Managing referrals from the NHS-Galleri trial: healthcare professional interview privacy notice
This privacy notice is directed to healthcare professionals who express an interest in taking part in an interview about their experiences of managing participants in the NHS-Galleri trial with a cancer signal detected test result.
The interviews are being commissioned by GRAIL Bio UK Ltd. GRAIL Bio UK Ltd. is the UK subsidiary of a company in the United States (US) called GRAIL, Inc. GRAIL Bio UK Ltd. organised the NHS-Galleri trial. GRAIL, Inc. developed the Galleri test and provides funding and equipment to support the trial.
This notice explains how GRAIL Bio UK Ltd. will use the personal information you provide when expressing an interest in and taking part in an interview.
Who is the data controller of my information?
GRAIL Bio UK Ltd. is the data controller for the personal data (information that identifies you) collected and used in connection with these interviews. GRAIL, Inc. is a data processor to GRAIL Bio UK Ltd., but will not have direct access to your identifiable information.
GRAIL Bio UK Ltd. will process your personal data in accordance with the Data Protection Act 2018 and the UK General Data Protection Regulation (collectively referred to as the ‘Data Protection Laws’).
Although the interviews relate to experiences arising from the NHS-Galleri trial, this activity is separate from the trial and the information collected through this exercise will be processed separately.
What information does GRAIL Bio UK Ltd. receive about me?
GRAIL Bio UK Ltd. will collect the personal information that you provide when expressing an interest in and taking part in an interview. This might include your name and contact details, professional information such as your role, speciality and organisation, and the experiences and perspectives you share during the interview. If you consent to the interview being recorded, the recording and transcript will also contain personal information about you. You do not have to provide information or answer any interview question that you do not wish to answer.
If you consent, your contact details might also be retained for future contact about your experiences and perspectives or other relevant engagement opportunities.
How will GRAIL Bio UK Ltd. use my information?
GRAIL Bio UK Ltd. will use your personal information to arrange and conduct interviews and analyse the information gathered. Aggregated insights from the interviews will be used to produce a report summarising the key themes and insights. The report might include quotes from the interviews, but will not contain information that could reasonably identify you.
Aggregated insights and non-identifiable quotes might also be used in stakeholder engagement and communications materials, such as slide decks and print publications relating to the NHS-Galleri trial, GRAIL and/or the Galleri® test. These materials might be shared externally.
What is the reason for processing my information?
GRAIL Bio UK Ltd. needs a valid legal reason to process and use your personal information in connection with the interviews. This is called a‘legal basis.’ GRAIL Bio UK Ltd.’s legal basis for processing your personal information is your consent, which is collected in the expression of interest form.
How long will my information be kept?
GRAIL Bio UK Ltd. will keep your information for as long as needed to fulfil the purposes outlined in this notice and the expression of interest form referred to above or until you revoke your consent, unless a different retention period is required by law. You may revoke your consent to the processing of your personal information at any time. If you revoke your consent, GRAIL Bio UK Ltd. will not engage in further processing of your personal information. In some cases, it may not be possible for GRAIL Bio UK Ltd. to delete information if you have already contributed to existing material.
If you agree to future contact, your contact details will be retained for that purpose until they are no longer required for that purpose or you revoke your consent. You may revoke your consent at any time.
Will my information be transferred outside of the UK?
Your personal information will be transferred to the US, where GRAIL, Inc. is located, for purposes of storage in a secure cloud-hosted database. Only authorised employees of GRAIL Bio UK Ltd. and an appointed vendor who need to see your personal information for purposes of this work will have access to it.
Some countries, including the US, have been found by the UK government not to offer the same level of data protection as that found in the UK. GRAIL Bio UK Ltd. and GRAIL, Inc. have entered into a data transfer and processing agreement in a form approved by the UK government to ensure that your information remains protected after it is sent to GRAIL, Inc. Any third-party vendors who process your personal information on GRAIL’s behalf under this notice will also be required to sign an appropriate data processing agreement to ensure your personal information remains protected. Please contact privacy@grailbio.com if you wish to obtain copies of these agreements.
What are my rights?
including the right to access, correct, erase, restrict, object to or revoke consent for the use of your personal information. If you wish to exercise any of these rights, you should contact GRAIL Bio UK Ltd.’s Data Protection Officer at privacy@grailbio.com. Doing so will not affect the lawfulness of any processing of your Personal Data that was based on your consent before its withdrawal.
You also have the right to make a complaint with the Information Commissioner’s Office (ICO) (the UK data protection regulator). For further information on your rights and how to complain to the ICO, please refer to the ICO.
Whom can I contact with questions?
You should address your questions to uk_info@grailbio.com.