Who do you keep information about?
We keep information about:
- 0-19 Service - All people 0-19 (or 25 in the case of those with a special needs or disabilities) including parents (antenatal) and carers
- Sexual Health Service - Any individual over the age of 13 requiring treatment and care
- NHS Health Checks - Any individual 40-74 eligible for a NHS Health Check
- Recovery and Treatment Service - Any individual over the age of 18 requiring services and treatment
- Stop Smoking Service - Any individual over the age of 18 requiring services and treatment
Why do you keep information about me?
We keep information about you to enable the Council to deliver its Public Health functions and deliver services and treatment.
The GDPR conditions we are relying on to process the personal data are:
- processing is necessary for compliance with a legal obligation.
- Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
In relation to special categories of personal data the condition for processing we are relying on is:
Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
The legal obligations and public task functions we are exercising are set out in the following:
Primary legislation: Health and Social Care Act 2012 Section 1,2A,2B; NHS Act 2006 section 73A(2)(e), Section 73B(2) , Sections 2B,111 or 249, Schedule 1, section 6C, section 7A; Criminal Justice Act 2003 section 325
Regulations: Local Authorities (Public Health Functions and Entry to Premises by local Healthwatch representatives) Regulation 2013 (SI2013/351); NHS Bodies and Local Authorities (Partnership Arrangements, Care Trusts, Public Health and Local Healthwatch) Regulations 2012 (SI 2012/3094).
Who can see my information?
Information can only be accessed by members of the Public Health team.
0 - 19 Service information is shared with Harrogate and District Foundation Trust who share the information with CDDFT, Education, GPs, Other Healthcare Trusts, Social Care providers, other NHS bodies, Early Years settings.
Sexual Health Service and Treatment and Recovery Service information is shared with GPs, Police, Other NHS bodies, Public Health England.
NHS Health Check Service information is shared with Public Health England
Stop Smoking Service Information is shared with other NHS Bodies.
How do you store the information you keep about me?
We hold information on the Council systems and our network which is ISO27001 certified and all paper based records are stored in a lockable draw or lockable filing cabinet. We also store Recovery and Treatment Service information in a computer system called Illy Carepath for adults.
How long do you keep information about me?
- 0-19 Service - The retention period is 25years (or day after 25th birthday).
- Sexual Health Service - The retention period is 8 years, unless an implant or device is inserted then its 10years. If the record relates to a child, refer to above (retain until day after 25th birthday).
- NHS Health Checks - Records are currently stored on GP patient records and therefore would retained for 10years after death.
- Recovery and Treatment Service - The retention period is 8 years.
- Stop Smoking Service - The retention period is 8 years.
This information is destroyed securely when we no longer need it.
How did the Council get my personal data?
- 0 – 19 Service - Data Subject, parents/carers, other NHS bodies, social care, safeguarding, police.
- Sexual Health Service - Data Subject, Police, GP, NHS Organisations, PHE, MEG.
- NHS Health Checks – Data Subject.
- Recovery and Treatment Service – Data Subject, third sector, NHS bodies, Police, Prison Service, Probation, Local Authorities, family members and carers.
- Stop Smoking Service – Data subject, referring professionals.
In cases where your personal data was obtained from a source other than yourself or your representative, we will inform you of the origin of the information within 1 month, unless that information is being used to contact you, in which case, that information should be provided to you at the latest, upon first communication with you. However, it is not necessary to provide that information in cases where you already possess the information, where recording or disclosure is expressly laid down in law or where provision of the information proves impossible or would involve disproportionate effort.
What sort of information do you keep?
We may use the following information about you to make sure that we provide you with the right service, advice or support.
- Identification number
- Location data
- Online identifier
- One or more factors specific to the:-
- social identity of that natural person
Special categories of personal data:
- Racial or ethnic origin
- Religious or philosophical beliefs
- Biometric data for the purpose of uniquely identifying a natural person
- Data concerning health
- Data concerning a natural person’s sex life or sexual orientation