Privacy notice - Research

This document details the privacy notice for Research

Publication date:
17 July 2018
Date range:
July 2018 - July 2021


Subsection Information
1. Data Controller contact details

Kent and Medway NHS and Social Care Partnership Trust
Head Office, Farm Villa, Hermitage Lane, Maidstone, Kent,

2. Data Protection Officer contact details Leanne McDougall
Head of Information Governance, St Michaels House, St Michaels
Road, Sittingbourne, Kent, ME10 3DW
3. Purpose of Processing

Medical research.

4. Lawful basis for processing

Identifiable data will be shared with researchers either with explicit consent or, where the law allows, without consent. The lawful justifications are;

  • Article 6(1)(e) “processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller”
  • Article 9(2)(j) “Processing is necessary for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) based on Union or Member State law which shall be proportionate to the aim pursued, respect the essence of the right to data protection and provide for suitable and specific measures to safeguard the
    fundamental rights and interests of the data subject”
5. Recipient or categories of
recipients of the processed data

The data will be shared with the study teams and origination working on behalf of the sponsors of the research.

A full list of research sponsors is available to view here

6. Rights to object

Data protection legislation gives data subjects the right to object to the processing of personal data about them. This applies where the legal basis for processing is ‘task in the public interest’ or ‘legitimate interests’.

However, this right does not apply where data is processed for research purposes as appropriate safeguards are in place, and the processing is necessary for a task carried out in the public interest.

7. Right to access and correction

Right of access

The right of data subjects to access personal data about themselves includes a right to a copy of the personal data and access to information about the processing. However, this right does not apply when data is processed for health or social care research purposes where appropriate safeguards are in place; and the results of the research or any resulting statistics are not made available (including to other data controllers) in a
which identifies the data subject; orin the opinion of an appropriate health professional, disclosure to the data subject is likely to cause serious harm.

Right to rectification

Data protection legislation gives data subjects the right to obtain from the controller, without undue delay, the rectification of inaccurate personal data. This can include having incomplete personal data completed by means a supplementary statement. However, this right does not apply where data is processed for research purposes and appropriate safeguards are in place.

8. Retention Period The data will be retained for the period as specified in the specific research protocol(s).
9. Right to Complain

You have the right to complain to the Information
Commissioner’s Office. To complain to the Information Commissioner you can use this link

Call their helpline Tel: 0303 123 1113 (local rate) or 01625 545 745 (national rate)

There are National Offices for Scotland, Northern Ireland and Wales, (see ICO website)