1. Introduction
1.1 JJ Medics holds and processes information about learners, corporate clients, and other data subjects for administrative, approval and commercial purposes. When handling such information, JJ Medics and all staff or others who process or use any personal information, must comply with the Data Protection Principles which are set out in the Data Protection Act 1998 (the Act). In summary these state that personal data shall:
1.2 Definitions
“Staff”, “learners” and “other data subjects” may include past, present and potential members of those groups including other terms including ‘Learner’, ‘Student’, ‘Delegate’, ‘Trainer’. ‘Assessor’, AoFAQualifications, etc.
“Other data subjects” and “third parties” may include contractors, suppliers, contacts, referees, approving, awarding and monitoring organisations and bodies etc.
“Processing” refers to any action involving personal information, including obtaining, viewing, copying, amending, adding, deleting, extracting, storing, disclosing or destroying information.
2. Notification of Data Held
2.1 JJ Medics shall notify all staff and learners and other relevant data subjects of the types of data held and processed by JJ Medics concerning them, and the reasons for which it is processed. The information which is currently held by the JJ Medics and the purposes for which it is processed will be amended when processing for a new or different purpose.
3. Responsibilities
3.1 All people in which information is held:-
3.2 Staff shall ensure that:-
3.3 When staff supervise learners doing work which involves the processing of personal information, they must ensure that those students are aware of the Data Protection Principles, in particular, the requirement to obtain the data subject’s consent where appropriate.
4 Learner Responsibilities
4.1 All learners shall
5 Rights to Access Information
5.1 Staff, Learners, Corporate Clients, Approving or Awarding Organisations and other data subjects in JJ Medics have the right to access any personal data that is being kept about them either on computer or in structured and accessible manual files. Any person may exercise this right by submitting a request in writing to JJ Medics.
5.2 JJ Medics will make a charge of £10 for each official Subject Access Request under the Act.
5.3 JJ Medics aims to comply with requests for access to personal information as quickly as possible, but will ensure that it is provided within 40 days unless there is good reason for delay. In such cases, the reason for the delay will be explained in writing by the Information Security Officer to the data subject making the request.
6 Subject Consent
6.1 JJ Medics may ask for information about particular health needs, such as allergies to particular forms of medication, or conditions such as asthma, arthritis. JJ Medics will only use such information to protect the health and safety of the individual, for example, in the event of a medical emergency or in carrying out physical activities.
7 The Data Controller and the Designated Data Controllers
7.1 JJ Medics is the data controller under the Act, and is ultimately responsible for implementation.
8 Assessment Marks & Learner Certificates
8.1 Learners shall be entitled to information about their marks for assessments, however this may take longer than other information to provide.
9 Retention of Data
9.1 JJ Medics and AoFAQualifications will keep different types of information for differing lengths of time, depending on legal, awarding or approving body and operational requirements.
10 Compliance
10.1 Compliance with the Act is the responsibility of all learners and members of staff. Any deliberate or reckless breach of this Policy may lead to disciplinary, and where appropriate, legal proceedings.
10.2 Any individual, who considers that the policy has not been followed in respect of personal data about him or herself, should raise the matter with
JJ Medics.