The Data Protection Acts 1988 and 2003 and the EU General Data Protection Regulation (GDPR) helps protect patients by providing laws to ensure adherence to the principles of good information governance.
Information governance is the set of standards we must follow in handling personal healthcare records. Good information governance means that all personal health information is handled legally, securely, efficiently and effectively in order to deliver the best possible care to people who use our services. It also includes sharing of relevant personal health information with our service users where appropriate.
The people who provide healthcare to you will use your records to:
No. If you wish to receive safe and appropriate care and treatment at any of our hospitals we must maintain an accurate record of relevant information about you. However, if you have any concerns about providing information or how we share this information with other healthcare providers, please discuss this with our staff so that you fully understand the potential impact on your care or treatment.
Yes, we may also share relevant information about you with other organisations, such as:
When we do share information with other organisations involved in your care, we do so under a formal agreement about how it will be used and kept confidential. This can be explained further on admission. We will not disclose your information to any other third parties without your permission unless there are exceptional circumstances, such as if the health and safety of others is at risk or if the law requires us to pass on information.
Relevant information about you may also be used to help us to:
Wherever possible we use information that would not identify you personally (anonymous information) but we will let you know if we are using your data for this purpose.
Research has a vital role to play in the development of healthcare and health service delivery. The Bon Secours are teaching hospitals and we support and promote research activity within the hospital. Our Research Ethics Committee must approve research before it takes place. If we wish to use your personal information for research then we will ask you for permission first. You will not be identified in any published results without your agreement.
Everyone working in the Bon Secours Health System has a legal duty to keep information about you confidential. Anyone who receives information from us is also under a legal duty to keep it secure and confidential by EU Directive. You have the right to confidentiality under the Data Protection Act 1998 and the Human Rights Acts, 1988 and 2003 and GDPR 2016 (in force May 2018)
Yes. You have the right to access any information we hold about you. The GDPR and Data Protection Act allow you to find what information is held about you.
Patients can request their own personal health records or the records of a dependant by contacting us directly. We encourage requesters to contact the relevant hospital Department to ensure that the correct information is given and to narrow the field of enquiry. Contact details are shown in the table below.
Bon Secours Data Protection Representatives (DPR):
|
Facility |
DPR |
eMail Address |
Address |
|
Cork Hospital |
Paul Reidy |
dpbsc@bonsecours.ie |
Medical Records Dept, Bon Secours Hospital, College Road, Cork T12 DV56 |
|
Dublin Hospital |
Shereen Dunne |
dpbsd@bonsecours.ie |
Medical Records Dept, Bon Secours Hospital, Glasnevin Hill, Glasnevin, |
|
Galway Hospital |
Margaret McHugh |
dpbsg@bonsecours.ie |
Medical Records Dept, Bon Secours Hospital, |
|
Limerick Hospital |
Sarah O’Sullivan |
dpbsl@bonsecours.ie |
Medical Records Dept, Bon Secours Hospital at Barringtons, George’s Quay, |
|
Tralee Hospital |
Olivia Pryal |
dpbst@bonsecours.ie |
Medical Records Dept, Bon Secours Hospital, |
|
Cork Care Village |
Tracy Cahill |
dpbsj@bonsecours.ie |
Bon Secours Care Village, Lee Road, |
For your convenience and in the interests of processing your request more efficiently we have provided a form that you can complete and send to the relevant hospital as per the table above. This is available using a link at the bottom of this page.
If you wish to discuss your application for deceased patient records, please contact the relevant DPR directly using contact information above.
Parental consent will be required to process the personal data of children under the age of 16.
There is no fee for personal information requests.
Informed Consent is giving permission or agreement for an examination, intervention or treatment following a conversation in which the patient has received enough information to enable him/her to understand the nature and potential risks and benefits of the proposed examination, intervention or treatment.
In order to be valid consent must be:
Voluntary- not influenced by Healthcare Professionals. The person must understand that they have a choice.
Informed- the person must be given all the information they require regarding the examination, intervention or treatment. Information must include risks as well as benefits, any alternatives to the proposed examination, intervention or treatment and possible complications.
The person must have the Capacity to consent- the ability to understand the nature and consequences of a decision at the time the decision is to be made. The person should ask questions if they don’t understand any of the information given to them. A person is always presumed to have the capacity to consent unless the opposite has been demonstrated.
A person lacks capacity if their mind is impaired or disturbed in some way, and this means the person is unable to make a decision at that time. A person’s capacity is assessed each time a decision needs to be made, as a person’s capacity can change. Capacity is assessed by the healthcare professional who is asking for the person’s consent.
Consent can be:
Verbal : “Can I examine your tummy?” “Yes.”
Implied : “Can I take your blood pressure?” Patient holds arm up.
Written: Signing a consent form for an operation. We will always request our patients to do this. The procedure cannot take place without a written consent.
In emergency situations where the treatment is immediately necessary to save the life or preserve the health of the person the necessary treatment may be administered without expressed consent.
Role of the family
No other person such as a family member, friends or carer can give or refuse consent on behalf of an incapacitated adult unless they have specific legal authority to do so.
Their role is to provide greater insight into the person’s previously expressed views and preferences and to outline what the person wanted to do.
Minors
For children under the age of 16 years, a parent or legal guardian can consent to the treatment of the child. Minors who have reached 16 years of age can give consent to any surgical, medical or dental treatment as if they had reached adult age. It is not necessary to obtain any consent from his or her parent or guardian; however it is good practice to involve the parent or guardian if the 16 or 17 year old wishes.
For further information or queries about your data and your data protection rights, please contact the Data Protection Officer, Bon Secours Health System, Bon Secours Group Offices, 7 Riverwalk, Citywest, Dublin 24, D24 H2CE, phone: 01 685 4474, email: dpo@bonsecours.ie.
