Hampshire Hospitals NHS Foundation Trust
CAST – Covid Asymptomatic Staff Testing
Data Privacy Notice – For Covid-19 Asymptomatic Staff Testing
Hampshire Hospitals Foundation Trust (HHFT) takes its responsibility as the Data Controller for your personal information very seriously and has produced this Privacy Notice in order to explain exactly how your information will be processed in relation to CAST Testing for COVID-19.
In response to the emergency COVID19 pandemic, HHFT will be administering self-sampling kits. This is in order to ensure the safety of the Trust’s staff, their families and our patients. You will be notified and asked to collect a sampling kit using one or all of; an email to your work address, a text message sent to your personal mobile number or an email to your personal email address. Instructions on how to use these sampling kits will be provided to you. We may also send you reminders by text or email if you have not returned your samples. In order to conduct staff COVID testing, HHFT will require your name, date of birth, hospital number and other sample data.
As part of the CAST Testing HHFT is required to share your personal information with Public Health England (PHE) and NHSX. Please refer to the privacy notices for these organisations should you require further information on how they use personal data. As part of the CAST Testing HHFT will process your personal data sourced from ESR. The categories of information being processed and shared with the above organisations consists of the dataset below:
- Forename
- Surname
- Date of Birth
- Gender
- Postcode of residence
- Date of test
- Type of test
- Result
- Organisation name (HHFT)
Your personal information processed as part of the CAST Testing will be accessed by appropriate clinicians and staff directly involved in CAST Testing and will be securely retained on Trust clinical systems in accordance with current clinical records guidance and retention policy. Names and contact details will be stored on a secure database within the Cloud for two years. Once the retention period is reached, your personal information associated with CAST Testing will be securely and permanently deleted from HHFT systems.
Uptake information will also be shared with Managers to support you and enable analysis throughout this process. Any positive results will be flagged to the Trust Tracing Team who will contact you around ‘next steps’. To ensure your contact details are accurate, we will update ESR with any amendments you provide throughout this process.
This information is being processed in compliance with data protection legislation whereby processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller as per Article 6(1)(e), and for the provision of health or social care or treatment or the management of health or social care systems as per Article 9(2)(h), of the UK General Data Protection Regulation (GDPR).
Please refer to the Trust Intranet for further information regarding the staff COVID Testing program.
For further information about your data rights and/or your right to lodge a complaint with the supervisory authority the Information Commissioner’s Office, visit our extranet, and/or contact the HHFT Data Protection Officer Jessica Hodge by emailing information.governance@hhft.nhs.uk or by writing to the Data Security and Protection Team, Royal Hampshire County Hospital, Romsey Road, Winchester, SO22 5DG.
