The Rotunda Hospital is committed to processing all personal data in compliance with prevailing Data Protection legislation. We prioritise safeguarding personal data and employ robust measures to ensure the security, confidentiality, and integrity of all patient information, accessed strictly by those with a legitimate cause.
Information we collect and how we use it
Our healthcare team—including doctors, midwives, and nurse maintain comprehensive records regarding your health and care, documented both on paper and in electronic formats. Medical information related to your care, including pregnancy and newborn data, is securely managed within the HSE’s Maternity & Newborn Clinical Management System (MN-CMS) housed on HSE Owned secure network.
Data Categories Collected
The personal data we collect includes but is not limited to:
Contact information (e.g., name, address, date of birth, next of kin, and GP details)
Medical records, such as visit history, health assessments, test results, and treatment notes
Information from external referrals, appointments, hospital admissions, and completed forms
This data is essential for ensuring high-quality, safe, and effective care. Please keep us updated with any changes to your information to facilitate accurate and timely service.
Data Retention
Your information is retained on the MN-CMS only for legally mandated periods as outlined in the HSE’s Record Retention Policy, available on the HSE website.
Use of Personal Data in Direct and Indirect Care
Our primary use of your information is to deliver and coordinate care, ensuring that healthcare professionals have access to accurate and up-to-date information to assess and provide appropriate treatment. This includes sharing necessary information with other healthcare providers directly involved in your care, such as your GP, unless you object.
For indirect care purposes, we may use your information to:
Review and enhance the quality of services provided
Forecast service requirements
Manage complaints and legal claims
Fulfill financial billing processes
Compile performance statistics and conduct audits
Support health research through anonymized data
We only conduct research using identifiable data with your explicit consent, as approved by the Rotunda Research Ethics Committee. Aggregated data may be shared with entities like the National Treatment Purchase Fund (NTPF).
Data Sharing and Legal Obligations
In specific situations, we may share your information without consent to meet legal obligations, such as:
Registering births with the General Register Office
Preventing serious harm to you or others
Complying with court orders
Supporting the investigation of severe crimes
Meeting public health reporting requirements (e.g., for infectious diseases)
Appointment Reminders and CCTV
To assist in managing appointments, we may use your phone number to send SMS reminders. You may opt-out of this service by contacting us. Additionally, we employ CCTV on hospital premises to protect individuals and property and to ensure a safe environment. CCTV recordings are retained only as legally necessary, with disclosures strictly limited to legal requirements.
Data Security
We prioritise the security and confidentiality of your data through advanced protective measures. While we take extensive precautions to secure data, complete security cannot be guaranteed. We continuously review and enhance our security protocols as new technologies emerge.
Your Rights and Data Accuracy
You have rights regarding your personal data, including the right to access, correct, or request the deletion of your data. You may also restrict or object to its processing or sharing. While we will respect these rights, we will inform you of any potential implications for your care. Please contact the Freedom of Information Unit at 01-817-1751 or [email protected] if you believe any information we hold is inaccurate.
Our Data Protection Officer (DPO) is available to address any concerns regarding data management, risks, or incidents. For queries or complaints, please contact the DPO at [email protected] or 01-817-6811. If unsatisfied with our response, you may file a complaint with the Data Protection Commissioner (www.dataprotection.ie).
Accessing Your Records
You have the right to access your personal data. Requests can be submitted in writing to The Freedom of Information Unit, The Rotunda Hospital, 1-2 Cavendish Row, Dublin 1, D01 K883, or by email to [email protected]. Additionally, under the Freedom of Information Act 2014, you may request information held by the hospital, subject to legal exemptions.
Updates to Our Privacy Statement
This Privacy Statement is reviewed periodically and may be amended without prior notice. We encourage regular reviews of this statement to stay informed on how we protect and manage your data.