Data Protection Policy

Data Management Policy:

Introduction

In the course of their work employees may come into contact with and use confidential personal information about people.  This policy will ensure that employees do not breach data protection legislation including the General Data Protection Regulation (GDPR) and the Data Protection Act 2018, (DPA). If employees are in any doubt about what they may or may not do, they should seek advice from their line manager. If they are in doubt and cannot get in touch with their line manager or the Finance & Information Manager, they must not disclose the information concerned.

Parkhaven Trust holds personal data on all employees relating to their employment and on service users relating to the provision of care.  Every effort is made by Parkhaven Trust to ensure that the accuracy and relevance of this information is maintained. Changes notified by the individual, relatives or other health professional will be acted upon. It is the responsibility of the individual employee to inform their line manager of any information changes so that the relevant records can be updated.

This policy consists of three elements relating to the General Data Protection Regulation (GDPR).  It outlines the rights that individuals have under the GDPR in relation to the data that we hold about them; their right to access the personal data that Parkhaven Trust holds on them and Parkhaven Trust’s obligation to report to the Information Commissioner if data under our control is exposed to risk or ‘breached’.

The purpose of this policy is also to ensure that information, correspondence and records which are no longer current are stored and promptly disposed of, when appropriate, in an efficient and responsible manner. This will ensure that the organisation has ease of access to current files and that any historical documents can be readily retrieved if required

Individuals, for the purposes of this policy, includes service users, paid staff (current, prospective and former), volunteers, Trustees and contractors.

Full Data Management Policy available here.  (November 2024)

Full Information Technology and Data Security Policy available here. (November 2024)