Need Urgent Help?

Need Urgent Help?

Privacy Notice

South London and Maudsley NHS Foundation Trust – Addictions Services

Introduction and Commitment to Privacy

South London and Maudsley NHS Foundation Trust (SLaM) takes the privacy of our service users seriously. This notice explains how our Addictions Services collect, use, store, and share your personal data to provide you with safe and effective treatment and to meet our legal obligations.

 

We process your data in compliance with the UK General Data Protection Regulation (GDPR) and the Data Protection Act 2018.

Data Controller: South London and Maudsley NHS Foundation Trust

Service: SLaM led [insert specific name here] Service

 

1. What Information Do We Collect?

We collect different kinds of personal and health information about you to deliver your care. This includes:

 

Data Category

Examples of Data Collected

Personal Data

Name, address, date of birth, phone number, email address, and NHS number (if known).

Special Category Health Data

Medical history, substance use information, treatment records, test results, medication details, and appointment notes.

2. Why We Collect Your Data and Our Lawful Basis

We are required to identify a legal reason (lawful basis) under GDPR for collecting and using your information. For health-related data (Special Category Data), we must meet a separate condition.

 

Purpose/Activity

Lawful Basis (GDPR Article 6)

Condition for Health Data (GDPR Article 9)

To Provide Your Direct Care and Treatment (Assessment, treatment, medication prescribing, safety)

Necessary for the performance of a task carried out in the public interest.

Processing is necessary for the purposes of preventive or occupational medicine, for the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services. (Article 9(2)(h))

To Meet Legal & Professional Obligations (Safeguarding, court orders, CQC requirements)

Necessary to comply with a legal obligation.

Processing is necessary for reasons of substantial public interest. (Article 9(2)(g))

National Contractual Monitoring (NDTMS reporting)

Necessary for the performance of a task carried out in the public interest.

Processing is necessary for reasons of public interest in the area of public health or statistical purposes. (Article 9(2)(i) and (j))

Sharing with Other Agencies based on your choice (Housing, voluntary services)

Consent (where appropriate and recorded).

Explicit Consent (Article 9(2)(a)).

3. How We Store Your Information

Your information is held securely and confidentially:

 

  • Clinical Systems: Stored on secure, NHS-controlled and commissioned clinical computer systems.
  • Physical Records: Where necessary, information is also held in secure paper-based records.
  • Security: Your data is protected in accordance with strict NHS standards and UK data protection laws, including our duty of confidence.

 

You can read more about SLaM’s general approach to confidentiality here: https://slam.nhs.uk/confidentiality-and-privacy.

4. Who We Share Your Information With

We share your information with other professionals only when necessary for your care, our legal duties, or with your consent.

 

Routine and Essential Sharing (Cannot be Opted Out of for Direct Care)

  • Your Care Team: Members of your direct care team share information about your treatment and medication to ensure the best and safest clinical care.
  • Your GP and Specialist Services: We must share information with your General Practitioner (GP) and other specialist/secondary health services, including hospitals, particularly for safe prescribing and treatment coordination. This sharing is essential for your safety and cannot be opted out of.

Regional Sharing

  • London Care Record (LCR): We share your confidential information through the LCR system with other healthcare professionals in your area who are directly involved in your care. These professionals are legally bound to access and use this information responsibly.

Sharing Based on Your Consent

  • People Important to You: We will only share information with your named Next of Kin, family member, partner, or friend if you have provided us with explicit consent to do so. You specify the level of information you wish to share.
  • Other Services: We may share information with other support organisations that you are involved with, such as housing associations, probation services, or social services, only if you consent.

Mandatory Sharing (Breach of Confidentiality)

In line with our legal and ethical duties, we may be required to share your information without your consent in specific circumstances:

 

  • Risk of Harm: If we believe you are at serious risk of harm to yourself or pose a risk to others.
  • Safeguarding: If we have concerns about the safety of a child or vulnerable adult.
  • Legal Requirements: If required by a court order, other legal obligation, or to protect public health (e.g., infectious disease reporting).

 

National Monitoring and Statistics (Anonymised Data)

We share anonymised data (with your identity removed) with national bodies for monitoring, statistical, and service improvement purposes:

 

  • NDTMS: Anonymised information is shared through the National Drug Treatment Monitoring System (NDTMS) with the Office for Health Improvement and Disparities (OHID) and the Department of Health and Social Care (DHSC) to help improve addiction services nationally.

5. Your Data Rights

Under data protection law, you have several rights regarding your personal information:

 

  • Right of Access: You have the right to request access to your health records (Subject Access Request), subject to certain legal limitations.
  • Right to Rectification: You can request that we correct information you believe is inaccurate or incomplete.
  • Right to Change Your Mind: You can inform your treatment service if you change your mind about sharing data at any time (e.g., withdrawing consent). Please be aware that limiting sharing may affect the care we can provide (e.g., prescribing medication).
  • Right to Object/Restriction: You can request that we limit who we share your information with. We will review this, but the ability to restrict sharing may affect the care we can provide.
  • Right to Withdraw from Treatment: You have the right to withdraw from treatment at any time.

6. Sharing Your Info During Online Referrals:

When you or another professional initiates a written referral, certain details about you may be stored on our clinical systems and may be accessible via the London Care Record system for other healthcare professionals involved with your care.

If you have any questions or concerns regarding how your information is managed and shared, please contact us confidentially on 020 3228 1500

Alternatively, you are welcome to visit our open access service to self-refer , obtain further information or discuss any queries you may have.

Our service is available Monday to Friday, from 9am to 4pm.

7. Contact and Complaints

If you have any questions about this privacy notice, how your information is used, or wish to exercise your rights:

  1. Speak to Your Care Team: Your keyworker is the first point of contact for questions about your data and treatment.
  2. Contact PALS: You can contact our Patient Advice and Liaison Service (PALS) for independent support and advice.
  3. Complain to the Trust: If you have concerns or wish to make a formal complaint about how we have handled your information, please follow the SLaM complaints procedure.
  4. Contact the ICO: If we have not been able to help, you have the right to complain to the independent regulator:

Information Commissioner’s Office (ICO)

Secret Link