Adult Social Care Client Level Data: GDPR information
Summary
Why and how we process your data in the Adult Social Care system and your rights.
| Controller | NHS England (in relation to processing the personal data) and the Secretary of State for Health and Social Care (DHSC) (in relation to determining the purpose for processing the data for England, through the issuing of a direction to NHS England). |
| How we use the information (processing activities) | NHS England collects personal and medical details about clients receiving Adult Social Care Services from Local Authorities in England. The information supports the Government's drive towards the integration of health and social care, specifically for monitoring service users at a population level, monitoring service and integrated care outcomes including prevention strategies and interventions across care pathways involving Adult Social Care, designing and implementing new payment models and understanding current and future population needs and resource utilisation. Analysis and use of the data for discovery and development purposes to enable understanding of the data items and definitions recorded within systems used by Local Authorities with Adult Social Services Responsibilities and to support development of future data collections. Data Provision Notices (DPN) have been issued under section 259(1) of the Health and Social care Act. These notices provide further detail of the data to be collected including the purpose, benefits, how and when we intend to collect the information, from which organisations that are legally required under section 259(5) of the Health and Social Act to provide the data specified in the notice. Dissemination on this information is via NHS England's Data Access Request Service (DARS). |
| Does this contain sensitive (special category) data such as health information? | Yes |
| Who are recipients of this data? |
Local Authorities and their respective Integrated Care Boards (ICBs) have access to pseudonymised and anonymised personal data for their own patients and clients. All requests by others to have access to data held by NHS England are assessed on a case-by-case basis by the Data Access Request Service (DARS). Recipients are recorded in the Register of Approved Data Releases for these disseminations. |
| Is data transferred outside the UK? | Not for the purposes of processing it by NHS England. It may be transferred outside of the UK if this is approved by NHS England through the DARS process for any particular dissemination. |
| How long the data is kept | 20 years Maximum from when the information is received, subject to appraisal if there is a justifiable reason to extend. |
| Our lawful basis for holding this data | Legal obligation |
| Your rights |
|
| How can you withdraw your consent? |
Consent not the basis for processing. |
| Is the data subject to decisions made solely by computers? (automated decision making) | No |
| Where does this data come from? | Local Authorities with Adult Social Care Responsibilities in England |
| The legal basis for collecting this data | Article 6(1)(c) Legal Obligation Article 9(2)(g) Substantial public interest, supplemented by DPA 2018 Schedule 1, Part 2, Statutory and government purposes Article 9(2)(h) Management of health or social care systems and services, supplemented by DPA 2018 Schedule 1, Part 1, Health or social care purpose |
