This notice sets out how we will use your personal data, and your rights. It is made under Article 14 of the General Data Protection Regulation (GDPR).
Replaced the link to the data deletion schedule document with the latest version
7 January 2025
Updated the link to the Data Deletion Schedule
28 October 2024
Replaced the section 'Automated profiling' with 'Automated decision making'
12 March 2024
Updated the guidance with the latest version.
7 March 2024
Contact details updated
2 September 2022
Deleted references to personal/social care budget throughout document
'Recipients' [of data] subheading
Under mandatory recipients
- 'Integrated Care Boards' bullet point added
- 'Clinical Commissioning Groups' bullet point deleted
- 'Combined authorities' bullet point added
Under organisations that provide data on a voluntary basis
'Home Office' bullet point deleted
18 January 2021
Updated to emphasize our IT supplier only uses UK data centres.
17 July 2019
Added "NHS exemptions" bullet point
9 November 2018
Updated last paragraph before 'Complaints' section.
6 November 2018
Updated GDPR notice to cover new ways of working.
24 August 2018
1) Change details around the right to object to processing
2) Add section about profiling
3) Add details around ReCheck, App Check and Fraud hub
4) Add Business Rates data use
5) Add HMRC data share
6 June 2018
Page has been updated following the new General Data Protection Regulation (GDPR).