Does your Research involve data owned by STH (i.e. patients, staff)?

1. SHEFFIELD TEACHING HOSPITALS NHS FOUNDATION TRUST RESEARCH DEPARTMENT DATA PROTECTION FLOWCHART FOR RESEARCH COMPLIANCE NO Does your Research involve data owned by STH (i.e. patients, staff)? Contact relevant Data Protection Office (eg UoS/SHU/Consortium) YES *Students must be supervised by a STH substantive or honorary contract holder Do you have a substantive or honorary contract* with STH? Apply for an honorary contract to STH Research Department NO YES NO NO Is data being collected from the data subject? Is data being collected retrospectively? Contact STH Research Department YES YES Decide why and how you will use your data Ensure data is not being used for purposes other than that specified Check accuracy of data NO Implement security precautions Have you arranged full security precautions? YES Will you send data outside of STH or exchange data over the internet/ e-mail ? Will the data be anonymised? NO Contact Data Protection Officer YES NO YES YES Will the data be held on paper? NO YES Will the data be held on an STH networked PC? NO Complete an STH Data Protection Notification Form and submit to the Data Protection Officer YES Will the data be held on a stand alone PC? Ensure back-ups are taken and maintain data security NO Will data be held on a PC networked to another institution? NO YES STH can not ensure appropriate security, contact relevant Data Protection Office.