NWAS is a ‘Data Controller’ under the General Data Protection Regulation(GDPR). This means we are legally responsible for ensuring that all personal data that we hold and use is done so in a way that meets the current and future data protection principles. We must also tell the Information Commissioner about all of our data processing activity. Our registration number is Z9603234 and our registered entry can be found on the Information Commissioner’s website.
All of our staff receive annual information governance training to ensure they remain aware of their responsibilities. They are obliged in their employment contracts to uphold confidentiality, and may face disciplinary procedures if they do not do so.
As a Trust we have entered into contracts with other organisations to provide services for us. These range from software companies to contractors who provide transport services that help provide a better service to you as a patient. These contractors may hold and process data including patient information on our behalf. These services are subject to the same legal rules and conditions for keeping personal information confidential and secure. We are responsible for making sure that staff in those organisations are appropriately trained and that procedures are in place to keep information secure and protect privacy. These conditions are written into legally binding contracts, which we will enforce if our standards of information security are not met and confidentiality is breached.
We will not share, sell or distribute any of your personal information to any third party (other person or organisation) without your consent, unless required by Law. Data collected will not be sent to countries where the Laws do not protect your privacy to the same extent as the law in the UK, unless rigorous checks on the security and confidentiality of that data are carried out in line with legal requirements.
Accessing your information held by NWAS
You have the right to see or be given a copy of personal data held about you. To gain access to your information you will need to make a Subject Access Request (SAR) to the Trust.
Requests should be addressed to:
Information Governance Department
North West Ambulance Service NHS Trust
Estuary Point, 28 Estuary Boulevard, Liverpool L24 8RL
Freedom of Information Requests (FOI)
The Freedom of Information Act (2000) gives every Individual the right to request information held by Government Agencies. Private Companies are not subject to this Act.
Please note that a Freedom of Information Request is not a Subject Access Request.
For more information please refer to the Freedom of Information section of the Trust website here