<h2>Access to system</h2>
<p>All users must accept the agreement which comes with this guidance. Employees
may use the [% settings.app_abbr %] data system only if they are issued with an
authorised password. Unauthorised sharing of passwords is prohibited. The system
administrator maintains a list of authorised users, and <b>all</b> login attempts,
successful and otherwise are recorded.</p>
<h2>How information from the system should be used</h2>
<p>The Leeds Hospitals Trust is registered under the Data Protection Act to use
the information for the health care of individuals and for administration only.
Employees must not disclose information to organisations or individuals for any
other reason.</p>
<h2>Disclosures of information</h2>
<p>The medical data of patients must only be disclosed for the purposes of health
care or administration. The consent of the patient is required for anything else.
Consent is required for research.</p>
<h2>Enquiries about patient data</h2>
<p>Check the identity of the enquirer and make sure the person is entitled to
the information. Enquiries from outside the Trust, such as from relatives or from
other organisations, need particular attention.</p>
<p>Employees are unlikely to be criticised for refusing to disclose information
when there is a genuine doubt. On the other hand a hasty, illegal disclosure
could result in disciplinary action.</p>
<p>If you are unsure about whether to disclose information then seek advice.
Ask your line manager or contact the <a href="mailto:hmds.lth@nhs.net">
system administrator</a>. A good rule of thumb is to disclose information
on a 'need to know' basis only.</p>
<h2>Access to the Internet</h2>
<p>If you have access to the Internet, you should have already signed an Internet
Access Agreement with your local hospital. Restrictions on how you may use data
applies equally to electronic data and to printed data. Sending computerised or
printed health records without consent to some countries outside Europe contravenes
Data Protection law.</p>
<h2>Security measures</h2>
<p>It is the duty of all staff handling computerised patient data to protect it.
Security measures such as keeping the office locked and not leaving screens
switched on and unattended must be employed. Unintentional disclosures would
still be a breach of the Data Protection Act. Superfluous computer printouts of
personal medical data must be destroyed and not used as scribbling pads.</p>
<h2>Further information & advice</h2>
<p>Further information or advice on Data Protection matters can be obtained by
contacting the Trust's Data Protection Officer on 0113 392 6936. IT Security
matters will be dealt with by the IT Help Desk on 0113 392 6655.</p>
<hr />
<p><a href="#top"><img src="/images/top_page.gif" alt="top" border="0" /></a></p>