YOUR INFORMATION AND GDPR Empower Movement collects information relating to a client's health and personal details. This information is classed as sensitive data and termed as special category data. Under the new General Data Protection Regulation (GDPR), client's (and their guardians) have a right to know why their information is collected, for what purpose it is used and how it is kept safe. Clients also have greater rights to access the information that Empower Movement holds. WHY IS INFORMATION COLLECTED? For a detailed and accurate physiotherapy assessment and treatment to take place, information about a client’s current and past health needs to be obtained. Under the GDPR Empower Movement has a legitimate interest in the clients information and that is part of the contract between a health professional and their client (and guardian). This information allows us to give the best treatment intervention possible. HOW IS THIS INFORMATION USED? Information such as addresses, allow us to generate invoices and post receipts and also to provide the treatment at your place of residence if so required. Your telephone number allow us to send text reminders of appointments and communicate with you outside of appointment times. E-mail addresses are used for confirmation of your appointment, sending you receipts and videos/pictures of exercises as requested/needed. Your date of birth is used as a unique identification for your records. Medical details allow for a detailed assessment to take place which will help us accurately assess and recommend appropriate treatment . In some instances, with your consent, there will be communication with the referring GP, Consultant, Community therapist or other Health Practitioners. WHO HAS ACCESS TO YOUR INFORMATION? All staff of Empower Movement are bound by patient confidentiality laws, the standards of conduct, performance and ethics of CORU (Regulating Health & Social Care Professionals) and the Irish Chartered Society of Physiotherapy (ICSP) code of conduct. Your information will not be shared outside Empower Movement unless you have given consent, except when: •requested by law •in your best interests and you are unable to give consent All persons in the clinic (not already covered by a professional confidentiality code) sign a confidentiality agreement that explicitly makes clear their duties in relation to handling personal health information and the consequences of breaching that duty. Practice staff may have access to your records for:Typing referral letters to GPs, Hospital consultants and other health practitioners, Opening letters from hospitals and consultants. These letters may be scanned into your electronic record. Scanning clinical letters, reports and any other documents not available in electronic format. Photocopying or printing documents for referral to consultants. Handling, printing, photocopying and posting medico-legal, health insurance reports and associated documents. DISCLOSURE OF INFORMATION TO OTHERS? Access to client records is regulated to ensure that they are used only to the extent that enables the clinic staff to perform their tasks for the proper functioning of the Clinic. In this regard, we may need to pass some of your information to other health and social care professionals in order to provide you with the treatment and services you need. Only the relevant part of your record will be released. These other professionals are also legally bound to treat your information with the same duty of care and confidentiality that we do. HOW IS YOUR INFORMATION STORED? Empower Movement will retain your information securely. Your name, address, date of birth, telephone number and e-mail are transferred onto the electronic record with Cliniko which is kept on a computer that is password protected with robust security measures to prevent loss of information. All notes for clients under 18 years will be kept until their 25th birthday or 26th birthday if they were 17 at the time of their last appointment, at which point they will be permanently deleted. This is in accordance with legal requirements. HOW CAN YOU ACCESS YOUR RECORDS? You have the right to request to see the information that Empower Movement holds about you. All requests will be answered in the time frame of no more than 40 days unless you are notified of a difference to this time scale. There will be no fee for information provided. REQUESTS CAN BE MADE IN WRITING TO: Empower Movement S22 The Pottery, Bakers Point, Pottery Road , Dun LAoghaire, Co.Dublin clodagh@empowermovement.ie YOUR RIGHT TO AMEND, RESTRICT AND OBJECT TO THE INFORMATION HELD. Under the GDPR all individuals have the right to have incorrect information that is held about them amended. If this was to arise within the notes held by Empower Movement the notes would become restricted, i.e. not used until the issue was resolved. However, if Empower Movement deems the information to be accurate then no amendment will be made. YOU HAVE THE RIGHT TO HAVE THE INFORMATION WE HOLD RESTRICTED: •if you contest the accuracy •you need the information to establish, defend or exercise a legal claim •you object to the information held In this instance all treatment will be stopped until the issue is resolved. You also have the right to object to Empower Movement holding your personal information on grounds relating to your particular situation and as with restriction, all treatments will stop and the notes will become restricted until the issue is resolved.