Skip to main content

Pilot Adult Social Care data: GDPR information


Why and how we process your data in the Pilot Adult Social Care system and your rights.

Controller NHS Digital (in relation to processing the personal data) and the Secretary of state for Health and Social Care (DHSC) (in relation to determining the purpose for processing the data for England, through the issuing of a direction to NHS Digital).
How we use the information (processing activities)

NHS Digital collects personal and medical details about clients receiving Adult Social Care Services from participating Local Authorities in England. The information supports the Government's drive towards the integration of health and social care, specifically for monitoring service users at a population level, Monitoring service and integrated care outcomes including prevention strategies and interventions across care pathways involving Adult Social care, designing and implementing new payment models and understanding current and future population needs and resources utilisation. Analysis and use of the data for discovery and development purposes to enable understanding of the data items and definitions recorded within systems used by Local Authorities with Adult Social Services Responsibilities (CASSRs) and to support development of future data collections. Data Provision Notices (DPN) have been issued under section 259(1) of the Health and Social care Act. These notices provide further detail of the data to be collected including the purpose, benefits, how and when we intend to collect the information, from which organisations that are legally required under section 259(5) of the Health and Social Act to provide the data specified in the notice. Dissemination on this information is via NHS Digital's Data Access Request Service (DARS).

Does this contain sensitive (special category) data such as health information? Yes
Who are recipients of this data?

Participating Local Authorities and their respective Clinical Commissioning Groups (CCG) have access to pseudonymised and anonymised personal data for their own patients and clients.

Available via the Data Access Request Service (DARS). Recipients are recorded in the Register of Approved Data Releases for these disseminations.

Is data transferred outside the UK? Not for the purposes of processing it by NHS Digital. It may be transferred outside of the UK if this is approved by NHS Digital through the DARS process for any particular dissemination.
How long the data is kept 20 years Maximum from when the information is received, subject to appraisal if there is a justifiable reason to extend.
Our lawful basis for holding this data Legal obligation
Your rights
  • Tick Be informed
  • Tick Get access to it
  • Tick Rectify or change it
  • Cross Erase or remove it
  • Tick Restrict or stop processing it
  • Cross Move, copy or transfer it
  • Cross Object to it being processed or used
  • Cross Know if a decision was made by a computer rather than a person
How can you withdraw your consent?

Consent not the basis for processing

Is the data subject to decisions made solely by computers? (automated decision making) No
Where does this data come from? Participating Local Authorities with Adult Social Care Responsibilities (CASSRs) in England
The legal basis for collecting this data

Article 6(1)(c) Legal Obligation (Collection of client level adult social care data (No.2) Direction)

Article 9(2)(g) Substantial public interest, supplemented by DPA 2018 Schedule 1, Part 2, Statutory and government purposes

Article 9(2)(h) Management of health or social care systems and services, supplemented by DPA 2018 Schedule 1, Part 1, Health or social care purpose