Data Controller
NHS West Yorkshire Integrated Care Board
Purpose
Care and Treatment Reviews (CTRs) are part of NHS England’s commitment to transforming services for people with learning disabilities, autism or both. CTRs are for people whose behaviour is seen as challenging and/or for people with a mental health condition.
They are used by commissioners for people living in the community and in learning disability and mental health provider services.
Lawful basis
GDPR Article 6(1)(e) – processing is necessary for the performance of a task carried out in the exercise of official authority vested in the controller.
GDPR Article 9(2)(h) processing is necessary for the purposes of the provision of health or social care or treatment or the management of health or social care systems and services.
Type of information used
Identifiable: Personal (such as name, address, date of birth) and Special Category (health information)
Who we will share the information with (recipients)
Information may be shared with the Local Authority, and primary and secondary healthcare providers.
Do we use any processors
The Health Informatics Service (THIS)and West Yorkshire ICB Leeds IT and Leeds City Council IT Integrated Digital Service (IDS) our IT suppliers who store all our information securely on their servers.
Microsoft Azure, supported by IT staff, host our data.
How we collect (the source) and use the information
Care and Treatment Reviews are independent panel meetings about your care arranged by the ICB. The CTR panel is made up of professionals who are not involved in your everyday care. The panel members listen to you and to everyone involved in your care. They look at your notes and check that your care and plans are working well. They use this information and their own experience to decide what will improve your care and plans for the future. They speak up when they think your care could be different or better.
ICBs have to understand people’s needs, to plan for different levels of support at different times. They work with other health and social care services to find out who needs extra support or contact to make sure things are satisfactory. Any list of names will only be kept by the ICB if they are in receipt of funding from Individual Funding Requests (IFR) or Continuing Health Care (CHC). This list or register helps the ICB work with health and social care services. It allows them to arrange the extra support needed, if a CTR is needed, or extra help for carers. If you need a community CTR, you can join this register. Ask your care co-ordinator about it.
If someone suddenly becomes very unwell and urgently needs to go into hospital, there might not be enough time for a community CTR. If this happens, an adult should have a hospital CTR within four weeks of going into hospital, or two weeks if you are a child or young person. This process is carried out with consent from the patient in order to satisfy the Common Law Duty of Confidentiality.
How long we will keep the information
10 years.
Your rights
Under the UK General Data Protection Regulation all individuals have certain rights in relation to the information which the ICB holds about them. Not all rights apply equally to all our processing activities as certain rights are not available depending on the lawful basis for the processing.
If you require further detail each link below will take you to the Information Commissioner’s Office website where further detail is provided in the section ‘When does the right apply’.
These rights are:
- The right to be informed about the processing of your data
- The right of access to the data held about you
- The right to have that information amended in the event that it is not accurate
- The right to have the information deleted
- The right to restrict processing
- The right to have your data transferred to another organisation (data portability)
- The right to object to processing
- Rights in relation to automated decision making and profiling
Under the NHS Constitution you have the right to privacy and to expect the NHS to keep your information confidential and secure.
If you have an enquiry in relation to your data protection rights please contact wyicb.