Data Security and Protection Toolkit (DSPT).

You may be receiving care from other organisations as well as the NHS e.g. Social Services and the Voluntary Sector. We may need to share some information about you so we can all work together for your benefit. We will only ever use or pass on information about you if others involved in your care have a genuine need for it. When we pass on any information, we will ensure it is kept confidential and secure.

We are required by law to report certain information to the appropriate authorities. This is only provided after formal permission has been given by a qualified health professional, as defined under Data Protection. Occasions when we must pass on information include:

• Notification of births and deaths
• Where we encounter infectious diseases, which may endanger the safety of others such as meningitis or measles
• Child Protection cases
• Where a formal court order has been issued
• Benefits Agency cases
• National Treatment Agency for Substance Misuse to monitor the availability, capacity, and effectiveness of treatment for drug misuse in England 

We follow the local Trust policies and guidance in regard to the retention periods of data and information that we hold.

The Lampard Inquiry terms of reference (lampardinquiry.org.uk) and restrictions state that the Trust cannot delete any data and information until the Inquiry has concluded. Once the Inquiry has concluded, the Trust will start to align its retention periods with the national Records Management Code of Practice 2023, policies and guidance.

Everyone working within the NHS has a legal duty to keep information about you confidential and secure. Similarly, anyone who receives information from us has a legal duty to keep it confidential and secure.

We will share information with the following main partner organisations:

• Other NHS Trusts, hospitals that are involved in your care
• Clinical Commissioning Groups and other NHS bodies
• General Practitioners (GPs)
• Ambulance Trusts

You may be receiving care from other service providers as well as the NHS, for example Social Care Services. We may need to share some information about you with them so we can all work together for your benefit if they have a genuine need for it as part of your care or we have your permission. Therefore, we may also share your information with:

• Social Care Services
• Education Services
• Local Authorities
• Voluntary and private sector providers working with the NHS
• Police in emergency situations
• The Essex Mental Health Independent Inquiry

We are supporting the Lampard Inquiry which is in place to investigate deaths that took place in mental health inpatient facilities, or within three months post discharge, across NHS Trusts in Essex between 1 January 2000 to 31 December 2023. You may be written to by the Inquiry in order that they can share information with you regarding the Inquiry and to request your support to share experiences with them. We will endeavour to comply with all the Inquiry’s information requests that meet legal standards and the agreed terms of reference.

The Inquiry has its own Privacy Notice which is available here Privacy Information Notice - The Lampard Inquiry - investigating mental health deaths in Essex

However, a person’s right to confidentiality is not absolute and there may be other circumstances when we must share information from your patient record with other agencies. In these rare circumstances, we are not required to have your consent. Examples of this are:

• If there is a concern that you are putting yourself at risk of serious harm
• If there is concern that you are putting another person at risk of serious harm
• If there is concern that you are putting a child at risk of harm
• If we have been instructed to do so by a Court
• If the information is essential for the investigation of a serious crime
• If you are subject to the Mental Health Act (1983), there are circumstances in which your ‘nearest relative’ must receive information even if you object

If your information falls within a category that needs to be notified for public health or other legal reasons, such as certain infectious diseases

The information from your patient record will only be used for purposes that benefit your care - we would never share it for marketing or insurance purposes.

All Trust servers are based in the UK, however, if we do transfer your personal information outside the UK, we will make sure that it is protected to the same extent as it would be within the UK. 

You have a right to have your privacy respected and your data protected. The new law gives you easier access to the personal information we hold about your if you wish to check or change it. It is designed to give you confidence that this information is accurate, up to date and well managed.

Your rights are listed below.

• The right to request access to information we hold about you (https://eput.nhs.uk/contact-us/your-health-records-information/)
• The right to be informed about how we collect and process the information we hold about you
• The right to have your information rectified if the information we hold about you is not correct
• The right to request erasure of the information we hold about you that falls outside our legal basis
• The right to restrict processing which gives you an alternative to the erasure of the information we hold about you. This means we can hold the information, but we cannot use it or share it with external organisations.
• The right to object to the use of your information for reasons other than to provide you with care.

Please visit the Lawful Reasons for Using Your Data for more information.

Essex Partnership NHS University Foundation Trust is part of My Care Record, an approach to improving care by joining up health and care information. Health and care professionals from other services will be able to view information from the records we hold about you when it is needed for your care. Please see https://mycarerecord.org.uk/ for more information.

We may use AI technology to support our clinicians in identifying potential health issues. The AI technology may be used to review the data to identify potential findings and assist the clinician in decision-making and in no way will replace the final decision of a clinician. In addition, we may also use AI technology as part of our system security initiatives. We will also abide by the code of practice regarding the use of digital and data-driven health technologies, please refer to “A Guide to Good Practice for Digital and Data-Driven Health Technologies” - GOV.UK (www.gov.uk), Information Commissioners Office (ICO) guidance - Artificial intelligence | ICO, NHS England guidance - NHS England » Artificial intelligence (AI) and machine learning.

Essex Partnership University Trust (EPUT) and Mid and South Essex NHS Foundation Trust (MSEFT) are working together to launch the new patient portal in partnership with our third-party data processor, PKB.

Please see Patients Know Best for more information.

EPUT is committed to protecting your privacy. This Privacy Policy outlines how we collect, use, and protect your personal information when you participate in our lead generation campaigns through Facebook.

Information We Collect

When you engage with our campaign, we may collect the following information:

• Name
• Email Address
• Phone Number
• Any additional information you voluntarily provide

How We Use Your Information

The information we collect is used for the following purposes:

• The data will be used solely for the purpose of delivering the requested content and will not be shared with third parties.

Data Retention and Deletion

We will retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy. Once the campaign has concluded, we will delete your data securely within 30 days to ensure your privacy is maintained.

Your Rights

You have the right to:

• Access your personal information
• Request correction of inaccurate data
• Request deletion of your data at any time

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on our Facebook page and updating the effective date.