Document Reference No.
HRPOL043
Download
Policy Summary
Shetland Health Board processes special categories of personal data and personal data relating to criminal convictions and offences in accordance with the UK General Data Protection Regulation (UK-GDPR) and the Data Protection Act 2018 (DPA 2018). Under Schedule 1 of the DPA 2018, NHS Shetland is required to have an appropriate policy document (APD) in place which: a. explains NHS Shetland procedures for securing compliance with the principles in Article 5 UK-GDPR in connection with the processing of personal data in question; and b. explains NHS Shetland policies as regards the retention and erasure of personal data processed, giving an indication of how long such personal data is likely to be retained.
Author
IG Manager, FOI Lead and DPO
Executive Lead
Director of Finance and SIRO
Status
Current