We will use the services of additional data processors, which will provide additional expertise to support the work of the Trust.
Where processing is to be carried out on behalf of The Trust, we will only use processors that provide us with sufficiant guarantees that they understand their responibilities under the DPA act 2018 and will implement the appropriate technical and organisational measures that meet the requirements.
We will determine the purposes for which and the manner in which personal data is processed. This means that the Trust exercises overall control over the ‘why’ and the ‘how’ of a data processing activity.
The processing is necessary for health and social care purposes:-
a) Preventative and occupational medicine
b) The assessment of the working capacity of an employee
c) medical diagnosis
d) the provision of healthcare and treatment
e) the provision of social care, or
f) the management of healthcare systems or services or social care systems or services