Data Protection and Information Governance

Humber NHS Foundation Trust collects, stores and uses large amounts of personal data every day, such as medical records, personal records and computerised information. This data is used by many people in the course of their work.

We take our duty to protect your personal information and confidentiality very seriously and we are committed to taking all reasonable measures to ensure the confidentiality and security of personal data for which we are responsible, whether computerised or on paper.

At Trust Board level, we have a Senior Information Risk Owner who is accountable for the management of all information assets and any associated risks and incidents, and a Caldicott Guardian who is responsible for the management of patient information and patient confidentiality.

What information do we collect about you?

The doctors, nurses and team of healthcare professionals caring for you keep records about your health and any treatment and care you receive from the NHS. These records help to ensure that you receive the best possible care. They may be written down in paper records or held on computer. These records may include:

  • Basic details about you such as name, address, date of birth, next of kin, etc.

  • Contacts we have had with you such as appointments or clinic visits.

  • Notes and reports about your health, treatment and care.

  • Results of x-rays, scans and laboratory tests.

  • Relevant information from people who care for you and know you well such as health professionals and relatives.

It is essential that your details are accurate and up to date. Always check that your personal details are correct when you visit us and please inform us of any changes as soon as possible.

How your personal information is used

Your records are used to direct, manage and deliver the care you receive to ensure that:

  • The doctors, nurses and other healthcare professionals involved in your care have accurate and up to date information to assess your health and decide on the most appropriate care for you.

  • Healthcare professionals have the information they need to be able to assess and improve the quality and type of care you receive.

  • Appropriate information is available if you see another doctor, or are referred to a specialist or another part of the NHS.

Your information will also be used to help us manage the NHS and protect the health of the public by being used to:

  • Review the care we provide to ensure it is of the highest standard and quality.

  • Protect the health of the general public

  • Manage the health service.

  • Ensure our services can meet patient needs in the future.

  • Investigate patient queries, complaints and legal claims.

  • Ensure the hospital receives payment for the care you receive.

  • Prepare statistics on NHS performance.

  • Audit NHS accounts and services.

  • Undertaking heath research and development (see below).

  • Helping to train and educate healthcare professionals.

For these purposes we use anonymous data wherever possible.

Who do we share personal information with?

Everyone working within the NHS has a legal duty to keep information about you confidential. Similarly, anyone who receives information from us has a legal duty to keep it confidential.

We will share information with the following main partner organisations:

  • Other NHS trusts and hospitals that are involved in your care.

  • Clinical commissioning groups and other NHS bodies (see below).

  • General practitioners (GPs).

  • Ambulance services.

You may be receiving care from other people as well as the NHS, for example Social Care Services. We may need to share some information about you with them so we can all work together for your benefit if they have a genuine need for it or we have your permission. Therefore, we may also share your information, subject to strict agreement about how it will be used, with:

  • Social care services.

  • Education services.

  • Local authorities.

  • Voluntary and private sector providers working with the NHS.

We will not disclose your information to any other third parties unless: 

  • We have your permission

  • We have to share by law

  • We have good reason to believe that failing to share the information will put you or someone else at risk of serious harm or abuse.

  • We hold information that is essential to prevent, detect, investigate or punish a serious crime.

Please ask our staff if you have any concerns or would like further information. Alternatively you can contact the Information Governance Team, Mary Seacole Building, Willerby Hill, Willerby, HU10 6ED, Tel: 01482 477854 or email:

Clinical commissioning groups (CCGs)

CCGs are responsible for planning the health needs of their patients, and for paying to keep their local health services running. Information in computerised form is sent to CCGs, with your name and address removed, but including NHS numbers and postcodes. Exactly the same information is sent to the Office of National Statistics which produces information about the performance of hospitals.

The NHS Care Record Guarantee

The NHS Care Record Guarantee (PDF, 128.2kB) for England sets out the rules that govern how patient information is used in the NHS and what control the patient can have over this.

It covers people’s access to their own records; controls on other’s access; how access will be monitored and policed; options people have to further limit access; access in an emergency; and what happens when someone cannot make decisions for themselves.

Everyone who works for the NHS, or for organisations delivering services under contract to the NHS, has to comply with this guarantee.

How you can access your records

If you would like to request a copy of your medical record, please complete our access to health records form and send to Medical Records Department, Mary Seacole Building, Trust Headquarters, Willerby Hill, Hull, HU10 6ED.


The Data Protection Act 1998 requires organisations to notify with the Information Commissioner to describe the purpose for which they process personal information.  These details are publicly available on the Information Commissioner’s website:

Freedom of Information

The Freedom of Information Act 2000 provides any person with the right to obtain information held by Humber NHS Foundation Trust, subject to a number of exemptions.  If you would like to request information from us, please contact: Freedom of Information Mary Seacole Building Willerby Hill Willerby HU10 6ED  or email:

Please note: if your request is for information we hold about you (for example your health records), please instead see above under “How you can access your records”.

Information governance enquiries, please contact:

Information Governance, Humber NHS Foundation Trust, Mary Seacole Building, Willerby Hill, Beverley Road, Willerby, HU10 6ED.  Tel. 01482 477854 or  email: