The purpose of processing
We analyse personal data for purposes such as needs assessments, health equity audits, commissioning and delivery of services to promote health and prevent ill-health, public health surveillance, identifying inequalities in the way people access services and their outcomes, Joint Strategic Needs Assessment (JSNA), providing public health advice to commissioners in the NHS and local government, and health protection and other partnership activities.
Data subjects
Health and social care professionals (including doctors and nurses in GP surgeries and hospitals)
Schools and colleges
Police
Fire service
Other council colleagues across B&NES to promote the health of local people
Personal data
Births registration data (individual data of births to residents of B&NES with NHS number and date of birth of baby and usual address of mother, but does not include the names of mothers and babies)
National Child Measurement Programme (NCMP) data (name, date of birth, address of residence, NHS number, weight and height of participating pupils in B&NES’s state funded schools who are in Reception and Year 6)
Deaths registration data (individual data of deaths among residents of B&NES, deaths among registered patients in NHS Bath and North East Somerset Clinical Commissioning Group; NHS number, address of residence, date of birth and date of death
How is it used?
Needs assessments
Health equity audits
Commissioning and delivery of services to promote health and prevent ill-health
Public health surveillance
Identifying inequalities in the way people access services and their outcomes
Joint Strategic Needs Assessment (JSNA)
Providing public health advice to commissioners in the NHS and local government
Health protection and other partnership activities
Profiling and automated decision making
Not applicable.
Legal basis for using your data
GDPR condition relied upon for processing personal data:
Article 6.1 e - Exercise of official authority
The statutory authority for processing NCMP Privacy Notice for B&NES Public Health’s use of personal data data is provided by The Local Authorities (Public Health Functions and Entry to Premises by Local Healthwatch Representatives) Regulations 2013 and The Local Authority (Public Health, Health and Wellbeing Boards and Health Scrutiny) Regulations 2013. The legal basis for the dissemination of births and deaths registration data by NHS Digital is given by Dissemination: Health and Social Care Act 2012 - s261(5)(d).
GDPR condition relied upon for processing special category data
Article 9.2 h - Provision of health or social care
Sharing of personal data with external recipients
Our commissioned provider, Virgin Care, who collects the NCMP data stores a record of the height and weight measurements on the child's health record and may share it with the provider of the local Child Health Information System (CHIS), South Central and West Commissioning Support Unit (SCW CHIS). The child’s GP will either access these measurements direct from their health record, or Virgin Care may share this with them. B&NES also uploads the data to NHS Digital where it is also stored securely and used for national analysis. NHS Digital is responsible for collecting health and care information to check how the NHS and social care services are doing, and to use this to improve the care provided to people across England. NHS Digital shares de-personalised NCMP data with Public Health England (PHE) so they can undertake their work to protect and improve the nation’s health. NHS Digital may also share de-personalised NCMP data with other organisations, such as universities. The information about the organisations NHS Digital has shared information from NCMP (https://digital.nhs.uk/services/national-child-measurement-programme). Other than sharing among authorised B&NES Council Public Health and Business Intelligence staff, births and deaths registration data supplied by NHS Digital will not be shared with any third parties. There are occasions where service providers will have a legal duty to share information, for example, for safeguarding or criminal issues.
How long is the personal data retained by the Council?
Personal data will only be retained for as long as it is needed for the purpose specified above, or as required by applicable law or regulatory requirements.