What is the British Orthopaedic Foot & Ankle Society (BOFAS) Registry?
This is a database of information about foot and ankle orthopaedic surgery collected across the UK. This will help us to find out which operations work best by observing the outcomes of surgery as measured from questionnaires and monitoring of any complications.
What data is collected?
a) Personal details are needed in order to link you to your surgery and the outcome, and in case you need any further foot / ankle surgery in the future so that your surgeon knows what previous surgery you have had. The personal information stored includes name, gender, date of birth, postal address, email address and NHS number.
b) In addition, we store information about your general health, diagnosis, surgical procedure and your answers to the questionnaires (which is classed as sensitive personal information under the Data Protection Act).
This data is entered into the registry by a member of the team involved in your care.
Do I have to participate?
No, your consent is entirely voluntary and if you prefer not to participate, your medical care will be delivered in the normal way. Your personal details in particular cannot be kept without your consent.
What would I be asked to do?
You are asked to complete questionnaires before and after surgery. This is why your email address is important as we will send links to these questionnaires when they are due.
If I do participate, what are my rights?
You are entitled to:
- Withdraw consent at any time
- Request access to your data
- Request correction
- Request erasure
- Request restriction of processing
- Request the transfer of your personal data
Further information on all these rights can be found on the Information Commissioner’s Office (ICO) website:
If you wish to exercise any of the rights set out above, you can contact us either:
- Through the BOFAS website: https://www.bofas.org.uk/patient/contact-us
- Or by emailing: email@example.com
Conditions regarding requests:
a) Time limit to respond
We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.
Who is the data controller?
The data controller organisation (see www.ico.org.uk) for your personal data in the registry will be the British Orthopaedic Foot & Ankle Society (and not the NHS).
We have appointed a data protection officer (DPO) who is responsible for overseeing questions in relation to this consent form. If you have any questions about this consent form, including any requests to exercise your legal rights, please contact the DPO using the details set out below:
Name: Joanne Millard
Email Address: firstname.lastname@example.org
Postal Address: BOFAS, PO Box 209, Bristol BS20 1DL Telephone Number: +44 7847 281130
Details of retention periods for different aspects of your personal data are available in our retention policy which you can request from us by contacting us using the contact details above. Is my data stored securely? Your personal details are treated as confidential and will be stored safely. We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. Your personal details will not be available to anyone outside BOFAS and its secure IT provider, with the following exceptions:
a) BOFAS may approve a specific research project related to your diagnosis or surgery. The majority of this research uses only anonymised information that means it is impossible to identify individuals. From time to time researchers may wish to gather further information. In these cases we would seek your approval prior to disclosing your contact details. You would be free to decline and again this would not affect your care.
b) We may in future consider linking to other healthcare information resources (including Hospital Episode Statistics and other orthopaedic registries). Linking this data allows us to collect information on other aspects of your health, e.g. if you ever have further surgery or develop health problems. We do this to improve our ability to monitor patient safety and patient outcomes, and so that people and organisations involved in improving surgery can better understand and develop improved or more cost-effective medical treatments. In order to obtain any linked data about you, we would provide your operation and personal details to the body responsible for these other datasets so that they can match with records they hold – this may be NHS Digital (e.g. for HES) or the relevant Data Controller (for other orthopaedic registries).
c) Your surgeon and his / her clinical team can also access and analyse your data to check they are individually giving good care. In addition, your registry data can be accessed in the future by other medical professionals who are involved in your medical care.
Transfer of identifiable data outside of the European Economic Area is not permitted. Anonymised data, your identifying details removed, may be released to approved organisations. How will my data be processed? We process the data which participating patients provide to improve our understanding of orthopaedic problems and of their treatment, thus helping us provide future patients with the best care. BOFAS are responsible for all acts of processing. We retrieve and analyse your data so that we can compare large numbers of patients, usually removing anything that can identify you as an individual. Such analysis may have to be performed by a specialised third party, in which case they will be bound by the same high security standards and legal contract, whether identifying details had to be included or not.
You will not be identifiable within the results of any analyses which are shared, and any transfer of data will be encrypted. All studies using data from the Registry are recorded on the BOFAS website.
Children: Monitoring the outcome of surgical procedures in children is as important as it is for adults. It is the child’s parents or guardian who is asked to consent for data to be collected.
If you want to see what data is stored on you, please write as detailed below.
Send an email to: email@example.com
If you would like to contact the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues, the details are as follows:
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Telephone: +44 1625 545 745