Data Controller
NHS West Yorkshire Integrated Care Board
Purpose
We have a duty to protect the public funds we administer. We may share information provided to us with other bodies responsible for; auditing, or administering public funds, or where undertaking a public function, in order to prevent and detect fraud under the National Fraud Initiative.
The Cabinet Office is responsible for carrying out data matching exercises.
Lawful basis
The ICB’s lawful basis for processing personal data under the UK GDPR is Article 6(1) c - Legal Obligation.
Relevant legislation: Part 6 of the Local Audit and Accountability Act 2014 (LAAA).
Type of information used
Personal data: your name, the organisation you work for and your pay amounts.
Who we will share the information with (recipients)
The Cabinet Office and Counter Fraud Authority.
Do we use any processors
The Health Informatics Service (THIS), our IT supplier who store all our information securely on their servers.
Microsoft Azure, supported by IT staff, host our data.
How we collect (the source) and use the information
We participate in the Cabinet Office’s National Fraud Initiative: a data matching exercise to assist in the prevention and detection of fraud. We are required to provide particular sets of information to the Minister for the Cabinet Office for matching for each exercise, as detailed in the National Fraud Initiative’s privacy notice.
Data matching involves comparing computer records held by one body against other computer records held by the same or another body to see how far they match. This is usually personal information.
Computerised data matching allows potentially fraudulent claims and payments to be identified. Where a match is found it may indicate that there is an inconsistency which requires further investigation. No assumption can be made as to whether there is fraud, error or other explanation until an investigation is carried out.
Data matching by the Cabinet Office is subject to a Code of Practice.
How long we will keep the information
The datasets used in the matching exercise by the Cabinet Office will be kept as per the National Fraud Initiative - Data Deletion Schedule
Your Rights
With regards to the National Fraud initiative, under the UK GDPR you have the following rights:
- The right to be informed about the processing of your data (this notice)
- The right of access to the data held about you
- The right to have that information amended in the event that it is not accurate
- The right to restrict processing
- Right not to be subjected to automated decision making and profiling
- To be notified of data breaches