The CRIS Data Controller is Oxford Health NHS Foundation Trust.
\nData Protection Officer – Please contact the Head of Information Governance:
\nIM&T Directorate, The White Building, Littlemore Mental Health Centre, 33 Sandford Road, Littlemore, Oxford, OX4 4XN<\/p>\n
Processing of CRIS data is for the purpose of the provision of \u2018health care clinical audit, service evaluation and for medical research\u2019 and is necessary for medical purposes.\u00a0 It is undertaken by either a health professional or a person who in the circumstances owes a duty of confidentiality which is equivalent to that which would arise if that person were a health professional (Researcher).\u00a0 This is a \u2018task carried out in the public interest<\/strong>\u2019 as set out in UK Law.<\/p>\n CRIS data source comprises \u2018special categories\u2019 data which is health information captured in your medical record. This might include demographics, test results, clinical notes, letters and assessment forms. Therefore, technical and organisational safeguards are also in place that ensure respect for the principle of data minimisation (i.e. using only the absolute minimum of personal data required for a purpose) via the process of pseudonymisation.\u00a0 CRIS extracts data from the medical record in an identifiable state, then processed to remove the patient identifiers, and a new pseudonymous database provisioned. Processing is necessary for scientific research purposes, in the public interest.<\/p>\n The data controller for a CRIS system is the NHS Trust, and they determine the purpose and manner of processing through a (legally binding) contract with the data processor, which is Akrivia Health<\/a>. This provides instruction on how and what data will be processed to establish a CRIS system, the terms and conditions of processing and authority to use the listed sub-contractors to deliver the service. Akrivia Health sub-contract data processing activities for establishing a CRIS system to two sub-processors \u2013 Amazon Web Services<\/a> who provide the infrastructure for CRIS and Global Initiative Limited<\/a> who provide the Managed Service Provider (MSP) component of the Services. Responsibilities imposed on Akrivia Health by the data controller are flowed through sub-processing agreements\/commercial contracts to the sub-processors. For more information on data controllers and data processors, the differences and their responsibilities, the Information Commissioner\u2019s Office have published guidance available at the following link<\/a>.<\/p>\n Oxford Health NHS Foundation Trust are also part of the CRIS Network, therefore authorised researchers from this network may be granted access the Oxford Health NHS Foundation Trust CRIS pseudonymised data set.\u00a0 This is a group of highly innovative NHS Mental Health Trusts who are working together to accelerate research work in dementia and mental health.<\/p>\n Please see \u2018How do we maintain personal information that is held as a health and social care record?<\/a>\u2019 on our Trust Privacy Notice page<\/p>\n If you do not wish your confidential patient information used for planning and research purposes, please visit the National data opt-out programme<\/a> for further information.\u00a0 Please also see \u2018What are your rights?<\/a>\u2019 on our Trust Privacy Notice page<\/p>\n If you wish to raise a complaint on how we have handled your personal data, please see our \u2018What are your rights?<\/a>\u2019 section on our Trust Privacy Notice page, which includes details of our \u2018Data Protection Officer<\/a>\u2019 and the \u2018Information Commissioner\u2019s Office<\/a>\u2019.<\/p>\n ORCHARD<\/strong><\/p>\n Oxford Health CRIS links with the ORCHARD Project at Oxford University Hospitals (https:\/\/www.ouh.nhs.uk\/research\/patients\/trials\/orchard.aspx<\/a>). This project has ethical approval (ref 18\/SC\/0184) to undertake linkage of ORCHARD data with data on dementia and other mental health outcomes from the Oxford Health Clinical Record Interactive Search (CRIS) database, in order to determine the predictive value for ORCHARD project participants of cognitive and physical frailty markers for subsequent cognitive decline and dementia. The information which is linked between Oxford Health CRIS and ORCHARD includes cognitive test scores, diagnostic coding and information relating to episodes of care.<\/p>\nThe categories of data concerned and how do we obtain it<\/h3>\n
The potential recipients of the data<\/h3>\n
The data retention period<\/h3>\n
How subjects can exercise their rights in relation to such processing<\/h3>\n
How to lodge a complaint with the supervisory authority<\/h3>\n
\n CRIS Project Linkages<\/span>\n <\/summary>\n