National Lead required to implement new HSE records and retention policy

The HSE has “fully reviewed and updated” its records and retention policy, the Medical Independent (MI) has been informed.

It is anticipated that a National Lead will be appointed “to drive the implementation of this policy”.

This policy provides guidance on the retention periods for all types of records processed by the HSE. The updated policy is fully compliant with General Data Protection Regulation (GDPR) legislation.

A HSE internal audit carried out in late 2020 recommended that the records retention policy should be reviewed for compliance with GDPR.

“A wide variety of records are held across the HSE including healthcare records, financial records, HR records and general administrative records and it is imperative that a consistent and effective records retention policy is adopted,” a HSE spokesperson told MI.

“The HSE is committed to effective records retention and disposal to ensure that it: Meets legal standards in terms of retention periods, protects the privacy of data subjects, optimises the use of space, minimises the cost of record retention, and securely destroys outdated records.”

An implementation plan for the updated policy is currently being prepared with the intention that roll-out commences this year. 

“Although there has been no appointment yet, it is anticipated that a national lead will be appointed to drive the implementation of this policy.” The HSE audit and risk committee heard in November that a National Lead would be needed to implement “what is a complex policy that will need extensive engagement by all services within the HSE”, according to the minutes.