Under the Data Protection legislation, data subjects have the following rights with regards to their personal information:
The Right to be Informed
The Belfast Health and Social Care Trust (Belfast Trust) issues certain information about our data processing activities that affect you. This information is provided in this Privacy Notice.
The Right of Access
Belfast Trust, as the data controller, must provide you with:
- confirmation that your data is being processed
- access to your personal data
For further information on how to make a Subject Access Request see (website link)
The Right to Rectification
You can ask Belfast Trust to correct personal information it holds about you to ensure your data is factually accurate. Please note, this only applies to matters of fact and not professional opinions, such as medical diagnosis.
The Right to Erasure (In certain circumstances)
You have the right to (under certain circumstances) ask for your personal data to be erased where:
- your personal data is no longer necessary in relation to the purpose for which it was collected/processed
- you object to the processing and there are no overriding legitimate grounds for the processing
- your personal data was unlawfully processed or should be erased to comply with a legal obligation
The Belfast can refuse to erase your personal data where it is processed:
- to comply with a legal obligation or for the performance of a task of public interest
- for the exercise or defence of legal claims
- for purposes relating to health and social care, medical diagnosis, preventative medicine, in the area of public health, archiving in the public interest, scientific/historic research or statistics
The Right to Restrict Processing (In certain circumstances)
You have the right to restrict the processing of personal data held by Belfast Trust where:
- you have contested its factual accuracy
- you have objected to the processing and Belfast Trust is considering whether they have a legitimate ground which overrides this
- processing is unlawful
- Belfast Trust no longer needs the data but you require it to establish, exercise or defend a legal claim
The Right to Data Portability
The right to data portability allows individuals to move, copy or transfer personal data easily from one IT environment to another in a safe and secure way, without hindrance to usability. This enables you to obtain and reuse your personal data across different services.
The right to data portability only applies:
- to personal data that an individual has personally provided to Belfast
- where the processing is based on consent or the performance of a contract
- where processing is carried by automated means (i.e. excluding paper files)
The Right to Object (In certain circumstances)
You have the right to object to processing of your personal data in certain circumstances.
You can also object if the processing is for:
- a task carried out in the public interest
- the exercise of official authority vested in Belfast Trust
- Belfast Trust’s legitimate interests (or those of a third party)
However, in these circumstances the right to object is not absolute and you must give specific reasons why you are objecting to the processing of your data.
Please be aware that Belfast Trust would be able to continue processing your personal data if:
- we can demonstrate compelling legitimate grounds for the processing, which override the interests, rights and freedoms of the individual
- the processing is for the establishment, exercise or defence of legal claims
Rights Relating to Automated Decision Making and Profiling
Automated decision-making takes place when an electronic system uses personal information to make decisions without human intervention.
At present, there are no fully automated decision making or profiling systems in use within Belfast Trust. This means that this right does not currently apply to any processing activities.