Registry Participants Privacy Notice

This privacy notice should be read in conjunction with the Privacy Statement found at: https://ibdregistry.org.uk/privacy-policy/

The purposes of the processing and recipients of personal data

The IBD Registry (the Registry/we/us) processes the personal data of individuals living with IBD in the UK for the purposes of improving care and treatments for people with IBD, improving their outcomes and widening knowledge about IBD, enabled through the collection and analysis of data relating to IBD on a national scale.  The data processed is used to:

 

• Drive continuous improvement in patient care and access to care across the UK
• Support clinical quality improvement and audit through analysing data against national benchmarks
• Inform commissioning and IBD service design
• Improve our understanding of long-term outcomes for people with IBD
• Provide local, regional & national data in order to better define the epidemiology (understanding of the disease) and understanding of care and treatments provided
• Provide analyses designed to inform people with IBD and the general public
• Support policy decisions and campaigning for people with IBD through the analysis of our data
• Support research through the provision of appropriate data

The lawful basis for the processing

Under data protection law the following lawful bases apply to the processing of personal data:

• Article 6(1)(f) – ‘processing is necessary for the purposes of the legitimate interests pursued by the controller…’
  • For our processing of personal data which enables analysis.
  • For our processing of personal data which enables research which has received approval via an internal ethical approval process.

• Article 6(1)(e) – ‘processing is necessary for the performance of a task carried out in the public interest…’
  • For the transfer of personal data to us by Trusts.
  • For our processing of personal data which enables research which has received independent ethical approval.

Under data protection law the following lawful bases apply to the processing of special categories of personal data:

• Article 9(2)(j) – ‘processing is necessary for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes…’
  • For the transfer of special categories of personal data to us by Trusts
  • For our processing of special categories of personal data which enables analysis and research.

Under the common law duty of confidentiality, the following lawful bases apply:

• For individuals who provide consent via our registration process, this permits healthcare providers and other data controllers that hold confidential healthcare data about participants to release this to us. The consent also allows us to process the confidential data we receive for the purposes of operating the Registry.
• For individuals who have not provided their agreement to participate in the Registry, we hold an approval from the Confidentiality Advisory Group under S.251 of the NHS Act 2006 (18/CAG/0131). This supports the processing of confidential patient information for the purposes of operating the Registry by setting aside the Common Law Duty of Confidentiality.
  • You can find out more about the Confidentiality Advisory Group and Section 251 support here.
  • We do not receive any data under Section 251 relating to individuals who have registered a National Data Opt Out.