Multi-source assessment systems (ACP360, MAEP) privacy notice

The Royal College of Psychiatrists’ (the College) provides a number of tools to support clinicians to collect and log the feedback they need for their appraisals and revalidation. 

The College is the data controller for the information you provide to us either during enrolment to use the system or whilst registered on the system.

If you have any queries about the process or how we handle your information, please contact us at dataprotection@rcpsych.ac.uk

Sources of information used by Multi-source Assessment Systems

The Multi-source Assessment Systems use information collected from a number of sources; the clinician we are collecting feedback for, their colleagues and service users.

The information collected is submitted via a secure web-based tool or anonymous paper questionnaires returned directly to the team here at the College.

Security and confidentiality is maintained through the use of passwords.

Feedback is aggregated prior to being made available to the clinician we are collecting feedback for.

What will we do with the information you provide to us?

All of the information you provide will only be used for the purpose of providing the clinician with feedback and reports during the period while they are registered to use the system. 

The College will not share any of the information provided to us with any third parties for marketing purposes.

Information is held in secure data centres in the EU and US which comply with ISO 27001 security standards.

The information you provide will be held securely by us and/or our data processors whether the information is in electronic or physical format.

All of the data is accessible only to staff members working on the system and data processors by approval.

All data is held within restricted areas, is password protected and encrypted.

Individual clinicians registered with the system will receive a report summarising their feedback.  The individuals who submitted feedback on the clinician will not be identified in the report.

We may share the personalised report with the clinician’s appraiser if requested by the clinician.

The College will use data submitted in its contributions to reports and research papers from time to time however, the identities of the clinician or individuals who provided the data will not be disclosed.

We will use contact details you provide to us at registration to contact you in connection with any ongoing relationship with the programme.  

What information do we ask for, and why?

The multi-source assessment systems do not collect more information than needed to fulfil our stated purposes and will not retain it for longer than is necessary. 

The information we ask for is used to either maintain a record of you and to contact you, or for the purpose of gathering feedback about the clinician.

Use of data processors

Data processors are third parties who process data for us. We have contracts in place with our data processors.

This means that they cannot do anything with the information unless we have instructed them to do it.

They will hold it securely and retain it for the period we instruct.

The data processor we use is Weblogik Ltd.

How long is the information retained for?

The individual data are retained for a period of five years after the end of the contract with the clinician.

After five years, data is anonymised and retained for the purposes of longitudinal analysis.

Legal basis for processing

The multi-source assessment systems processes data submitted from the clinician to fulfil our contract with them.

We process data from the clinician’s colleagues and service users by consent.

Confidentiality

All information received and managed by the multi-source assessment system teams is treated as confidential. 

The multi-source assessment system will not publish information that can enable individual service users, colleagues or clinician, nor allow third parties to access the data. 

The confidentiality and security of information is maintained in the following ways:

All reports include aggregated data at the relevant level (national, regional, CCG, NHS Trust/organisation).

Your rights

Under the Data Protection Act 1998, and incoming General Data Protection Regulation (GDPR) you have rights as an individual which you can exercise in relation to the information we hold about you.

What if I do not want my information used by the audit?

You can choose not to submit feedback on the clinician if you wish to. The multi-source assessment system will not use your information for any reason other than to request feedback.

Complaints or queries

The College takes any complaints we receive about the way in which we use personal data very seriously.

We encourage people to bring it to our attention if they think that our collection or use of information is unfair, misleading or inappropriate.

If you want to make a complaint about the way we have processed your personal information you can contact us using the details at the bottom of this notice.

You can also complain to the Information Commissioner’s Office directly:

Wycliffe House

Waterlane Wilmslow

Cheshire

SK9 5AF

Website: http://www.ico.org.uk/

Tel: 0303 123 1113

Changes to this privacy notice

We keep our privacy notice under regular review. This Privacy Notice was last updated in May 2018.

How to contact us

If you want to request information about our privacy policy you can email us at dataprotection@rcpsych.ac.uk or at the below address:

Data Protection Officer

Royal College of Psychiatrists

21 Prescot Street

London

E1 8BB

                     
Please read our disclaimer.