Privacy notice: Roles, rights and getting in touch

Data controller information


For data collected under this privacy notice, NHS Lothian is the Data Controller (as that term is defined in the EU General Data Protection Regulation (Regulation (EU) 2016/679), registered with the Information Commissioner’s Office, Registration Number Z5757124.

If you have any questions about how we process your personal data in relation to NHS Lothian records or your queries about them, please contact the NHS Lothian Data Protection Officer (; 0131 465 5444).


The NHS Lothian Data Protection Policy is available here:


Your Rights


You have the right to request access to, copies of and rectification or (in some cases) erasure of personal data held about you by LHSA and you can request that we restrict processing or object to processing. In some circumstances, you have the right to task us to put your data into a format that can be transferred easily (‘data portability’). If you wish to make use of one of these rights, please email us.




If you are unhappy with the way we have processed your personal data, you have the right to complain to the Information Commissioner’s Office (ICO), but we ask that you raise the issue first with the NHS Lothian Data Protection Officer (; 0131 465 5444).


For information about reporting a concern to the ICO see:


Go back