Print

Print


As well as delivering the actual treatment, "medical purposes" includes
the management of healthcare services.  As Roland points out, for
patient care reasons there is probably a need to keep a record of the
procedure for a time, plus there are clinical audit needs, and a
management need to keep a record of what was done to whom and when.  You
only have to meet one Schedule 3 condition, so the fact that the patient
no longer consents presumably isn't relevant for first principle
purposes.  They could, of course, seek to exercise their s 10 or 14
rights, but then they would need to show that the processing is likely
to cause substantial damage or distress that the data is inaccurate.

Susan Graham.

University Records Manager
Policy & Planning
University of Edinburgh
Old College
South Bridge 
Edinburgh
EH8 9YL 

Tel: 0131 6514 100

------------------------------

Date:    Tue, 11 Apr 2006 15:53:03 +0100
From:    Duncan Smith <[log in to unmask]>
Subject: Medical Records - deletion

Could I just check something with the list?
 
A patient undergoes treatment at a private hospital, and then
subsequently
requests that clinical records detailing their treatment are destroyed.
 
Their rationale is this:
 
Patient argues that data was processed under schedule 3 'medical
purposes'
(and we believe explicit consent, although this has been questioned)
Following the treatment, the patient suggests that the medical purpose
has
now expired, and the hospital no longer has a legal basis to retain the
detailed records.
 
Supporting this argument, the patient cites the fact that the treatment
was
elective, non-emergency and privately funded.  Once the treatment has
ceased, the patient argues that the relevance of the data to the medical
purpose ceases and should thus not be retained beyond the immediate
treatment.
 
I would be interested in the views of those involved in the provision of
Healthcare, and in particular those who strive to meet the requirements
of a
'registered person' in the Care Standards Act and the requirements of
the
DPA.
 
 
Duncan Smith
 
iCompli Ltd.




^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^



       All archives of messages are stored permanently and are



      available to the world wide web community at large at



      http://www.jiscmail.ac.uk/lists/data-protection.html



      If you wish to leave this list please send the command



       leave data-protection to [log in to unmask]



            All user commands can be found at : -



        http://www.jiscmail.ac.uk/help/commandref.htm



Any queries about sending or receiving message please send to the list owner



              [log in to unmask]



  (all commands go to [log in to unmask] not the list please)



   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^