Skip to main content

Community Service Data Set (CSDS): GDPR information

Summary

Why and how we process your data in the Community Services Data Set (CSDS) and your rights.

Controller NHS Digital (in relation to processing the personal data) and the Department of Health and Social Care (in relation to determining the purpose for processing the data through the issuing of a direction to NHS Digital).
How we use the information (processing activities) The Community Services Data Set (CSDS) collects information about children, young people and adults who are in contact with providers of NHS funded community services in England. This information is to help improve care by commissioning services in a way that improves health, reduces inequalities, and supports service improvement and the quality of the care provided. The data collected in CSDS includes personal and demographic information, diagnoses including long term conditions and disabilities and care events plus screening activities.
Does this contain sensitive (special category) data such as health information? Yes
Who are recipients of this data?

Clinical Commissioning Groups (CCG),
Available via the Data Access Request Service (DARS) recipients are recorded in the Register of Approved Data Releases for these disseminations.

Is data transferred outside the UK? Not for the purposes of processing it by NHS Digital. It may be transferred outside of the UK if this is approved by NHS Digital through the DARS process for any particular dissemination.
How long the data is kept 20 years minimum from the date the data is received.
Our lawful basis for holding this data Legal obligation
Your rights
  • Tick Be informed
  • Tick Get access to it
  • Tick Rectify or change it
  • Cross Erase or remove it
  • Tick Restrict or stop processing it
  • Cross Move, copy or transfer it
  • Cross Object to it being processed or used
  • Cross Know if a decision was made by a computer rather than a person
How can you withdraw your consent?

Consent is not the basis for processing. Option available via National Data Opt out to stop your confidential patient information being used for research and planning.

Is the data subject to decisions made solely by computers? (automated decision making) No
Where does this data come from? Providers of NHS funded community services in England.
The legal basis for collecting this data

GDPR:
Article 6(1)(c) Legal Obligation (Community Services Data Set Directions 2017),
Article 9(2)(h) Management of health or social care systems and services, supplemented by DPA 2018 Schedule 1, Part 1, Health or social care purpose.