Health Informatics Centre Privacy Notice

How we use your information

Health Informatics Centre (HIC) provides a range of services to safely and efficiently enable researchers to deliver world leading research. HIC are committed to protecting your personal information and ensuring that your data is collected, processed, and stored securely and confidentially. All services provided by HIC are delivered within a ISO 27001 certified secure environment to ensure data is managed safely and in compliance with Data Protection legislation.

Personal data and Sensitive data

The personal and sensitive data processed by HIC may vary depending on the service required, but they generally fall into two categories: identifiable and de-identified data. Identifiable data includes information that can be used to identify a person, such as their name, address, date of birth, medical record number, or other identifying information. De-identified data, on the other hand, is data that has been processed in a way that makes it impossible to identify a specific individual, such as by removing personal identifiers or aggregating data.

It's important to note that the processing of sensitive personal data, such as health information, is subject to strict legal requirements and regulations, such as GDPR. HIC take appropriate measures to ensure that personal data, particularly sensitive personal data, is handled securely and in compliance with applicable laws and regulations.

Data Controller

HIC works on behalf of Data Controllers (e.g. the NHS) and follow Standard Operating Procedures and have data-sharing agreements agreed upon with Data Controllers in all data processing activities.

Lawful processing

HIC will process your personal and sensitive data based on approvals set out by the Data Controller.

Your rights

HIC respects your rights and preferences in relation to your data. If you wish to update, access, erase, limit or complain about the use of your information, please let us know by emailing hicsupport@dundee.ac.uk.