华体会

Managing your information

How we manage and protect your information

At St George鈥檚 University Hospitals NHS Foundation Trust, we handle patient, staff, and business information responsibly to deliver safe care and to ensure Trust operations run effectively.

‘Managing information’ means securing, storing, and using your data according to data protection laws and NHS guidelines. On this page, you can learn about our privacy practices, how we safeguard your data, your rights regarding personal information, and how to make specific data requests.

Keeping your data safe

Protecting your personal data is a core responsibility at St George鈥檚. Each year, we submit our data security and protection toolkit to NHS Digital, verifying that our data handling practices align with national standards for safety and security.

Our staff members are thoroughly trained to manage your information securely and with respect. Both electronic and paper records are stored in secure locations with restricted access for authorised personnel only. We conduct regular audits and system updates to maintain high security standards for your data.

How we use and share your personal information

St George鈥檚 collects and uses personal data to provide care, support our staff, and manage services efficiently. We publish privacy notices to explain how we use data and protect privacy. These notices outline our policies for patients, visitors, and staff and clarify how we responsibly handle each type of data.

Learn more about our privacy notices

Our legal basis for processing your data under UK GDPR ensures that we use personal data only as necessary for care and operations. When needed, we may share relevant data with healthcare providers involved in your treatment, ensuring they have the information necessary to support your care. Data is shared securely and solely for direct care purposes.

Read about how we share data for direct care

Your rights and access to your health records

As a patient, you have rights under data protection laws regarding your personal information, including the right to access, correct, restrict, or request deletion of your data. You also have the right to request a copy of your health records, either for yourself or someone acting on your behalf.

Learn how to access health records

Additionally, you can choose if your data is used for purposes beyond your individual care, such as research and planning. The NHS national data opt-out program provides more information on these options.

Freedom of information requests (FOI)

St George鈥檚 is committed to transparency and accountability. We regularly publish information on our organisation, finances, and services in our publication scheme. If you cannot find the information you need, you may request additional non-personal data under the Freedom of Information Act 2000. FOI requests cover operational data but do not include personal health information, which is protected by data protection laws.

How to make a freedom of information request

Contact us about data protection

If you have questions or concerns about how we manage and protect your personal information, please reach out to our data protection officer. Our information governance team is available to help answer questions, provide guidance, and address any concerns.

The Team protection your data are:

To contact us:

Data protection officer
Information governance team
St George鈥檚 University Hospitals NHS Foundation Trust
Blackshaw Road, London
SW17 0QT
Email: [email protected]

Should you be dissatisfied with how your data is managed, you have the right to contact the information commissioner鈥檚 office (ICO), the independent UK body for upholding information rights. Visit the ICO or call 0303 123 1113 for more information.