CCTV images and body worn images
Purpose
The trust has CCTV (Closed Circuit Television) cameras installed in various locations across our building for the purposes of preventing and detecting crime, disorder, anti-social behaviour and the fear of crime by helping to provide a safer environment for those people who work for the trust, our patients, and visitors.
A number of trust security staff and some clinical staff operate Body Worn Video (BWV). These cameras process video images and audio data of members of the public and people who come into contact with these staff members. BWV will only be used after a warning has been given and only when an offence is being committed or likely to be committed. Once an incident is over, BWV will be turned off.
Areas where fixed CCTV cameras and BWV is in place will be clearly marked by visible signage.
Recorded footage is secure and encrypted meaning that only authorised staff can access it. In the case of BWV, the operator will not be able to access the footage directly.
Information we collect
Images of you, where you are, what you do, and who you are with. Audio of what you say.
Our lawful basis
In order to legally be able to process your personal data, we must have a lawful basis under the United Kingdom General Data Protection Regulation. Our lawful basis for the purpose of processing data in our stated purpose is:
UK GDPR
Article 6 (1)(e) processing is necessary for the performance of a task carried out in the public interest.
Who we share your information with
Relevant law enforcement bodies organisations.
Our processors
The trust uses the following processor:
- CCTV and BWV supplier (who provide the actual camera)
- External security company (who provide onsite security)
How long will we keep your data
We will keep your personal data in line with the retention periods detailed in the NHS retention schedule.
Your Rights
Data protection laws give you a number of rights over your personal data. These rights are detailed below.
The right to be informed
The trust is required by law to provide you with information about how it collects and uses your personal data. The trust, by way of this privacy notice is providing you with this information.
The right of access
You have the right to access the information we hold about you. You can access some information, such as information from your hospital record, hospital appointments, test results and messages from MyHealth patient portal. You can find out more information on how to do this here. To access any other personal information we hold, please see our guidance on Health Records or contact the Access Team at rf-tr.AccessRequests@nhs.net.
The right to rectification
You have the right to have inaccurate information about you corrected or incomplete information completed. This is not that same as disagreeing with a clinical observation or opinion and asking for this to be changed. If you disagree with a clinical opinion you should discuss this with the team who’s care you are under. To update your basic contact details or address, please contact the Patient advice and liaison service (PALS) team.
To request any other inaccurate information corrected please contact rf-tr.AccessRequests@nhs.net.
The right to erasure
The right to erasure is also known as ‘the right to be forgotten’. The right is not absolute and only applies in certain circumstances.
This is limited to:
Where we still hold your personal data, but it is no longer necessary for the purpose for which we originally collected or processed it; or,
We have to erase it to comply with a legal obligation.
To exercise this right, please contact rf-tr.AccessRequests@nhs.net.
The right to restrict processing
You have the right to restrict the processing of your personal data in certain circumstances. This means that you can limit the way we use your data. This is an alternative to requesting the erasure of your data. The right is not absolute and only applies in certain circumstances.
This is limited to:
Where you contest the accuracy of your personal data and we are verifying the accuracy; or,
We no longer need the personal data, but you need us to keep it in order to establish, exercise or defend a legal claim.
To exercise this right, please contact rf-tr.AccessRequests@nhs.net.
The right to data portability
The right to data portability does not apply to the processing of your personal data for this purpose.
The right to object
You have the right to object to the processing of your personal data at any time. This effectively allows you to stop or prevent us from processing your personal data.
An objection may be in relation to all of the personal data we hold about you or only to specific information.
The right to object only applies in certain circumstances. You must give specific reasons why you are objecting to the processing of your data. These reasons should be based upon your particular situation.
In these circumstances, your right to object is not an absolute right, and we do not need to comply if we can demonstrate compelling legitimate grounds for the processing, which override your interests, rights and freedoms. To exercise this right, please contact rf-tr.AccessRequests@nhs.net.
Rights in relation to automated decision making and profiling
The trust’s clinical staff use tools to help assist in you diagnoses and treatment; However, the results are always reviewed and interpreted by an appropriately trained clinician who will have the final say in your diagnoses and treatment. The trust does not make any solely automated decisions about you.