How our health and social care services use information about you and how we protect your privacy.
The Department of Health and Social Care collects client level data from local authorities.
We provide client-level data to NHS Digital. It collects and analyses data.
This helps with the integration in health and social care for:
We have a legal requirement to provide client level data. This is under Section 259 (5) of the Health and Social Care Act 2012. Under UK GDPR, the lawful basis for processing personal data is Article 6(1)(e) (public task) and Article 9(2)(h) (provision of health or social care).
We collect information about you in various ways, including by:
We're the data controller. That means we are responsible for collecting and processing most of the personal data about your health and social care.
The client level data we provide to NHS Digital is at person level. Once we give them the information they become the data controller. They can only disseminate data to a limited set of organisations, and in anonymised format. That means your information is not shared in a way that will identify you.
NHS Digital will hold your info for a maximum of 20 years from when it is received. It may be extended for a justifiable reason after appraisal.
You have some rights about how your data is handled. These are explained in our corporate data privacy notice.
If you're concerned about how we're handling your personal information, contact our Data Protection Officer by:
If you're still unhappy, contact the Information Commissioners Office on 0303 123 1113.