Privacy Notice
GDPR stands for General Data Protection Legislation. UK-GDPR governs the way in which we can use, process, and store personal data (information about an identifiable, living person).
The Civil Aviation Authority [CAA] has declared that it is the data controller, and Aviation Medical Examiners (AMEs) are data processors for the data subjects. The subjects being pilots and cabin crew. AMEs have signed an agreement with CAA to this effect.
AMEs are also regulated by the General Medical Council and therefore have to be compliant with published “Good medical Practice”. Doctors must maintain accurate contemporaneous client / patient notes.
Pilot/cabin crew records are kept securely until retirement of the AME [unless limited by ICO data retention periods]. Notes are then forwarded to CAA.
Personal medical data collected by the AME at the time of the medical is entered on to the CAA’s Cellma system. This system is the regulator’s approved medical system for completion of regulatory medicals. Information is stored on its electronic record.
In addition I also store the following information:
Pilot / cabin crew consent form, copies of Med161 examination form, test results, ECGs and reports from other Health Care Professionals. Records are stored in a locked filing cabinet. Digital records for financial processing and billing purposes only are stored on a system called PPM – Private Practice Manager. This information is limited to Name, Address, DOB.
Under data protection law, you have rights including:
Right Of Access: right to ask for copies of personal information
Right to rectification: right to ask to rectify information you think is inaccurate.
Right of erasure: right to ask to erase personal information
Right to restriction of processing: right to ask us to restrict of information in certain circumstances.
(If however the AME has concerns that a pilot /cabin crew is providing misleading information or falsely not disclosing information [NON DISCLOSURE] in effort to falsely acquire/retain/renew/revalidate a pilot /cabin crew medical certificate, this right will not apply, and the AME will flag that concern to the CAA as regulator).
Right to data portability: right to ask for transfer of information you have provided us, to be transferred to another organisation (such as airline employer or its regulatory authority for pilot /cabin crew licensing)
How to complain:
You can complain to the Information Commission Office
Phone: 0303 123 1113
Rest assured I will never retain or share your data for marketing purposes. I will notify you (and the CAA/ICO) if your data is compromised.