How we protect your data 

We take data confidentiality seriously. We use four guiding principles when handling and processing the data that we receive. 

On this page:

• People
• Security
• Governance
• Output 

People 

Everyone working on CAPS has completed relevant data and information protection training prior to working on the study and with data.  

We have also completed a training course called Good Clinical Practice, which has been designed by the National Institute for Health Research, to ensure that everyone maintains excellent standards when looking after your data.  

We update our training every two to three years, to make sure that we’re aware of any new regulations or guidance. Each year, we sign a confidentiality agreement as an extra safeguard. 

< Back to top

Security 

All the data and information that we collect is reviewed for use by NHS England (formerly NHS Digital, or Health and Social Care Information Centre (HSCIC)).  

NHS England ensures our handling of digital information is maintained at the highest standard. The University of Manchester has its own cyber security and data protection policies, which we follow. This includes guidelines on how data is handled, including confidentiality, integrity and availability and the use of encryption tools for the protection of identifiable data.  

The physical paper questionnaires that participants fill out for the study are kept locked and secure at the CAPS offices. These offices have a 24-hour security team and are fitted with an alarm system.  

Only approved people have access to these offices, and all staff follow a clear desk and clear screen policy. 

< Back to top

Governance 

The CAPS team ensure that we meet very high standards in data governance and comply with the General Data Protection Regulation (GDPR).  

We work closely with the Research Governance Office at The University of Manchester,  which carries out regular audits to ensure the study meets required standards. 

External audits can be performed at any time by bodies such as NHS Digital, the Medicines and Healthcare products Regulatory Agency (MHRA) or the National Institute for Health Research (NIHR). 

< Back to top

Output

The results from individuals are combined and analysed as a whole to produce research papers or national/international conference presentations.

The researchers who work with the data will never have access to participants’ personal data or information, because the data is anonymised.

< Back to top