Data Controller

NHS West Yorkshire Integrated Care Board

Purpose

NHS Continuing Healthcare (CHC) is explained on the NHS website here.

Where you have asked us to undertake an assessment for any of the services provided by the Continuing Healthcare Service, we use your information to determine if you are eligible for CHC and arrange a care and support package that meets your assessed needs and represents a fair market price. Information about the individual will need to be collected, reviewed and shared with care providers. Anonymised data may also be used for service development and reporting.

Lawful basis

The ICB’s lawful basis for processing personal data under the UK GDPR is Article 6(1) e - Public Task.

For special category data the basis is Article 9(2) h - Management of Healthcare Systems.

The consent of the patient or their legal representative is obtained to satisfy the Common Law Duty of Confidentiality.

Type of information used

Personal data: name, age, contact details, address and postcode of residence, NHS number, local record identifier.

Special Category data: ethnic origin, physical and mental health data.

Who we will share the information with (recipients)

We will only share your information with providers (such as domiciliary care providers) as needed in order to process your Continuing Healthcare application. 

We will need to receive and share your information with providers who have been or will be involved in your care. This ensures we have accurate records regarding your needs and will help with the assessment and review process of continuing healthcare. 

We may also share your information with the local authority, NHS South Yorkshire Integrated Care Board (which processes previously unassessed periods of care on behalf of the ICB), our solicitors and others in line with the “need to know” principle.

Do we use any processors

QA Plus Ltd – supplier of iQA electronic record system used for NHS Continuing Healthcare, NHS Funded Nursing Care and Complex Care Patients.

Broadcare – supplier of the Broadcare electronic system used for the administration of CHC.

Adam HTT – supplier of software used for the administration of CHC.

The Phoenix Partnership – supplier of SystmOne electronic patient records system.

Valuing Care Ltd – supplier of the Valuing Care fair pricing software which uses the cost breakdown of proposed and actual placements to determine a fair market price for care and enable like for like comparison.

Liaison Care, who undertake some continuing healthcare assessments on behalf of the ICB.

The Health Informatics Service (THIS), our IT supplier who stores our information securely on their servers.

Microsoft Azure, supported by IT staff, host our data.

CFH Docmail Ltd - used to provide a print and post solution to facilitate the sending of letters to service users.

How we collect (the source) and use the information

Normally, the type of information that we process about you is information you have provided yourself, although we may seek further information in relation to your health and care needs. We will obtain this additional information from your healthcare records that may include Care Home records, Health Records (for example GP, Hospital, Mental Health, District Nursing) and Social Care Records. Access to relevant health information is increasingly achieved by electronic means through access to clinical information systems such as SystmOne.

We collect, use, share and securely store information from/with the Local Authority (Social Services) and other organisations or individuals that are either directly or indirectly involved in the assessment, decision making process, the arranging of care, the funding and payment of care and appropriate monitoring of and audit of the safety and quality of care.

This process is carried out with the consent of the patient to satisfy the Common Law Duty of Confidentiality.

How long we will keep the information

8 years from end of care or when you are last seen.

Where your request has been rejected, information will be kept for 2 years.

Your Rights

With regards to Continuing Healthcare under the UK GDPR you have the following rights: