​MEDICAL ASSESSMENTS

1. Who We Are

2. Practice/Doctor Name: Dr Mark William Crouse, Cornwall

Medicals

3. Contact Address: Cornwall Medicals, 1-2 Lemon Villas, Truro,

Cornwall TR1 2NU

4. Data Controller: Dr Mark William Crouse is registered as a Data

Controller with the UK Information Commissioner’s Office

(ICO).

5. Clinical Regulation: Registered with the General Medical

Council (GMC) and approved by the Maritime and Coastguard

Agency (MCA) and the Driver and Vehicle Licensing Agency

(DVLA).

2. What Information We Collect

To assess your fitness for specific duties, we collect standard

personal details and special category health data:

• Basic Details: Full name, date of birth, contact details,

identity verification (e.g., passport for ENG1 or driving licence

for DVLA), and employer/operator name.• Health Data: Medical history, lifestyle factors, physical exam

findings (e.g., vision, hearing, blood pressure, BMI), and

clinical results required by specific medical standards.

• Third-Party Data: Medical reports from your GP or specialists

(when provided by you), and referral instructions from your

employer or agency.

3. Lawful Basis and Condition for Processing

Under the UK GDPR and Data Protection Act 2018, we process

your personal and medical data under:

• Occupational Medicine : Processing necessary to assess the

working capacity of an employee and determine fitness for

work.

• Legal Obligation : Compliance with statutory frameworks,

including:

◦ ENG1: The Merchant Shipping (Maritime Labour

Convention) (Medical Certification) Regulations.

◦ DVLA: The Road Traffic Act 1988 and DVLA medical

fitness to drive standards.

◦

• How We Use Your Information

Your data is used strictly to:

• Determine fitness to work under statutory and industry bodies

(MCA, DVLA, OEUK etc).

• Complete official medical certificates (e.g., ENG1 certificates,

DVLA D4 forms).

• Maintain secure clinical records of your examination.5. Who We Share Your Information With

We maintain strict medical confidentiality and only share findings

as mandated by law or with your explicit consent:

• The MCA: For ENG1 medicals, passing/failing results and

details of any restriction or failure certificates are securely

submitted to the MCA via ADIS (Approved doctor information

system)

• The DVLA: Completed D4 medical forms are provided directly

to you to submit to the DVLA, or sent to the DVLA directly if

legally requested.

• Offshore Operators/Employers: For offshore medicals, we

share your fitness certificate (Fit/Unfit/Fit with restrictions).

Detailed clinical notes are never shared without your explicit

written consent.

• Auditing Bodies: Anonymised or pseudonymised records

may be reviewed during official clinical audits by the MCA or

relevant offshore certification bodies.

6. Data Retention

We retain your occupational records securely in line with regulatory

timelines and clinical guidelines:

• ENG1 Medical Records: Retained on ADIS (approved Doctor

Information System in accordance with MCA requirements.

• DVLA and Ad-Hoc Medical Records: Retained for 6 years

from the date of the last entry.

• Offshore Medical Records: Retained for 10 years (or longer

if specific hazardous exposure guidelines apply).7. Your Data Rights

Under UK law, you have the right to:

• Access the personal and medical data we hold about you

(Subject Access Request).

• Request correction of inaccurate or incomplete records.

• Lodge a complaint with the Information Commissioner's

Office (ICO) if you believe your data is mishhandled.

(Note: While you have the right to object to processing, we cannot

complete an ENG1, DVLA, or offshore certificate without

processing the required clinical data).