Print

Print


Not an unheard of solution in the NHS - certainly some Clinical Commissioning Groups outsource it to Commissioning Support Units (which are also NHS, but a different legal entity and Data Controller).

Kind regards,
Andrew.


Andrew Harvey AMIRMS, PG Cert (DP and IG)
Group Head of Information Governance / Data Protection Officer 
Chair, Sussex-Wide Information Governance Group
Chair, National Health and Social Care Strategic Information Governance Network

Brighton and Sussex University and Western Sussex Hospitals NHS Trusts
Worthing Hospital, Lyndhurst Road, Worthing, West Sussex, BN11 2DH
Tel 01903 205111 x84508
Mob 07900 736922
Email for BSUH business [log in to unmask] 
Email for WSHFT business [log in to unmask] 
If unavailable [log in to unmask]
Is your Information Governance Mandatory Training up to date? If not, click here.
        
www.westernsussexhospitals.nhs.uk 
The information contained in this e-mail may be subject to public disclosure under the NHS Code of Openness or the Freedom of Information Act 2000.
Any processing, redistribution, disclosure, or reproduction of this message, except as intended is prohibited. Unless the information is legally exempt from disclosure, the confidentiality of this e-mail and your reply cannot be guaranteed.
If you received this e-mail in error, please notify the sender and remove all copies of the message, including any attachments. Any views or opinions expressed in this e-mail (unless otherwise stated) may not represent those of Brighton and Sussex University and Western Sussex Hospitals NHS Trusts.
E-mails are not considered a secure medium for sending personal, sensitive or confidential information outside the Trust network unless encrypted and may therefore be at risk.

-----Original Message-----
From: This list is for those interested in Data Protection issues [mailto:[log in to unmask]] On Behalf Of Lucy Martin
Sent: 13 January 2020 10:46
To: [log in to unmask]
Subject: [data-protection] Outsourcing SAR Process

Hi all, Just wondering if any of you outsource your SAR process to an external company?  It's something that has been raised in our organisation and to be honest it fills me with fear.  Just wondered if anyone had successfully done this and has any recommendations.  Thanks

^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
     All archives of messages are stored permanently and are
      available to the world wide web community at large at
      http://www.jiscmail.ac.uk/lists/data-protection.html
     If you wish to leave this list please send the command
       leave data-protection to [log in to unmask]
All user commands can be found at https://www.jiscmail.ac.uk/help/subscribers/subscribercommands.html
 Any queries about sending or receiving messages please send to the list owner
              [log in to unmask]
  Full help Desk - please email [log in to unmask] describing your needs
        To receive these emails in HTML format send the command:
         SET data-protection HTML to [log in to unmask]
   (all commands go to [log in to unmask] not the list please)
    ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
     All archives of messages are stored permanently and are
      available to the world wide web community at large at
      http://www.jiscmail.ac.uk/lists/data-protection.html
     If you wish to leave this list please send the command
       leave data-protection to [log in to unmask]
All user commands can be found at https://www.jiscmail.ac.uk/help/subscribers/subscribercommands.html
 Any queries about sending or receiving messages please send to the list owner
              [log in to unmask]
  Full help Desk - please email [log in to unmask] describing your needs
        To receive these emails in HTML format send the command:
         SET data-protection HTML to [log in to unmask]
   (all commands go to [log in to unmask] not the list please)
    ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^