Data Protection

NHS Lothian is required to process a large variety of personal data in order to carry out its statutory functions. NHS Lothian processes patient and carer data for healthcare related purposes, including provision of care, administration of healthcare services, teaching and research. Personal data is also held on current, past and prospective employees, suppliers, and others with whom it communicates. All such this policy outlines NHS Lothian intention to process personal data professionally and securely regardless of how the data is collected, recorded and used – whether on paper, in a computer system or recorded on other media.

NHS Lothian will ensure appropriate Data Protection Impact Assessment(s) are completed with any new use of personal data is proposed. This will ensure all aspects of the processing are considered and risks are documented and where necessary address before the commencement of processing.

When data sharing is necessary NHS Lothian will ensure appropriate Data Sharing or Data Processing Agreement are in place documenting the processing taking place.

NHS Lothian complies with Data Protection legislation and will ensure all data is processed respectfully and in accordance with the law.