We have detected that you are using Internet Explorer to visit this website. Internet Explorer is now being phased out by Microsoft. As a result, NHS Digital no longer supports any version of Internet Explorer for our web-based products, as it involves considerable extra effort and expense, which cannot be justified from public funds. Some features on this site will not work. You should use a modern browser such as Edge, Chrome, Firefox, or Safari. If you have difficulty installing or accessing a different browser, contact your IT support team.
NHS Digital operates an IT system known as the Child Protection Information Sharing system (CP-IS). This system helps health and social care staff in England to share information about child protection plans securely, to better protect society's most vulnerable children. When a child is known to social services and is a looked after child, on a child protection plan or unborn child protection plan, basic information about that plan (referred to in this notice as CP Information) is shared securely with the NHS through CP-IS.
During the coronavirus pandemic, CP information will be extracted from CP-IS and shared with school nurses and health visitors, who work for local 0-19 public health service providers. This is because school nurses and health visitors cannot currently access CP-IS.
This information is being shared for child protection and health safeguarding purposes and will provide school nurses and health visitors across England with an additional reliable source of information about children on a protection plan and children with a looked after status. This will support them to provide healthcare services to those children at a time when local arrangements for data-sharing may be more difficult to administer due to the impact of coronavirus.
NHS Digital is the controller of the CP Information extracted from CP-IS under the General Data Protection Regulation 2016 (GDPR) jointly with NHS England. This is because NHS England has directed NHS Digital to collect this information under the COVID-19 NHS England Public Health Directions 2020 (COVID-19 Directions).
Types of personal data we process
The CP information that NHS Digital is extracting from CP-IS is NHS Number and date of birth so we can identify the child or mother (if the mother is pregnant with an unborn child protection plan). We also collect what type of plan exists (or if a looked after child) and the start and end date of that plan so the school nurse or health visitor knows whether or not it is still in place. We will not be obtaining or sharing child protection plans as they are not held on CP-IS. They are held by local authorities and shared locally under existing safeguarding arrangements where this is appropriate.
How we obtained your personal data
NHS Digital already holds the CP information on behalf of local authorities in CP-IS in order to share it with other health professionals on behalf of local authorities. The CP Information has therefore been provided to us by local authorities. At the request of NHS England and in consultation with local authorities, we have however extracted this information from the CP-IS system in order to share it with school nurses and health visitors.
How long we keep your personal data for
We will retain the CP information for as long as is necessary for the purposes outlined above in accordance with the Records Management Code of Practice for Health and Social Care 2016 and NHS Digital’s Records Management Policy.
0-19 public health service providers with whom we share your personal data have obligations to keep it for no longer than is necessary for the purposes for which we have shared your personal data. Information about this will be provided in their transparency or privacy notices which are published on their or your local authority's websites.
At the moment we are only sharing this information with 0-19 public health service providers for the duration of the coronavirus outbreak. We will therefore review this arrangement before the end of September 2020 and decide with NHS England, local authorities and 0-19 public health service providers if this arrangement should continue beyond then.
Where we store the data
All CP information we extract from CP-IS will be held within the UK.
Your rights over your personal data
To read more about the health and care information NHS Digital collects, our legal basis for collecting this information and what choices and rights you have, see how we look after your health and care information, our general transparency notice and our Coronavirus (COVID-19) response transparency notice.
We may make changes to this transparency notice. If we do, the ‘last updated’ date at the end of the notice will also change. Any changes to this notice will apply immediately from the date of any change.