Your information

If you require the information on this page in another language, orally (spoken word) or in another format, please contact us at [email protected]

Overview

The Privacy Notice, previously referred to as Fair Processing Notice, tells you about the information we collect and hold about you, what we do with it, how we will look after it, and who we might share it with. It covers information we collect directly from you or receive from other individuals or organisations.

We review our Full Privacy Notice annually, or sooner, if necessary to ensure that it continually provides transparent information about the use of your data. This notice was reviewed in November 2023.

Mid and South Essex Integrated Care Board’s (MSE ICB) Full Privacy Notice is available here.

Further supporting documents, such as an Easy-Read version, can be found at the bottom of this page.

We are committed to protecting your privacy and will only process personal information in accordance with the Data Protection Act 2018, UK General Data Protection Regulations (UK GDPR), the common law duty of confidentiality and the Human Rights Act 1998. 

Why we collect information about you

If you are receiving services from the NHS, we will need to use your information (paper or electronic) to provide treatment, to check the quality of your care, to help you make good decisions about your health and to investigate complaints and claims. We also use your information to:

• Check the quality of care provided by commissioned services (e.g. a clinical audit)
• Protect the health of the general public
• Monitor how we spend public money
• Train healthcare workers
• Carry out research
• Help the NHS plan for the future.

The ICB also uses patient data to analyse the health of a population. This is required for the commissioning of health services, or to help target preventive care at certain groups of patients.

How your data is used

Infographic content

How your data is used

Where do we get personal data from?
NHS England and local NHS providers
What do we do with it?
Create reports to understand our population and its needs to support the commissioning of services.
Contact people who may be vulnerable and eligible for support to advise what support is available to them.
Who do we share it with?
Securely with our data processors to enable us to deliver our services.
Anonymised data is shred with partner organisations to support service planning/delivery.
Pseudonymised/deidentified reports shared with partnering organisations who are sub-licensees.
Where do we get personal data from?
Participating GP practices
What do we do with it?
Create reports to understand our population and its needs to support the commissioning of services.
Contact people who may be vulnerable and eligible for support to advise what support is available to them.
Provide support services such as Prescription Ordering Direct (POD).
Who do we share it with?
Not applicable
Where do we get personal data from?
Individual service users
What do we do with it?
Provide support services such as Prescription Ordering Direct (POD).
Deal with queries and complaints.
Complete assessments for eligibility for funded care.
Who do we share it with?
Not applicable
Where do we get personal data from?
Employees
What do we do with it?
Process for payroll, HR, mandatory training, etc.
Who do we share it with?
HR, Payroll provider, Electronic Staff Record (ESR)

Security of your information

When using information, if we need to use information that identifies you, we will always ensure that there is a fair and lawful basis for doing so.  We will always remove names and personal identifiers unless it is impossible to complete the task without them.

The ICB works with our data processors, to ensure that information is held in secure locations with restricted access for authorised personnel. We protect any personal information that is held on our systems with encryption so that it cannot be accessed by those who do not have access rights.

• Your information will not be sent by the ICB outside of the United Kingdom to a country that does not have appropriate legislation to protect your privacy.  
• We will never sell any information about you.
• We will never share your information with a third-party organisation for marketing purposes without your prior written consent. 
• We will observe your right to opt-out of the use of your personal data for commissioning purposes. 

Access to your information

You have the right to see or be given a copy of the personal data an organisation holds about you.  This is known as a Subject Access Request. You can make request to the ICB, please email the details to [email protected]

Tell us your details, details of the records you would like and date ranges. Full details of how to raise a request can be found in Mid and South Essex ICB’s Access to Information Policy

You have further rights under the UKGDPR. To find out more please view the Privacy Notice here, or visit the Information Commissioners Office website

Information sharing

There must be a legal basis to share personal information.  The ICB has signed sharing agreements and processing contracts with different partnering organisations in the ICS, to enable services to run. These are detailed in the privacy notice in the section labelled ‘Sharing information with other organisations”.  Some examples of how information is shared are below.

My Care Record

My Care Record is used throughout the East of England region and allows information to be shared for direct care purposes only.  NHS Mid and South Essex Integrated Care Board is a signatory to My Care Record. My Care Record is an information sharing framework, to ensure that your data is processed in a consistent and secure manner. Further information can be found on the My Care Record website. You can also see the My Care Record privacy notice here.

Sub licensing

The ICB receives de-identified (pseudonymised) information for commissioning purposes only, within the Mid and South Essex and Social Care System.  Under strict rules, the ICB can share this information with sub-licensees.

For further details, please see the privacy notice here and NHS England sub licensing information here.

Privacy Notices