Health and Care Jersey (HCJ) is registered as a data controller under Data Protection (Jersey) Law 2018, and processes personal and special category data to deliver its services and support Islanders’ health and wellbeing.
Health and Care Jersey also support individuals to exercise their data protection rights, including enabling access to their health and social care records.
HCJ process Subject Access Requests for Children’s Social Care (CSC) and Child and Adolescent Mental Health Services (CAMHS).
Why we need your information and how we use it
To fulfil your request for access to information, HCJ will need to be able to:
- verify who you are
- assure you have the authority to access information relating to others
- understand what information you need and in what format
- scope your request and process it effectively
What personal data we collect and who has access to it
We will ask for your:
- name, contact number and email address
- address when requesting paper copies of records
- date of birth and proof of identity of applicant and data subject
- proof of authority when accessing records relating to others
- nature of your request, including services accessed or date range
You will also be able to provide us with information that you may feel is useful for us to source the information you are requesting.
Your information will be accessed by the HCJ Information Governance team which is responsible for processing your request. We may liaise with specialist and service areas, CSC and/or CAMHS to source records, where the team does not have direct access to the information it needs.
All records are reviewed prior to disclosure to ensure that they match the scope of your request and do not contain any information that either relates to other people or where information could cause you harm or better provided to you in person prior to its disclosure. For example, where recent test results may indicate an illness that you are not yet aware of or where the contents of the record may be upsetting.
The HCJ IG team undertake reviews in partnership with clinical teams, care coordinators and the HCJ Caldicott Guardian.
In any event, your name is shared only with those that need to know and to support us in delivering our public function and enabling your right of access.
Where your personal data is stored and how long we keep it
Your request and the disclosure we prepare for you in response will be stored securely in HCJ IG’s records repository, on the Government of Jersey network and documented on the HCJ IG Register.
HCJ IG will hold details of your request, including your personal and special category data, for 10 years.
When we will review this privacy notice
We will continually review and update this privacy notice to reflect changes in the service and your feedback, as well as to comply with changes in the law.
Where you can find more information
For more information about how Health and Care Jersey process your personal data, please visit: Health and Care Jersey privacy policies.
Complaints
If you have an enquiry or concern regarding processing your personal data you can contact ig@health.gov.je.
If you wish to make a complaint about how your Subject Access Request, you can contact the Government of Jersey Data Protection Officer at DPO@gov.je .
If you believe that we have contravened your data protection rights, you have the right to make a complaint at any time to the Jersey Office of the Information Commissioner (JOIC).
We would, however, appreciate the chance to deal with your concerns before you approach the JOIC, so please ig@health.gov.je in the first instance.
gov.je