Data Controller
NHS West Yorkshire Integrated Care Board
Purpose
We are required to maintain a register of interests, gifts and hospitality of all our staff, as well as its Members, Board / Committee Members.
Lawful basis
The ICB’s lawful basis for processing personal data under the UK GDPR is Article 6(1) e - processing is necessary for the performance of a task carried out in the exercise of official authority vested in the controller.
Statutory guidance for ICBs is available on Managing Conflicts of Interest under Section 14O of the National Health Service Act 2006 (as amended by the Health and Social Care Act 2012).
Type of information used
Personal: name and job role
Who we will share the information with (recipients)
Information may be shared with NHS England.
Do we use any processors
We use an online declaration of interest portal called Civica Declare. This system is hosted by Civica UK.
Our IT suppliers are The Health Informatics Service (THIS) and West Yorkshire ICB Leeds IT and Leeds City Council IT Integrated Digital Service (IDS).
How we collect (the source) and use the information
The information is collected directly from staff and Board / Committtee Members.
How long we will keep the information
The ICB will keep a private record of historic interests and offers/receipt of gifts and hospitality for a minimum of 6 years after the date on which it expired.
Your rights
Under the UK General Data Protection Regulation all individuals have certain rights in relation to the information which the ICB holds about them. Not all rights apply equally to all our processing activities as certain rights are not available depending on the lawful basis for the processing.
If you require further detail each link below will take you to the Information Commissioner’s Office website where further detail is provided in the section ‘When does the right apply’.
These rights are:
- The right to be informed about the processing of your data
- The right of access to the data held about you
- The right to have that information amended in the event that it is not accurate
- The right to have the information deleted
- The right to restrict processing
- The right to have your data transferred to another organisation (data portability)
- The right to object to processing
- Rights in relation to automated decision making and profiling
Under the NHS Constitution you have the right to privacy and to expect the NHS to keep your information confidential and secure.
If you have an enquiry in relation to your data protection rights please contact wyicb.