BPM

Data Privacy - Clinical Psychology

This policy is specific to the handling of patient personal data in order to provide clinical psychology care whilst also ensuring the practice meets its data protection obligations

The data controller in the practice is Dr Mathew McCauley, of Suite 13, Blackrock Clinic, Rock road, Co Dublin 

The purpose of processing data is to enable good clinical care, as well as for insurance purposes. The information collected and processed ranges from demographic information, through to physical, psychological and social data.

The domain for this information is the domain of clinical psychology in its broadest definition

Categories of personal data

• Administrative: Name address contact details- necessary to support the administration of patient care.  
• Healthcare record: Individual health identifier, an electronic patient recording information taken during assessment and treatment.  Given the nature of clinical psychology care, this will contain very personal information.  Information from other health services, collateral history, 3^rdparty information provided, details of test results.   This is necessary to provide patient care
• Account details: record of billable services, patient name, address, contact details, billing and payment records.   This is required for providing a service and billing.  The practice does not retain details of card numbers.

Sharing data

• Health Providers: Dr Mathew McCauley is subject to the privacy and confidentiality ethics and rules overseen by the Psychological Society of Ireland. When a patient is referred by a GP or another healthcare professional, it is good practice to feedback to the GP or other healthcare professional, the content of this feedback is discussed with the patient.
• Data Processors, with a contract: Practice Software Vendors, Online Data backup companies. Dr McCauley currently uses a software package called DGL, provided by Clanwilliam Health.
• Current Legal arrangements:  Revenue, Psychological Society of Ireland, Psychologists’ Protection Society
• Third Parties, with explicit consent:  Solicitors, Insurance companies, Health insurance Companies, Banks

The practice takes care to ensure that only the person meant to get the data receive that data.  In circumstances where there is doubt about consent or who is receiving the information, data will be withheld.

Time limit

All records will be destroyed 8 years after Dr McCauley ceases practice

Staff

All staff are required to sign a confidentiality agreement