GDPR at the Nottingham Clinical Trials Unit
The Nottingham Clinical Trials Unit (NCTU) is part of the University of Nottingham, and uses personally identifiable information to conduct research to improve health, care and services. As a publically funded organisation, the NCTU must ensure that use of personally identifiable information from research participants is in the public interest.
Health research should serve the public interest, which means that research has to demonstrate that it serves the interests of society. Research in the public interest must follow the UK Policy Framework for Health and Social Care Research. Research must also have a legal basis for the use of any personally identifiable information.
Health and care research may explore prevention, diagnosis or treatment of disease or the promotion of wellbeing. All research undertaken by the NCTU is approved as being in the public interest by the Health Research Authority (HRA) and a Research Ethics Committee. Each NCTU trial is sponsored by either a NHS organisation or University, which maintain oversight of the trial. These research sponsors decide what information will be collected for the trial and how it will be used. Under the General Data Protection Regulation (GDPR) the Data Controller for each trial is the sponsoring organisation. The NCTU acts as the data processor for the trial.
Information about the way your data is collected, stored, shared and archived in a trial is described in a privacy statement developed by each trial sponsor. If you are currently taking part in a trial, you will receive this information via an updated participant information sheet next time you visit or are in contact with the research team. In all other cases, the links below will guide you to the sponsor organisations privacy notice for the information you require.
For further information on how your data is processed in research, please visit the HRA website https://www.hra.nhs.uk/information-about-patients/
If you wish to raise a complaint on how your personal data has been handled, you can contact the University of Nottingham Data Protection Officer who will investigate the matter. The Data Protection Officer can be contacted via DPO@nottingham.ac.uk