Adult care privacy notice
Data protection and privacy
Dorset Council’s Adult Care services work under the legal obligations of the new European General Data Protection Regulation (GDPR). The GDPR is like the Data Protection Act (DPA), However, there are some changes which will affect everyone and these will be reflected in the new Data Protection Act.
The legal basis of processing your information
The GDPR allows us to process your personal data (your data) in order to provide you with services, including preventative and sign posting services.
The Caldicott Principles say that the duty to share information can be as important as the duty to protect service user confidentiality. Further information can be found on the NHS website.
If we use your information for new things, or we change the way we collect or use your data, we will contact you. We might need your explicit consent.
Our obligations to you
Dorset Council holds data about adults who need our services. We use this data to:
- understand any needs you may have for personal care and support
- provide you with relevant advice and information, including financial information
- provide services to meet your needs for personal care and support
- understand if you or others are at risk of abuse and take appropriate action
How we use your NHS number in Adult Care
If you are receiving an Adult Care Service, we may obtain your NHS Number via an NHS service called the Personal Demographic Service (PDS). Adult Care provides some basic information such as your name, address and date of birth to obtain your NHS Number. This is used to provide integrated services by allowing the most up to date information to be shared with GPs, hospitals, district nurses and other relevant health professionals.
Only relevant information will be shared and access is restricted to essential personnel who are subject to a duty of confidentiality. However, if you wish to opt-out from the use of your NHS number for social care purposes then please contact us as per the details at the end of this notice.
For more information on the use of your NHS Number can be found on the NHS website.
Your data might include personal and sensitive characteristics such as:
- your name, address, date of birth and a phone number
- your religion, racial or your ethnic background
- your gender or sexuality
- your reasons for needing a service
- professional observation about you and your needs
- the details of the services we provide around your social care needs
Adult Care Services will ensure your data is:
- processed lawfully, fairly and in a transparent manner
- only accessed by members of staff with a specific legitimate purpose
- adequate, relevant and limited to what is necessary
- accurate and up to date
- not kept any longer than is necessary and destroyed in accordance with the Adult Care Retention Policy - a copy can be obtained from the Adult Care Directorate
- stored and disposed of securely
We often need to share data with other people or partner organisations. They might carry out assessments or arrange services to meet your needs.
- we will share data securely
- we will not share more than we need to
- other people delivering services on our behalf will also be told to keep the data you give us, safe and secure
You can refuse permission for us to share your data. If you do refuse, this may limit how much we can help you.
Sometimes the law requires us to share data without your permission. For example, where it is necessary to prevent harm to someone or to prevent fraud or other crimes.
To give the best outcomes to the people of Dorset we continually review and update our services. We carefully use the data we collect about how we deliver services and who is using them.
As a mandatory participant of the National Fraud Initiative (NFI), we sometimes share personal data with the NFI. The purpose of this data sharing is to detect and prevent fraud. The NFI may share the personal data we provide with other bodies or organisations including: HMRC, the Department for Work and Pensions and IT suppliers to the NFI.
Our legal basis for sharing the data is that the processing is necessary for the performance of a task carried out in the public interest. Where we share special category data, our additional legal basis is that the processing is necessary for reasons of substantial public interest for the exercise of a function of the Crown, a Minister of the Crown, or a government department.
The personal data we provide will be used by the NFI to match records across different data sources in order to prevent and detect fraud. More information about how the NFI use personal data
The national data opt-out programme
The national data opt-out gives you more control over how your health and care information is used. It offers the opportunity to make informed choices about whether your personal data is used just for your individual care and treatment or also used for research and planning purposes. Further information can be found on the NHS website.
You have rights, including:
- right of access - you can see the information that we hold about you.
- right of rectification: if data we hold about you is wrong, we will put it right as soon as possible.
- right of erasure - the ‘right to be forgotten’ If the information we are holding is no longer justified or wrong, you can ask us to delete or erase it.
- right to restrict processing: if you think the information we hold about you is wrong you can ask us to limit how we use it.
We keep our privacy notice under regular review.
If you would like to know more, or see a copy of the data we hold and share about you, please contact our Data Protection officer.
Complaints and questions
We take any complaints seriously.
If you think that our collection, storage and use of your data is wrong, please contact us.
This privacy notice does not provide exhaustive detail of all aspects of Adult Care’s services collection, storage and use of personal data. We are happy however, to provide additional explanation or information if needed.
If you need independent advice about data protection, privacy or your data sharing rights you can contact The Information Commissioner’s Office