Data Protection and Medical Records

The Trust’s Data Protection and Medical Records Team are on hand to assist you with any Data Protection issues you may have or if you would like to request a copy of your medical records.

Access to Personal Information

The Freedom of Information Act does not change the right of patients for protection of their patient confidentiality in accordance with Article 8 of the European Convention on Human Rights, the General Data Protection Regulations 2016, Data Protection Act 2018 and at common law.

Maintaining the legal right to patient confidentiality continues to be an important commitment on our part. To help with this, WMAS has a Caldicott Guardian who is also our Medical Director Executive Directors – West Midlands Ambulance Service University NHS Foundation Trust (wmas.nhs.uk) who is responsible for ensuring that patient confidentiality throughout the Trust in accordance with your legal rights.

Under the General Data Protection Regulation 2016 and Data Protection Act 2018 you are also entitled to access your medical records, or any other personal information held about you. For more information, see our Data Subject Access Requests Guidance.

If you are the Police, see our guidance document for requesting personal information in relation to an investigation.

If you are Solicitors, see our guidance document for requesting access to personal information on behalf of your client.

If you require advice and guidance on any of these, please contact the Head of Governance, Safety and Security as per their contact details below.

Data and Information Sharing

Data Sharing Protocols are an agreement between public, private, and voluntary sectors to facilitate sharing of information to ensure that members of the public receive the services they need. All organisations involved have a legal responsibility to ensure that the use of this personal information is lawful, properly controlled and an individual’s rights are respected.

Below are copies of all Data Sharing Protocols / Agreements West Midlands Ambulance Service NHS Foundation Trust have entered with other partner organisations to ensure all parties involved are aware of their rights and responsibilities within the framework of the protocol.

Information Sharing Documents

Data Protection Impact Assessments

Data Protection Impact Assessments (DPIAs) are an integral part of taking a Data Protection by Design and Default. DPIA can reduce the risks of harm to our patients and staff through the misuse of their personal data. It also helps to design more efficient and effective processes for handling personal data.

Below are copies of all DPIAs West Midlands Ambulance Service University NHS Foundation Trust has completed to ensure all parties involved are aware of their rights and responsibilities within the framework of the procedure.

Data Protection Impact Assessments

Contact Details

For more information about this area, please contact:

Freedom of Information and Document Control Officer

or the

Head of Governance, Safety and Security

West Midlands Ambulance Service University NHS Foundation Trust
Millennium Point
Waterfront Business Park
Waterfront Way
Brierley Hill
Dudley
DY5 1LX

Telephone:  01384 215555

For Data Protection enquiries email: data.protection@wmas.nhs.uk