Back

Health and social care privacy notices

How our health and social care services use information about you and how we protect your privacy.

Privacy in client level data

The Department of Health and Social Care collects client level data from local authorities.

We provide client-level data to NHS Digital. It collects and analyses data.

This helps with the integration in health and social care for:

  • monitoring service users at a population level
  • monitoring service and integrated care outcomes in adult social care
  • developing, through data analysis, better prevention strategies for adult social care
  • designing and implementing new payment models
  • understanding current and future population needs so we can develop the right workforce

We have a legal requirement to provide client level data. This is under Section 259 (5) of the Health and Social Care Act 2012. Under UK GDPR, the lawful basis for processing personal data is Article 6(1)(e) (public task) and Article 9(2)(h) (provision of health or social care).

Collecting your information

We collect information about you in various ways, including by:

  • telephone
  • email
  • letters
  • face-to-face meetings
  • visits to your home
  • getting information from other professionals

Processing your information

We're the data controller. That means we are responsible for collecting and processing most of the personal data about your health and social care.

The client level data we provide to NHS Digital is at person level. Once we give them the information they become the data controller. They can only disseminate data to a limited set of organisations, and in anonymised format. That means your information is not shared in a way that will identify you.

NHS Digital will hold your info for a maximum of 20 years from when it is received. It may be extended for a justifiable reason after appraisal.

You have some rights about how your data is handled. These are explained in our corporate data privacy notice.

Contact us

If you're concerned about how we're handling your personal information, contact our Data Protection Officer by:

  • emailing dpo@southwark.gov.uk
  • writing to Data Protection Officer, 2nd floor Hub 1, Southwark Council PO Box 64529, London, SE1P 5LX
  • calling 0207 525 5000

If you're still unhappy, contact the Information Commissioners Office on 0303 123 1113.