Data Controller

NHS West Yorkshire Integrated Care Board

Purpose

The Share2Care App supports unpaid carers (who may include family members and friends) across West Yorkshire. 

Lawful basis

Under UK GDPR, the lawful bases we rely on include:

Within the Share2Care App

Processing of Carers Personal Data

  • Article 6(1)(a) – the data subject has given consent to the processing of his or her personal data for one or more specific purposes.

Processing of Cared for Individuals Personal Data

  • Article 6(1)(e) – processing is necessary for the performance of a task carried out in the public interest (public task) or in the exercise of official authority vested in the controller.

Supported by: The Health and Care Act 2022, National Health Service Act 2006 (as amended) Section 3A, NHS Act 2006, Section 14Z42.

Processing of Carers Special Category Personal Data

  • Article 9(2)(a) - the data subject has given explicit consent to the processing of those personal data for one or more specified purposes, except where Union or Member State law provide that the prohibition referred to in paragraph 1 may not be lifted by the data subject.

Processing of Cared for Individuals Special Category Data

  • Article 9(2)(h) - processing is necessary for the purposes of preventive or occupational medicine, for the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services on the basis of Union or Member State law or pursuant to contract with a health professional and subject to the conditions and safeguards referred to in paragraph 3.

Data Protection Act 2018 Schedule 1, Part 1, Para 2 (Provision of health or social care).

Transfer to the Yorkshire and Humber Care Record

Processing of Carers Personal Data (including emergency carers)

  • Article 6(1)(a) – the data subject has given consent to the processing of his or her personal data for one or more specific purposes.

Processing of Cared for Individuals Personal Data

  • Article 6(1)(e) – processing is necessary for the performance of a task carried out in the public interest (public task) or in the exercise of official authority vested in the controller.

Supported by: The Health and Care Act 2022, National Health Service Act 2006 (as amended) Section 3A, NHS Act 2006, Section 14Z42.

Type of information used

Personal Information may include:

  • Name
  • Date of birth
  • Address
  • Email address
  • Telephone number
  • NHS number (where applicable)
  • Emergency contact details
  • Information about the caring role
  • Demographic information

Health and care information may include:

  • Health and wellbeing information
  • Care needs
  • Support requirements
  • Assessment responses
  • Hospital discharge information
  • Contingency planning information to support the continuity of care for the cared for person.

Who we will share the information with (recipients)

The contingency plan is shared by the carer with Yorkshire and Humber Care Record, for  access by health and care individuals in an emergency situation faced by the carer.

The Yorkshire and Humber Care Record is in place across a range of health and care organisations across West Yorkshire including:

  • NHS organisations i.e. GP practice, hospitals, Yorkshire Ambulance Service
  • Local authorities
  • Community health services
  • Voluntary and community sector organisations
  • Social care providers

Do we use any processors

Care Networx Ltd

Care Networx Ltd acts as the technology and service delivery partner for the Share2Care App and processes personal information on behalf of NHS West Yorkshire Integrated Care Board. Care Networx uses Amazon Web Services in the UK, as a sub processor.

Humber Teaching NHS Foundation Trust

Humber Teaching NHS Foundation Trust processes data within Interweave for the Yorkshire and Humber Care Record which holds the carers Contingency Plan should a carer choose to share their plan to their NHS record.

How we collect (the source) and use the information

Personal data is entered into the Share2Care App by the unpaid carer.  The App is designed to support unpaid carers who are users of the App to invite other carers to the App to form a ‘Circle of Care’ in relation to the cared for individual and use a document management system to upload and manage information relevant to the caring needs of the cared for individual along with a shared calendar relating to activities for which the cared for person is the focus.  The App additionally supports development of a Contingency Plan linked to NHS healthcare records where applicable to support the continuity of care for the cared for person, in the event of a health emergency affecting the unpaid carer.

How long we will keep the information

We keep personal data for up to 12 months. If you do not use the App for 12 months, we will contact you to ask whether you would like to keep your account or have it deleted.

If you sign in to the App again, the 12‑month period will restart from the date of your latest activity.

You can choose to delete your account at any time. When you delete your account or remove your profile, all personal information associated with your account will be permanently removed from the App database.

We will continue to process and store your personal information only while there is a valid contract in place to provide and support the App.

Your rights

Under the UK General Data Protection Regulation all individuals have certain rights in relation to the information which the ICB holds about them. Not all rights apply equally to all our processing activities as certain rights are not available depending on the lawful basis for the processing.

If you require further detail each link below will take you to the Information Commissioner’s Office website where further detail is provided in the section ‘When does the right apply’.

These rights are:

Under the NHS Constitution you have the right to privacy and to expect the NHS to keep your information confidential and secure.

If you have an enquiry in relation to your data protection rights please contact wyicb.foi@nhs.net