Skip to main content

Warning notification:Warning

Unfortunately, you are using an outdated browser. Please, upgrade your browser to improve your experience with HSE. The list of supported browsers:

  1. Chrome
  2. Edge
  3. FireFox
  4. Opera
  5. Safari
HSE National Policy

HSE National Data Protection Policy


Topic: Data protection
Document Owner: Head of Data Protection Office
National Group: HSE National Data Protection Office
Effective From: 01/08/2026
The HSE Data Protection Policy provides a national framework for the lawful, fair and secure processing of personal data across the HSE. It outlines data protection principles, legal obligations, individual rights and organisational responsibilities under GDPR and the Data Protection Act 2018.
HSE National Data Protection Policy
PDF, 0.77MB

This policy establishes the standards and requirements for the collection, use, sharing, storage, retention and disposal of personal data processed by the HSE. It describes the legal and regulatory framework governing data protection, defines responsibilities for staff and third parties, and explains the rights of individuals under GDPR. The policy also outlines requirements relating to lawful processing, Data Protection Impact Assessments, information governance and security, data sharing, international transfers, data breach management, training and compliance monitoring. The policy applies to all individuals who process personal data on behalf of the HSE and covers all forms of personal data,

including health records, employee information, paper records, electronic records and CCTV data.

Back to HSE National Central Repository