Norfolk & Suffolk ICB (NSICB) and NHS England are working together to deliver the Maternity and Neonatal Independent Senior Advocacy (MNISA) service.
For the purposes of data protection laws NSICB and NHS England are “joint controllers” for the use (processing) of your personal information in this notice. This means that we have both worked together to decide why and how your personal data (processed). It also means we are jointly responsible to you under the law for that processing.
To confirm:
- NSICB is responsible for handling your personal information regarding any engagement you have with the MNISA service.
- NHS England has responsibility for providing the reporting system that the MNISA service (e.g., NSICB) uses for handling your personal information. For example, securely storing any information you provide when engaging with the service. NHS England will also process your de-identified and anonymised data to ensure the service works, can improve and adapt to any changing requirements.
In this notice, any reference to “we”, “us” or “our” is the NSICB and any reference to NHS England is given directly.
This notice describes how and why your personal information is used and by who. Any sharing of that information; by who and why. As well as how to contact us or NHS England should you have any questions or concerns about the use of your personal information.
Whilst NSICB and NHS England are joint controllers for your information, NSICB has taken responsibility to be the point of contact for any data protection queries. For further information about NHS England, including how to contact them, please access NHS England’s privacy notice. You can also access our privacy notice via this website.
The type of personal information we collect
We collect and process the following information:
- Your contact information; name, telephone number, email address
- Health related information
- Date and details relating to your experiences
- Racial or ethnic origin
How we get the personal information and why we have it
- We collect personal data from you when you approach the MNISA service to engage with an Advocate/the service
- We use the personal data, you provide us with, in order to give you relevant support in relation to your experience
This includes:
- Engaging with the healthcare setting you are involved in to seek improvement, dialogue or understand issues.
- Provide you with any signposting for other support relevant to your situation
- NHS England use your personal data to assess the viability of the service and ensure improvement in services; for both the MNISA and maternity services
This includes using de-identified information to help understand themes and trends raised, scope and reach of the service, to be able to report progress of the pilot and to help understand the impact of the MNISA work.
We may share your information with the healthcare setting you have told us about.
We will talk with you about what information we feel may be necessary to share in order to seek improvement or engage in discussions with them about your experiences.
Under the UK General Data Protection Regulation (UK GDPR), the lawful bases that NSICB and NHS England rely on for processing your information under this service, and of which is special category data are:
- Article 6(1)(e) We need it to perform a public task.
- Article 9(2)(h) We need it for the provision and management of our health or social care system
How we store your personal information
Your personal information is stored securely on NHS England’s, IT system. Your personal information will not be routinely accessed by anyone in NSICB or NHS England, apart from the MNISA themselves; unless a technical issue arises with CRM and it is necessary for NHS England to assess the issue to maintain the security and functionality of the system and its data. Or, your advocate is absent and your case, with your agreement, is transferred. We and NHS England will retain and dispose of your personal information in line with the Records Management Code of Practice (Version 7).
Your data protection rights
Under data protection law, you have a number of data protection rights. For example, right of access, where you have the right to ask us for copies of your personal information. You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
The regulatory body responsible for upholding data protection, the Information Commissioner’s Office (ICO) also has information regarding data subject rights.
Please contact us at [email protected] if you wish to make a request.
How to complain
If you have any concerns about our use of your personal information, you can make a complaint to us at [email protected] .
You can also complain to the ICO if you are unhappy with how we have used your data. Their address is:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk (opens in new window)