Data Controller
NHS West Yorkshire Integrated Care Board
Purpose
We are required to maintain a register of interests, gifts and hospitality of all our staff, as well as its Members, Board / Committee Members.
Lawful basis
The ICB’s lawful basis for processing personal data under the UK GDPR is Article 6(1) e - Public Task.
Statutory guidance for ICBs on Managing Conflicts of Interest under Section 14O of the National Health Service Act 2006 (as amended by the Health and Social Care Act 2012)
Type of information used
Personal: name and job role
Who we will share the information with (recipients)
Information may be shared with NHS England.
Do we use any processors
We use an online declaration of interest portal called Civica Declare. This system is hosted by Civica UK.
Our IT supplier is The Health Informatics Service (THIS).
How we collect (the source) and use the information
The information is collected directly from staff and Board / Committtee Members.
How long we will keep the information
The ICB will keep a private record of historic interests and offers/receipt of gifts and hospitality for a minimum of 6 years after the date on which it expired.
Your Rights
In exceptional circumstances, where the public disclosure of information could lead to a real risk of harm or is prohibited by law, a person’s name or other information may be withheld from the published registers. If you feel that substantial damage or distress may be caused to you or somebody else by the publication of information in the registers, you are entitled to request that the information is not published. Such requests must be made in writing:
With regards to the Declaration of Interests, under the UK GDPR you have the following rights:
- The right to be informed about the processing of your data (this notice)
- The right of access to the data held about you
- The right to have that information amended in the event that it is not accurate
- The right to restrict processing
- The right to object to processing
- Right not to be subjected to automated decision making and profiling
- To be notified of data breaches