Data Controller
West Yorkshire Integrated Care Board.
Purpose of the Processing
West Yorkshire Integrated Care Board (ICB) is one of three ICBs in England that is undertaking a trial of the effectiveness of health interventions in getting people back into work and keeping them in work. The trial is called the ‘Health and Growth Accelerator’ and is part of the West Yorkshire Healthy Working Life programme. It aims to improve people’s health and tackle the conditions that most impact people’s ability to work. These range from heart problems and diabetes to back pain and mental health issues.
The ICB receives data from the provider organisations taking part in the Health and Growth Accelerator. These include a number of NHS provider organisations and other providers of health services such as local authorities and the voluntary, community and social enterprise sector. These organisations are providing health interventions aimed at supporting people’s ability to remain in or return to work.
We will use this data to evaluate the effects of the various health interventions put in place. Evaluations tell us what works and what does not, and they support decision-making about future plans of action.
Lawful Basis
The ICB’s legal basis for processing this personal data under the UK GDPR is Article 6(1) e - processing is necessary for the performance of a task carried out in the exercise of official authority vested in the controller.
For special category data the basis is Article 9(2) h - processing is necessary for the purposes of the provision of health or social care or treatment or the management of health or social care systems and services.
The legal basis for the dissemination of the pseudonymised datasets is the Health and Social Care Act 2012 Section 261 (5)(d).
Type of information used
- Personal data (pseudonymised)
- Special category data (pseudonymised): physical and mental health details such as health conditions, disability status and quality of life
Pseudonymised data is information which is about you, but does not tell us who you are because any identifiers will have been replaced with something which would not identify you e.g. a coded reference.
Who we will share the information with (recipients)
We do not share the information provided to us by NHS England outside of the ICB, unless the information is in aggregate and small number suppressed format.
Do we use any Data Processors?
Yorkshire Data Services for Commissioners Regional Office (DSCRO) hosted by North of England Commissioning Support (NECS) obtains the identifiable information from the Secondary Uses Service (SUS) at NHS England. The DSCRO also receives identifiable information directly from providers. They pseudonymise the information and pass it to the ICB.
How we collect (the source) and use the information
We have agreed a dataset to help us to evaluate the effectiveness of the interventions across West Yorkshire. The dataset was developed with colleagues in West Yorkshire ICB and each of the five ICB places in West Yorkshire.
The datasets we receive from DSCRO are in a format that does not directly identify you and does not include identifiable information about you
How long we will keep the information
Datasets received via DSCRO are retained for as long as there is a Data Sharing Agreement in place between the ICB and NHS England.
Once data is no longer required, it will be destroyed securely.
Your rights
Under the UK General Data Protection Regulation all individuals have certain rights in relation to the information which the ICB holds about them. Not all rights apply equally to all our processing activities as certain rights are not available depending on the lawful basis for the processing.
If you require further detail each link below will take you to the Information Commissioner’s Office website where further detail is provided in the section ‘When does the right apply’.
These rights are:
- The right to be informed about the processing of your data
- The right of access to the data held about you
- The right to have that information amended in the event that it is not accurate
- The right to have the information deleted
- The right to restrict processing
- The right to have your data transferred to another organisation (data portability)
- The right to object to processing
- Rights in relation to automated decision making and profiling
Under the NHS Constitution you have the right to privacy and to expect the NHS to keep your information confidential and secure.
If you have an enquiry in relation to your data protection rights please contact wyicb.