General Data Protection Regulation (GDPR) and the LENS Trial
The General Data Protection Regulation is a European Union regulation which came into force on 25th May 2018 and concerns individual privacy and data protection. To comply with this regulation we are required to provide the following information to all LENS trial participants. For individuals who agree to take part, the following will apply:
- The University of Oxford is the sponsor for this study based in the United Kingdom. We will be using information from you and your medical records in order to undertake this study and will act as the data controller for this trial. This means that we are responsible for looking after your information and using it properly. The University of Oxford will keep identifiable information about you for a maximum of 10 years after the trial has finished.
- Your rights to access, change or move your information are limited, as we need to manage your information in specific ways in order for the research to be reliable and accurate. If you withdraw from the study, we will keep the information about you that we have already obtained. To safeguard your rights, we will use the minimum personally-identifiable information possible. You can find out more about how we use your information by contacting the Chief Investigator, David Preiss, at firstname.lastname@example.org.
- The University of Oxford and your NHS health board will use your name, CHI number and contact details to contact you about the research trial, and make sure that relevant information about the trial is recorded for your care, and to oversee the quality of the trial. Individuals from the University of Oxford and regulatory organisations may look at your medical and research records to check the accuracy of the research study. Your NHS health board will pass these details to the University of Oxford along with the information collected from you and/or your medical records. The only people in the University of Oxford who will have access to information that identifies you will be people who need to contact you by ‘phone, arrange sending you letters and postal questionnaires, arrange posting of study medication, or audit the data collection process. The people who analyse the information will not be able to identify you and will not be able to find out your name, CHI number or contact details.
- Your health board will keep identifiable information about you from the trial for a maximum of 10 years after the trial has finished.
- When you agree to take part in a research study, the information about your health and care may be provided to researchers running other research studies in this organisation and in other organisations. These organisations may be universities, NHS organisations or companies involved in health and care research in this country or abroad. Your information will only be used by organisations and researchers to conduct research in accordance with the UK Policy Framework for Health and Social Care Research.
- Your information could be used for research in any aspect of health or care, and could be combined with information about you from other sources held by researchers, the NHS or government.
- Where this information could identify you, the information will be held securely with strict arrangements about who can access the information. The information will only be used for the purpose of health and care research, or to contact you about future opportunities to participate in research. It will not be used to make decisions about future services available to you, such as insurance.
- Where there is a risk that you can be identified, your data will only be used in research that has been independently reviewed by an ethics committee.