Our privacy policy

The Occupational Health Service recognises the need to comply with the General Data Protection Regulation (GDPR) and Data Protection Act 2018 and all other relevant legislation and codes of practice in relation to its work activities. The provision of a confidential, informed and impartial service to the staff and students at the University of Bristol is essential to maintain a professional relationship. The Occupational Health Service collects, retains and processes personal data, for the which the University of Bristol is the data controller.  

It is incumbent on all occupational health staff to maintain confidentiality. Each member of staff has an obligation not to divulge any information learned in respect of his/her work activities as detailed below.

Personal information

The personal information we hold is kept to a minimum and details only what is required to allow us to carry out health assessments and maintain adequate records required by the General Medical Council, the Nursing and Midwifery Council and other authorities.

We may hold the following personal information about those employees who are referred to us:

Storage of records

All Records will be maintained in accordance with the requirements of The General Data Protection Regulation and relevant Guidance from the Nursing and Midwifery Council, the Faculty of Occupational Medicine and other regulatory bodies and quality standards.

Sharing information

Information about an individual may only be disclosed to a third party outside of occupational health if:

Individual rights

Individual employees can also:

All such enquiries about an individual, or individuals, whether from a third person or from the individual personally, must be referred to a clinical member of staff. No medical or health advice, information, recommendations or opinion is to be given by administrative staff.

Retaining and disposing of information

Occupational Health Service staff

All occupational health staff including administrators will be required to sign that they understand the implications of this policy and medical confidentiality every 2 years or when there has been a significant change. Any breaches of the above may result in disciplinary action including dismissal.

More information

If you have any concerns about how your personal data is processed, please contact the Occupational Health Service in the first instance.

For more information regarding data protection in the University, please see Data protection | University Secretary's Office | University of Bristol.

The University’s Data Protection Officer can be contacted with any concerns or queries at data-protection@bristol.ac.uk.

For more information regarding GDPR 2018, please see Guide to the General Data Protection Regulation - GOV.UK (www.gov.uk).

Edit this page