The Health Board is a public service which works in partnership with other public services. These are often known as ‘statutory services’ because they are created by laws (i.e. statute). The Welsh Senedd (and sometimes the Westminster Parliament) creates law and rules that explain to public services in Wales how they should work together to ensure the well-being of the people.
We share information with a range of public sector partner organisations where sharing is allowed by the law. For example, personal data can be shared to support the following public services:
· Local authority social services & homeless services
· Housing providers
· Educational providers
There is more information on this topic below.
If you opt to use private healthcare, we may need to send your personal data to the professional or their organisation outside the NHS.
Academics working for or on behalf of legitimate academic institutions are able to process personal data when they are carrying out legitimate research within the appropriate legal and ethical limits.
These legal limits include:
· The contents of research and reports should not identify specific individuals.
· The results of research and reports are not used to target specific individual research subjects, other than where it is specifically medical research.
· Medical research also has its own special additional rules.
Healthcare services are regulated by a number of organisations which have a wide range of legal powers. We will cooperate with these bodies to investigate serious incidents and errors. Some of these organisations have the legal power to force us to provide personal data, such as the Healthcare Inspectorate Wales (hiw.org.uk).
We may also share your personal information to third parties if we are under a legal duty to disclose or share your personal data in order to comply with any legal obligation on us, or in order to protect our rights, property, staff or safety of our patients, or other people.
We may also need to share your data with organisations (including private sector organisations) that provide services to us (for example our cloud-based data storage or system providers). These will all be organisations with which we have legal contracts and measures in place to safeguard your individual rights. In many cases, they will not have direct access to your personal data.
When the UHB contracts with the supplier of a registered medical device, the supplier may also be under a legal obligation to retain certain limited personal data to meet their obligations as a manufacturer.
Rydym yn croesawu galwadau ffôn yn Gymraeg, Saesneg a Iaith Arwyddion Prydain (BSL) via SignVideo.
We welcome phone calls in Welsh, English and British Sign Language (BSL) via SignVideo.