STH NHS Foundation Trust

Does your Researchinvolve data owned by STH

(i.e. patients, staff)?

NO

YES

Contact relevant Data Protection Office

(eg UoS/SHU/Consortium)

Do you have a substantive or honorary contract* with

STH?

NO Apply for an honorarycontract to STH

Research Department

Is data being collected from the data subject?

Is data being collectedretrospectively?

Contact STH Research Department

Decide why and howyou will use your data

Ensure data is not being used for purposes other

than that specified

Check accuracy of data

Have you arranged full security precautions?

NO Implement security precautions

YES

NO NO

Will you send data outside of STH or exchange data over the internet/ e-mail ?

Will the data be

anonymised?

Contact Data Protection Officer

Will the data be held on paper?

NO

YES NO

YES

YES

YES

Will the data be held on an STH networked PC?

NO

Complete an STH Data ProtectionNotification Form and submit to the

Data Protection Officer

YES

YES

Will the data be held on a stand alone PC?

NO

Ensure back-ups are taken andmaintain data security

Will data be held on a PC networked to another

institution?

YES

NO

NO

YESSTH can not ensure appropriate security, contact relevant Data Protection Office.

*Students must be supervised

by a STH substantive or honorary contract holder

YES

SHEFFIELD TEACHING HOSPITALS NHS FOUNDATION TRUST

RESEARCH DEPARTMENT

DATA PROTECTION FLOWCHART FOR RESEARCH COMPLIANCE