Data Controller

NHS West Yorkshire Integrated Care Board

Purpose

We process information provided by applicants for the management of their application and the subsequent selection process.

We use NHSjobs to advertise our job postings, and to manage the selection and interview process. Learn more about how NHSjobs uses your information.

Lawful basis

The ICB’s lawful basis for processing personal data under the UK GDPR is Article 6(1) c - Legal Obligation

For special category data the basis is article 9(2) b - employment laws.

For criminal conviction information (obtained via the Disclosure and Barring Service (DBS)) processing meets the requirements of Article 10 of the GDPR under Schedule 1, Part 1 of the Data Protection Act 2018 - processing in connection with employment, health and research - Processing necessary for the purposes of performing or exercising obligations or rights of the controller or the data subject under employment law, social security law or the law relating to social protection.

Relevant legislation: the provisions of the Safeguarding Vulnerable Groups Act 2006 as a basis for carrying out DBS checks.

Type of information used

Anonymous – for shortlisting and selection purposes.

Personal data: name, address, date of birth following the short-listing process.

Special category data: race or ethnicity, health information.

Who we will share the information with (recipients)

We share this information with the Leeds Teaching Hospitals NHS Trust as provider of management of NHS Jobs on behalf of the ICB.

Do we use any processors

The Health Informatics Service (THIS), our IT supplier who store all our information securely on their servers.

Microsoft Azure, supported by IT staff, host our data.

Leeds Teaching Hospitals NHS Trust – providing end to end recruitment support and management of NHS Jobs.

How we collect (the source) and use the information

The recruitment process involves passing details provided by you on your application regarding your qualifications, skills and work experience, (but excluding your name, address and other personal information) to the short-listing and selection panels. After shortlisting, the names of those being interviewed will be provided to the interview panel. On occasion the interview panel may include colleagues external to the ICB, such as the Local Authority.

We also use information provided by you to make sure that we are fair to all applicants and to help fulfil our obligations to monitor equality and diversity within the organisation.

How long we will keep the information

For unsuccessful job applicants, information is retained for one year.

Your Rights

With regards to recruitment under the UK GDPR you have the following rights: