CYANS Data Privacy Notice

What is CYANS?

The Children and Young People’s Allergy Network Scotland (CYANS) is a national managed clinical network which aims to improve clinical care and support for children and young people with allergies and their families, throughout Scotland. CYANS works in collaboration with patients and their families, health care professionals, academics, local education authorities and charitable organisations to improve access to services for allergy.

What is the purpose of the clinical audit system (CAS)?

CAS is a computerised database for people living in Scotland who have a specialist condition. Information about you/your child will be entered onto the system, with the aim of improving treatment and services.  The database will hold information that will help NHS professionals to better support allergy care and plan allergy services for children and young people in Scotland.   Any information that we use for planning services will not identify individual patients.

We will only share information that can identify you/your child with other health care professionals you see or who you are being referred to.

What sort of information do you collect?

We will need to collect information about you/your child’s diagnosis, condition, visits to clinics, any other conditions, and interventions as well as their name, date of birth and CHI (Community Health Index) number.

 Why have I been chosen to take part in the scheme?

You have been chosen because you/your child is looked after in clinics and hospital visits that are run by professionals working as part of CYANS.

Who manages the database?

The overall managers of the database are the National Services Division (part of NHS National Services Scotland), which is the common name for the Common Services Agency of the Scottish Health Service.  National Services Scotland and the 14 NHS health boards are joint data controllers. Professionals from the health board in your area will enter the information onto the database.

 Confidentiality

We will keep the fact that your child is taking part in the scheme confidential and will handle their information in exactly the same way hospitals handle all other patient information.  We will use an internal NHS computer network that will have no access to other networks outside the NHS in Scotland. The system will be password-protected and only those who are authorised will have access to it.

Your information will be held in line with the NHS Code of Practice (Scotland) 2012.

 Who has reviewed CAS?

The Network Steering Group and the Scottish Government Health Directorate have reviewed CAS and it has been approved by the Caldicott Guardians (people appointed by the Scottish Government Health Directorate to make sure information about patients is kept secure).

Processing your Information

The network processes your information under a legal basis defined in the data protection legislation.

The Right to Object

When the network is processing your personal information for the purpose of the performance of a task carried out in the public interest or in the exercise of official authority you have the right to object to the processing and also seek that further processing of your personal information is restricted. Provided the network can demonstrate compelling legitimate grounds for processing your personal information, for instance; patient safety or for evidence to support legal claims, your right will not be upheld.

You have the right to know what information we hold about you. To access this information, you will need to send a subject access request to your health board.

You also have the right to restrict how we handle your information, or alter or delete it, if you think it is not accurate.

Contact

For further information, please contact

National Network Management Service

NHS National Services Scotland
Gyle Square
1 South Gyle Crescent
Edinburgh
EH12 9EB

Phone: 0131275 6000

Email: nss.cyans@nhs.net

Website:  www.cyans.scot.nhs.uk

If you have any concerns about data protection within National Services Scotland, please contact our Data Protection Officer at: nss.dataprotection@nhs.net or you can ask at your health board how to contact your Board Data Protection Officer.

If you feel we have not kept to data-protection laws when handling your information, you can make a complaint to the Information Commissioner’s Office (ICO):  www.ico.org.uk

For full PDF please click here.