Who is processing the information?
Platinum Occupational Health Ltd acts as a Data Processor for the commissioner of Occupational Health Services. The individual appointed as Data Protection Lead for the Company is Dr Martin Ezan.
What personal information do we process?
Personal information including personal identifiers (e.g. name, date of birth etc.) as well as medical information that has been forwarded to us is processed and returned to the commissioner of services.
How is the information processed by us?
The information is obtained by it being sent to us from either the individual’s Company, GP, OH Provider and Specialist etc. for processing.
Why is it obtained, for what purpose?
The reason it is obtained is to undertake Occupational Health/Ill Health Retirement/Injury on Duty Services to be provided. The purpose is to undertake the duties appropriately.
How will it be used by us?
The information will be used for Occupational Health/Ill Health Retirement/Injury on Duty deliberations.
Who will it be shared with?
The information will remain within Platinum Occupational Health Ltd for the duration of the assessment; dictations will be typed by authorised employees, who have a confidentiality agreement with Platinum Occupational Health Ltd, and the outcome certificate/report will be shared with the commissioner of services.
What will be the potential effect of this on the individuals concerned?
The potential effect of this on the individuals concerned, is to improve their health/suitability for rehabilitation/work, back to provision/work of access to injury on duty/ pension/sick pay payments etc.
Is the intended use likely to cause individuals to complain or object?
The intended use is unlikely to cause individuals to complain or object, as it is ultimately for their benefit, either financially, physically, or psychologically.
What are we doing to ensure the security of personal data?
Access to personal data is limited to the Data Processor. Personal data is stored at Platinum Occupational Health Ltd and only the Data Processor has access. Electronic data is encrypted, password protected and with only Data Processor visibility.
Information about rights of access to their data:
Rights of access to the data is as per the General Data Protection Regulation (GDPR) requirements.
