Important Information

OXFORD MEDICAL INTELLIGENCE collects, holds, and processes a range of personal data and non-personal data. The protection of this data is of great importance, both commercially and legally. In the event of a data breach, the Company’s Data Breach Policy should be followed. A data breach may include (but not be limited to):

• the loss or theft of a physical data record;

• the loss or theft of computer equipment (e.g. laptop), mobile devices (e.g. smartphone or tablet), portable data storage devices (e.g. USB drive), or other data storage devices;

• equipment failure;

• unauthorised access to, use of, or modification of data (or inadequate access controls allowing unauthorised access, use, or modification);

• unauthorised disclosure of data;

• human error (e.g. sending data to the wrong recipient);

• unforeseen circumstances such as fire or flood;

• hacking, phishing, and other ‘blagging” offences whereby information is obtained by deception;

If you discover or suspect a data breach, please complete this Data Breach Report Form and send the completed form to the Company’s Data Protection Officer, dataprotection@oxintel.com. If appropriate, you may need to liaise with the Chief Information Officer when completing this form.

After sending this form, unless and until instructed to by the Company’s Data Protection Officer, you should not take any further action with respect to a data breach. In particular, you must not take it upon yourself to notify affected data subjects, the Information Commissioner’s Office, or any other individuals or organisations. The Company’s Data Protection Officerwill determine the steps to be taken to address the data breach, whom to notify, and how.

Details of Data Breach

Please provide as much detail as you can about the data breach that you have discovered or suspect. The more accurate and specific the information provided in this form, the more quickly and effectively the Company will be able to deal with the data breach.