We have detected that you are using Internet Explorer to visit this website. Internet Explorer is now being phased out by Microsoft. As a result, NHS Digital no longer supports any version of Internet Explorer for our web-based products, as it involves considerable extra effort and expense, which cannot be justified from public funds. Some features on this site will not work. You should use a modern browser such as Edge, Chrome, Firefox, or Safari. If you have difficulty installing or accessing a different browser, contact your IT support team.
Pilot Adult Social Care data: GDPR information
Why and how we process your data in the Pilot Adult Social Care system and your rights.
|Controller||NHS Digital (in relation to processing the personal data) and the Secretary of state for Health and Social Care (DHSC) (in relation to determining the purpose for processing the data for England, through the issuing of a direction to NHS Digital).|
|How we use the information (processing activities)||
NHS Digital collects personal and medical details about clients receiving Adult Social Care Services from participating Local Authorities in England. The information supports the Government's drive towards the integration of health and social care, specifically for monitoring service users at a population level, Monitoring service and integrated care outcomes including prevention strategies and interventions across care pathways involving Adult Social care, designing and implementing new payment models and understanding current and future population needs and resources utilisation. Analysis and use of the data for discovery and development purposes to enable understanding of the data items and definitions recorded within systems used by Local Authorities with Adult Social Services Responsibilities (CASSRs) and to support development of future data collections. Data Provision Notices (DPN) have been issued under section 259(1) of the Health and Social care Act. These notices provide further detail of the data to be collected including the purpose, benefits, how and when we intend to collect the information, from which organisations that are legally required under section 259(5) of the Health and Social Act to provide the data specified in the notice. Dissemination on this information is via NHS Digital's Data Access Request Service (DARS).
|Does this contain sensitive (special category) data such as health information?||Yes|
|Who are recipients of this data?||
Participating Local Authorities and their respective Clinical Commissioning Groups (CCG) have access to pseudonymised and anonymised personal data for their own patients and clients.
Available via the Data Access Request Service (DARS). Recipients are recorded in the Register of Approved Data Releases for these disseminations.
|Is data transferred outside the UK?||Not for the purposes of processing it by NHS Digital. It may be transferred outside of the UK if this is approved by NHS Digital through the DARS process for any particular dissemination.|
|How long the data is kept||20 years Maximum from when the information is received, subject to appraisal if there is a justifiable reason to extend.|
|Our lawful basis for holding this data||Legal obligation|
|How can you withdraw your consent?||
Consent not the basis for processing
|Is the data subject to decisions made solely by computers? (automated decision making)||No|
|Where does this data come from?||Participating Local Authorities with Adult Social Care Responsibilities (CASSRs) in England|
|The legal basis for collecting this data||
Article 6(1)(c) Legal Obligation (Collection of client level adult social care data (No.2) Direction)
Article 9(2)(g) Substantial public interest, supplemented by DPA 2018 Schedule 1, Part 2, Statutory and government purposes
Article 9(2)(h) Management of health or social care systems and services, supplemented by DPA 2018 Schedule 1, Part 1, Health or social care purpose