What are my data rights?
Data protection regulation requires that we state the legal basis for processing information about you. In the case of research, this is ‘a task in the public interest.’ The University of Oxford is the data controller and is responsible for looking after your information and using it properly.
We will be using information from you, your medical records and NHS Digital, and will use the minimum personally-identifiable information possible. We will keep identifiable information about you for up to 12 months after the study has finished. However, we will store the de-identified research data and any research documents with personal information, such as consent forms, securely at the University of Oxford for 25 years after the end of the study as part of the research record. Data protection regulation provides you with control over your personal data and how it is used. When you agree to your information being used in research, however, some of those rights may be limited in order for the research to be reliable and accurate. Further information about your rights with respect to your personal data is available here.