The Royal Hospital, Donnybrook (Register of Users)

Updated March 2019

Does your Hospital use the PPS Number at present?

Yes

For what purpose(s)?

It is used by Salaries Department in respect of staff payroll. It is also used by other departments to register a patient's death (when there are no relatives available to do so), for application for bereavement grants, dental benefits, mobility allowances, and other such entitlements.

Does your Hospital exchange the PPS Number with any external body? If so please name the relevant bodies and state the purpose(s) of the exchange

Yes, for the purposes mentioned at (ii) above. In respect of staff, Salaries Department has exchanges with the Revenue Commissioners, the Department of Social Protection and the HSE Pensions Unit. The HR Department has exchanges with the Department of Justice, Quality & Law Reform with regard to applications for work permits.

In respect of patients, the exchange is with the relevant Government departments such as Department of Health and the Department of Social Protection with regard to disability/illness benefits, grants, and any other entitlements.

What future plans has your Hospital for the use of the PPS Number?

No plans to use PPS numbers in any other way.

There is a duty to ensure compliance with the principles of processing personal data which are set out in Article 5(1) and 5(2) of the GDPR. These principles are summarised as follows

• process it lawfully, fairly, and in a transparent manner
• collect it only for one or more specified, explicit and legitimate purposes, and do not otherwise use it in a way that is incompatible with those purposes
• ensure it is adequate, relevant and limited to what is necessary for the purpose it is processed
• keep it accurate and up-to-date and erase or rectify any inaccurate data without delay
• where it is kept in a way that allows you to identify who the data is about, retain it for no longer than is necessary
• keep it secure by using appropriate technical and/or organisational security measures
• be able to demonstrate your compliance with the above principles and
• respond to requests by individuals seeking to exercise their data protection rights (for example the right of access

Have you measures in place to ensure that the Public Service Identity data you hold/collect whether in electronic or written format is in line with the GDPR Principles described above?

Yes. The Royal Hospital Donnybrook has an Information Governance Committee. The hospital makes every effort to comply with all GDPR Principles at all times.