Client Level Data privacy notice
Sharing Client Level Data
Why are we processing your information?
The Department of Health and Social Care has begun a pilot to collect Client Level Data from local authorities which will be mandatory from April 2023.
We're participating in this pilot and providing Client-Level Data to NHS Digital, which is responsible for data collection and analysis.
The pilot supports the integration of health and social care specifically for:
- monitoring service users at a population level
- monitoring service and integrated care outcomes across a pathway or care setting involving adult social care
- developing, through evaluation of person-level data, more effective prevention strategies and interventions across a pathway or care setting involving adult social care
- designing and implementing new payment models
- understanding current and future population needs and resource utilisation
What is the legal basis for processing your information?
We have a legal requirement to provide Client Level data under Section 259 (5) of the Health and Social Care Act 2012. Under UK GDPR, the lawful basis for processing personal data is Article 6(1)(e) (public task) and Article 9(2)(h) (provision of health or social care).
Find more information about the legal requirements.
How do we collect your information?
We collect information about you in various ways, including:
- telephone
- letters
- face to face meetings
- visits to your home
- from other professionals
What information is being processed?
We're the data controller responsible for collecting and processing most of the personal data in relation to your health and social care.
We're required to provide Client Level Data to NHS Digital on person-level. Please see the CLD specification for more information about the data that is provided.
Once we provide information to NHS Digital, they become the data controller. NHS Digital may only disseminate data to a limited set of bodies.
The information is anonymised by NHS Digital and is not shared in any way which would identify you.
Why are we interested in processing your data?
By participating in the pilot, we can submit statutory data returns, commission and deliver high-quality care and support.
NHS Digital can publish analysis reports and data for the wider health and care system to improve the health and well-being of people.
How long do we keep your data?
NHS Digital state that the data that they hold will be held for “20 years maximum from when the information is received, subject to appraisal if there is a justifiable reason to extend.”
What right do you have to withdraw consent?
We have a mandatory requirement to provide Client Level Data under the Health and Social Care Act 2012.
What rights do I have?
You have some rights about how your data is handled, which are explained in our Corporate data privacy notice - Southwark Council.
Contacts
If you're concerned about how we're handling your personal information, contact our Data Protection Officer by:
- emailing dpo@southwark.gov.uk
- mailing a letter to: Data Protection Officer, 2nd floor Hub 1, Southwark Council PO Box 64529, London, SE1P 5LX
- phoning: 0207 525 5000
If you're still unhappy with how we're handling your personal information, contact the Information Commissioners Office on their website. Alternatively, you can call them on 0303 123 1113.
Page last updated: 06 September 2023
