||How we use your information?
How we use your information?2019-08-02T10:16:01+01:00

How we use your information?

HMR CCG Privacy Notice

Protecting Your Data


This privacy notice explains in detail the type of information (including personal data) that we, Heywood, Middleton and Rochdale (HMR) CCG, process about you.  The CCG is a Data Controller.  A Data Controller determines how the data will be processed and used within the CCG and with others who we share data with.  We are legally responsible for ensuring that all personal data that we hold and use is done so in a way that meets the data protection principles under the General Data Protection Regulation (GDPR) and Data Protection Act 2018.  This notice also explains how we handle that data and keep it safe.

Under GDPR, all public bodies must nominate a Data Protection Officer (DPO) whose responsibilities include advising on compliance with GDPR, training and awareness for staff as well as being the main contact with the Information Commissioner. The DPO is: Karen Hurley (Director of Operations and Executive Nurse).

To contact the DPO, please email: hmrccg.dpo.rochdale@nhs.net

The CCG also has a Caldicott Guardian.  A Caldicott Guardian is a senior person within a health and social care organisation, preferably a health professional, who makes sure that personal information about those who use its services is used legally, ethically, appropriately and that confidentiality is maintained.  The Caldicott Guardian for the CCG is: Dr Chris Duffy (HMR CCG Chair).

To contact Dr Duffy please email: hmrccg.caldicott@nhs.net

Data Security / Information Governance policies

Personal Information: Right to Access Requests (formerly Subject Access Requests)

To make a request for personal information you must be the person who the information is about or have written authority from that person if you are acting on their behalf.

Examples of information available could be your personal details, name or address, copies or access to your health record.

To make a request for personal information please complete this form docx 19 KB

Please return securely and marked private and confidential to:


  • Heywood, Middleton and Rochdale Clinical Commissioning Group (Right of Access Requests)
    Number One Riverside
    Third Floor
    Smith Street
    OL16 1XU

Or Email:

Please ensure you write “Right of Access Request” in the subject field of the email.