The University of Bristol is the data controller for the Boyd Orr study. At the University of Bristol, we are committed to keeping the personal, health and research data about you used in the Boyd Orr study safe and confidential.
As a university, we use personally-identifiable information to conduct research to improve health, care and services. As a publicly-funded organisation, we have to ensure that it is in the public interest – as laid out in the University Charter – when we use personally-identifiable information in research. This means that when you are part of the Boyd Orr research study, we will use your data in the ways needed to conduct and analyse research into lifecourse influences on ageing, cancer and mortality. Health and care research should serve the public interest, which means that we have to demonstrate that our research serves the interests of society as a whole. We do this by following the UK Policy Framework for Health and Social Care Research.
How we use your data
The Boyd Orr study research team hold access to confidential patient information (your name, date of birth and NHS number) and has section 251 and Confidentiality Advisory Group support to use this data to find cancer registration and death certificate records, in order to collect information for the study. The Boyd Orr study will also securely share your name, date of birth and NHS number with organisations that hold official health data (e.g. NHS Digital). We do this to obtain information from these public organisations about your health status. We will not use this data to make decisions about your care or contact you. We do not make decisions using automated processing, such as profiling, that have legal or similarly significant effects. In all cases your data will be stored securely and with access strictly on a need-to-know basis. For more information about cancer registration and your rights please visit https://www.ndrs.nhs.uk/.
On completion of the study, your name and NHS number will be securely destroyed.
The Boyd Orr study collaborates with researchers around the world where the research serves the public interest. These approved researchers have access to limited, de-personalised sub-sets of the data in the study, and do not have access to your name, contact details or NHS number.
For more information about how your data is used in research visit http://www.understandingpatientdata.org.uk.
For more information about how the University of Bristol uses research participants’ personal data visit http://www.bristol.ac.uk/secretary/data-protection/policy/research-participant-fair-processing-notice/
Under General Data Protection Regulations (GDPR) you have a number of important rights, free of charge. Your rights to access, change or move your information are limited, as we need to manage your information in specific ways in order for the research to be reliable and accurate. If you withdraw from the study, we will keep the information about you that we have already obtained. To safeguard your rights, we will use the minimum personally-identifiable information possible. Further information about these rights can be found on the Information Commissioners website, www.ico.org.uk/for-the-public/.
If you wish to raise a complaint on how we have handled your personal data, you can contact the University of Bristol’s Data Protection Officer who will investigate the matter, using firstname.lastname@example.org. If you are not satisfied with our response or believe we are processing your personal data in a way that is not lawful you can complain to the Information Commissioner’s Office (ICO; www.ico.org.uk/concerns/).
If you do not wish your confidential data to be held by the Boyd Orr study research team or to be shared with organisations that hold official health data (e.g. NHS Digital) to find your cancer registration and death certificate records please email Professor Richard Martin at email@example.com and we will destroy your confidential patient information or prevent it being shared