Data Controller
NHS West Yorkshire Integrated Care Board
Purpose
We process information provided by applicants for the management of their application and the subsequent selection process.
We use NHS jobs to advertise our job postings, and to manage the selection and interview process. Learn more about how NHSjobs uses your information.
Lawful basis
The ICB’s lawful basis for processing personal data under the UK GDPR is Article 6(1) c - - processing is necessary for compliance with a legal obligation to which the controller is subject
For special category data the basis is article 9(2) b - processing is necessary for the purposes of carrying out the obligations and exercising specific rights of the controller or of the data subject in the field of employment and social security and social protection law
For criminal conviction information (obtained via the Disclosure and Barring Service (DBS) processing meets the requirements of Article 10 of the GDPR under Schedule 1, Part 1 of the Data Protection Act 2018 - processing in connection with employment, health and research - Processing necessary for the purposes of performing or exercising obligations or rights of the controller or the data subject under employment law, social security law or the law relating to social protection.
Relevant legislation: the provisions of the Safeguarding Vulnerable Groups Act 2006 as a basis for carrying out DBS checks.
Type of information used
Anonymous – for shortlisting and selection purposes.
Personal data: name, address, date of birth following the short-listing process.
Special category data: race or ethnicity, health information.
Who we will share the information with (recipients)
We share this information with the Leeds Teaching Hospitals NHS Trust as provider of management of NHS Jobs on behalf of the ICB.
Do we use any processors
The Health Informatics Service (THIS), and West Yorkshire ICB Leeds IT and Leeds City Council IT Integrated Digital Service (IDS) our IT suppliers who store all our information securely on their servers.
Microsoft Azure, supported by IT staff, host our data.
Leeds Teaching Hospitals NHS Trust – providing end to end recruitment support and management of NHS Jobs.
How we collect (the source) and use the information
The recruitment process involves passing details provided by you on your application regarding your qualifications, skills and work experience, (but excluding your name, address and other personal information) to the short-listing and selection panels. After shortlisting, the names of those being interviewed will be provided to the interview panel. On occasion the interview panel may include colleagues external to the ICB, such as the Local Authority.
We also use information provided by you to make sure that we are fair to all applicants and to help fulfil our obligations to monitor equality and diversity within the organisation.
How long we will keep the information
For unsuccessful job applicants, information is retained for one year.
Your rights
Under the UK General Data Protection Regulation all individuals have certain rights in relation to the information which the ICB holds about them. Not all rights apply equally to all our processing activities as certain rights are not available depending on the lawful basis for the processing.
If you require further detail each link below will take you to the Information Commissioner’s Office website where further detail is provided in the section ‘When does the right apply’.
These rights are:
- The right to be informed about the processing of your data
- The right of access to the data held about you
- The right to have that information amended in the event that it is not accurate
- The right to have the information deleted
- The right to restrict processing
- The right to have your data transferred to another organisation (data portability)
- The right to object to processing
- Rights in relation to automated decision making and profiling
Under the NHS Constitution you have the right to privacy and to expect the NHS to keep your information confidential and secure.
If you have an enquiry in relation to your data protection rights please contact wyicb.