If you have any concerns about data confidentiality or the transfer of your records, please refer to the frequently asked questions below.
What is being transferred? I didn't know I had a medical record.
If you have been referred to our previous occupational health service, undergone pre-employment or commencement screening, or had a health surveillance check during your employment, you will have an occupational health record. This will currently be held by Oxford Brookes. With the appointment of a new occupational health provider, UKIM, Oxford Brookes is required to arrange for the transfer of your records to them. Oxford Brookes is legally obliged to notify staff when the transfer is taking place. You have the right to withhold consent for the transfer, in which case, your medical records will remain with Oxford Brookes.
Is it normal practice for files to be transferred between Occupational Health Providers?
Yes. If an organisation contracts with a new occupational health provider, the occupational health records will normally be transferred. There is no requirement for individual consent in such circumstances, but individuals must be advised of the transfer and be given the opportunity to ask for their clinical records to be archived rather than transferred.
What information is currently being held on employees?
Records may include health questionnaires, specialist reports, occupational health clinician reports and advice letters, medical notes, blood test results and immunisation reports.
How are these records stored?
All medical records are held securely and confidentially, under the regulations relating to the Data Protection Act 2018, Access to Health Records Act 1990 and both the General Medical Council and Nursery and Midwifery Council codes of practice. All UKIM staff are required to sign confidentiality agreements as part of their employment or engagement contracts. All paper records are stored in an access-controlled area, while electronic records are stored on a dedicated secure server with high levels of encryption measures and protected by anti-virus software. Regular backups are conducted, and access is restricted to authorised staff only.
How long are the records kept for?
Oxford Brookes is required to delete all medical records and individual referral information from its database once the files are transferred to UKIM. While most records are destroyed a few years after staff leave their role at Oxford Brookes, certain records, such as those related to Control of Substances Hazardous to Health Regulations 2002, must be retained for up to 40 years as per legal requirements. Records exceeding their retention period will be securely destroyed. Information is strictly confidential and not shared with third parties, and shredded paper is disposed of.
Can I have access to my records? Who else can see my information?
Unless a formal request is received to access or disclose information to a third party, the file will remain locked. No data, statistics or information contained in the records will be accessed, logged, stored or used in any manner. Medical records will only be released, except where mandated by a Court Order, upon receipt of a formal request or consent by the employee.
Occupational Health and Safety
Director of Occupational Health and Safety