Privacy notice - Regulatory bodies

This document details the privacy notice for regulatory bodies NMC/GMC/HCPC

Publication date:
31 May 2018
Date range:
May 2018 - May 2021


Regulatory bodies
Subsection Information
1. Data Controller contact details

Kent and Medway NHS and Social Care Partnership Trust
Head Office, Farm Villa, Hermitage Lane, Maidstone, Kent,

2. Data Protection Officer contact details Leanne McDougall
Head of Information Governance, St Michaels House, St Michaels
Road, Sittingbourne, Kent, ME10 3DW
3. Purpose of Processing

To provide regulatory bodies with relevant information relating to safety of practice.

4. Lawful basis for processing

The legal basis supported by the GDPR provisions are:

  • Article 6(1)(c) ‘Processing is necessary for compliance with a legal obligation to which the data controller is subject”
  • Article 9(2)(d) ‘processing is carried out in the course of its legitimate activities with appropriate safeguards”
5. Recipient or categories of
recipients of the processed data
The data will be shared with the NMC / GMC / HCPC according to the legislative requirements.
6. Rights to object You have the right to object to some or all the information being
processed under GDPR Article 21. Please contact the Data Controller or Data Protection Officer.
7. Right to access and correction You have the right to access the data that is being shared and have any inaccuracies corrected. There is no right to have accurate medical records deleted except when ordered by a court of Law.
8. Retention Period The data will be retained for active use during the processing and
thereafter according to NHS Policies and the law.
9. Right to Complain

You have the right to complain to the Information
Commissioner’s Office. To complain to the Information Commissioner you can use this link

Call their helpline Tel: 0303 123 1113 (local rate) or 01625 545 745 (national rate)

There are National Offices for Scotland, Northern Ireland and Wales, (see ICO website)