The Student Health Centre (SHC) wants to ensure the highest standard of medical care for our patients and we understand and respect the importance of privacy and confidentiality. Our practice is consistent with Medical Council guidelines and the privacy principles of the Data Protection Acts. We see our patients’ consent as being the key factor in dealing with their health information. This privacy statement is about making consent meaningful by advising you of our policies and practices on dealing with your medical information.
In order to provide for your care we need to collect and keep information about you and your health on our records.
Access to patient records is regulated to ensure that they are used only to the extent necessary to enable the clinicians or admin team to perform their tasks for the proper functioning of the SHC. In this regard patients should understand that SHC staff may have access to their records to ensure safe and efficient care for you. SHC staff will need to access your record to carry out the following functions:
Students attending the SHC are viewed as adults and we fully respect their right to privacy and confidentiality.
The SHC will not disclose your medical details to parents or relatives without your consent other than in exceptional circumstances such as a medical emergency. If you wish, you may attend the SHC in person to give your consent for a discussion with your parents, guardians or other relatives to take place.
We may need to pass some information to other health and social care professionals in order to provide you with the treatment and services you need. Only the relevant part of your record will be released. These other professionals are also legally bound to treat your information with the same duty of care and confidentiality that we do.
The law provides that in certain instances personal information (including health information) can be disclosed, for example, in the case of infectious diseases or where there is a risk to you or others.
In general, medical certificates issued by the SHC will only provide confirmation that you are unfit for college, work or examinations. Where it is considered necessary to provide additional information we will discuss that with you.
In the case of disclosures to insurance companies or requests made by solicitors for your records, we will only release the information with your signed consent.
It is usual for patient information to be used for research and audit in order to improve services and standards of practice. Information used for such purposes is done in an anonymised or pseudonymised manner with all personal identifying information removed.
If it were proposed to use your information in a way where it would not be anonymous or the Practice was involved in external research, we would discuss this further with you before we proceeded and seek your written informed consent. Please remember that the quality of the patient service provided can only be maintained and improved by training, teaching, audit and research.
In keeping with the data protection principles, we will only store your data for as long as is necessary for the purposes for which it was submitted and in accordance with the University’s Records Management and Retention Policy. Medical records will normally be retained for a student’s duration of study plus 8 years. Records containing information regarding mental health issues will be retained for 20 years following last contact as per the best practice advised by the HSE. After these periods of time, electronic records will be archived as ‘inactive’ and hard copy paper files will be shredded confidentially.
You have the following rights in relation to the personal data we hold about you:
This statement should be read in conjunction with the University’s Student Data Protection Privacy Notice and the SHC’s Confidentiality Policy. Further information on data protection at the University of Limerick may be viewed at www.ul.ie/dataprotection. You can contact the University’s Data Protection Officer at firstname.lastname@example.org or by writing to Data Protection Officer, room A1-073, University of Limerick, Limerick.
You have a right to lodge a complaint with the Office of Data Protection Commissioner (Supervisory Authority). While we recommend that you raise any concerns or queries with us first, you may contact that Office at email@example.com or by writing to the Data Protection Commissioner, Canal House, Station Road, Portarlington, Co Laois.