Confidentiality Policy
Cancer Network Fife retains personal relevant and sensitive information about users of the service and information relating to those employed to carry out the services offered by Cancer Network Fife, including Employees and Volunteers.
The strictest confidentiality is adhered to at all times, and under no circumstance will Cancer Network Fife make available or share in any way the information held with any other group/organisation or member of staff.
Use of Information
The information gathered by Cancer Network Fife will only be used for purposes of allowing the organisation to support and inform clients/service users of relevant help and advice pertaining to them.
It is accepted that during normal operating procedures, it may be necessary to discuss and disclose certain information with other team-members/supervisor. This does not in any way remove the requirement to ensure that strict confidentiality is adhered to, and the information holding and storage guidelines will be maintained. Under no circumstances will information gathered within the daily operations of Cancer Network Fife be taken or discussed outwith Cancer Network Fife.
Cancer Network Fife adheres to the legislation governing the protection of data, and is registered with the Information Commissioner as a Data Controller. The nominated person to act as Data Controller is the Project Co-ordinator.
All information held and stored is stored under the guidelines and in full compliance with the Data Protection Act, 1998.
Our Statement
We are required by law to:-
- Process personal data fairly and lawfully
- Obtain personal data only for one or more specified and lawful purposes and to ensure that such data is not processed in a manner which is incompatible with the purpose or purposes for which it was obtained
- Ensure that personal data is adequate, relevant and not excessive for the purpose or purposes for which it is held.
- Ensure that personal data is accurate, and where necessary, kept up to date.
- Ensure that personal data is not kept for any longer than is necessary for the purpose for which it was obtained.
- Process personal data is accordance with the rights of the individuals to whom the information relates.
- Ensure that personal data is kept secure.
- Ensure that personal data is not transferred to a country outside the European Economic Area unless the country to which the information is to be sent ensures an adequate level of protection for the rights (in relation to the information) of the individuals to whom the personal data relates.
Information held and retained by Cancer Network Fife will not be used for any purpose other than that for which it was given.
It is the responsibility of Cancer Network Fife to ensure that all Employees of Cancer Network Fife and all Volunteers who work within the daily operation of the organisation are fully aware of the specific guidelines laid down within this statement, and are fully compliant with the requirements of the Data Protection Act, 1998.
The members of Staff and the Volunteers employed by Cancer Network Fife in the daily operation of the organisation are responsible for ensuring that information that they hold or are party to, record or handle is done so within the strict confines of this statement. Individuals within Cancer Network Fife and the organisation have criminal liability for any recklessly disclosed personal information. A serious breach of this Policy is a disciplinary offence.
Statistical Analysis
Any statistical information compiled within Cancer Network Fife will in no way include information that can personally identify any individual.
An explanation of how statistical information is used by Cancer Network Fife will be given to any person making an enquiry.
Secure Handling of Information
Cancer Network Fife will ensure that all Employees and Volunteers receive training on how information is to be collected, recorded and stored.
Information that is held on paper will be stored within securely locking files within locked premises accessible by Employees and Volunteers of the organisation.
Information retained and stored in Databases will be accessible only to those with security clearance and assigned login certification. The Project Co-ordinator is responsible for granting computer access, and the Database will be locked to all those without granted permissions.
Information will be held for a period of six months from last contact with Service User/Client/Employee.