Who will own my data once I submit it?
Knowsley Metropolitan Borough Council
Why do you need my information?
Knowsley Metropolitan Borough Council will use the information to arrange DNA, drug and alcohol tests in relation to families involved with Childrens Social Care including legal proceedings (including those involving the safeguarding of children).
The information will be shared with Commissioned Service Providers to deliver Drug, Alcohol and DNA testing on behalf of the Knowsley Council. This will include:
- To verify Sample Donor identity and/or status of Parental Responsibility (in order to provide consent for child)
- To anonymise data collected (which may include Special Categories of data) which may be used as part of ongoing contract performance information.
- To internally review and evaluate the quality of their products and services.
- To manage their relationship with Knowsley Council which will include contacting individuals by email or phone regarding their account, and reminding them and Sample Donors of appointments and dates.
What Personal Information do we collect?
In order to provide the service some or all of the following information will be collected from you:
Personal Data (Service Users)
- Name
- DOB
- Sex
- Sex at Birth
- Address
- Postcode
- Next of kin
- Phone number
Special Category Personal Data (Service Users)
- Medical information
- Ethnicity
What allows you to use my information?
Lawful Bases for Processing Personal Data
The lawful basis for Knowsley Council is:
- Article 6 1 (c) Legal obligation
- Article 6 1 (e) Public task
- Article 9 (2) (g) Substantial public interest
- Article 9 (2) (h) Health or social care
- Article 9 (2) (i) Public Health.
The relevant lawful conditions under the Data Protection Act 2018 are as follows:
- Sch 1, P1 (2) Health and social care
- Sch 1, P1 (3) Public health
- Sch 1, P2 (6) Statutory and government purposes
- Sch1, P2 (18) Safeguarding of children and individuals at risk.
The legislation underpinning this processing is: Health and Social Care Act 2008 (Regulated Activities) Regulations 2014 and Children Act 1989, Section17, Section 47 and Section 20.
The lawful basis for providers on the framework delivering the service, processing the personal, and special category personal data are as follows:
UK GDPR
- Article 6 1 (b) Contract
- Article 6 1 (e) Public task
- Article 9 (2) (g) Substantial public interest
- Article 9 (2) (h) Health or social care
- Article 9 (2) (i) Public Health.
The relevant lawful conditions under the Data Protection Act 2018 are as follows:
- Sch 1, P1 (2) Health and social care
- Sch 1, P1 (3) Public health
- Sch 1, P2 (6) Statutory and government purposes
- Sch1, P2 (18) Safeguarding of children and individuals at risk.
The legislation underpinning this processing is: Health and Social Care Act 2008 (Regulated Activities) Regulations 2014 and Children Act 1989, Section17, Section 47 and Section 20.
Who will my information be shared with?
Information will be shared with Commissioned Service Providers to deliver Drug, Alcohol and DNA testing on behalf of the Knowsley Council. These are:
- Alphabiolabs
- DNA Legal
- Attolife
Other Council teams so they can carry out their statutory roles and support Childrens Social Care service e.g. Legal services.
Where we are required to lawfully share your information with authorised partner organisations, we will ensure this is done in a secure manner, and the information shared is relevant and proportionate in order for them deliver your services.
Do I have to provide this information and what will happen if I don’t?
If this information is not provided, we may not be able to complete statutory functions outlined in relevant law or guidance and services may not be able to provide support where it may be required.
Where service users do not agree to DNA, drug, and alcohol testing, it can lead to significant legal challenges and complications in pre-proceedings and court for example. Additionally, it could result in parent carers losing contact or custody of their child. Courts can also take further action to compel compliance, including penalties or restrictions on parental rights to ensure the best interests of the child.
How long will you keep this data for and why?
Knowsley Council will retain personal data in line with our Records Management Policy and any sectoral or statutory guidelines. This will be stored on the case file information on ICS until the seventy-fifth anniversary of the date of birth of the child to whom it relates or, if the child dies before attaining the age of 18, for a period of 15 years beginning with the date of his death.
Service Providers on the framework will hold data for 4 years after the case is completed. The data will then be securely deleted.
How will my information be stored?
Your information will be stored securely on our IT system. Some information is held in a central SharePoint site. Access to the systems is restricted to those who are entitled to view and process your data. If the information is collected in a paper format, we will also ensure it is stored and deleted securely when no longer required.
Service providers will store information on their servers or electronic cloud based systems that have appropriate security measures including restricted access. All staff receive training and annual refresher training on data protection and GDPR.
Will this information be used to take automated decisions about me?
No
Will my data be transferred abroad and why?
No
What rights do I have when it comes to my data?
Under the Data Protection Act (DPA) 2018/ UK General Data Protection Regulation (UK GDPR), you have the following rights with regards to your personal data: -
- The right to subject access – you have the right to see a copy of the personal data that the council holds about you and find out what it is used for
- The right to rectification – you have the right to ask the council to correct or remove any inaccurate data that we hold about you
- The right to erasure (right to be forgotten) you have the right to ask the council to remove data that we hold about you
- The right to restriction – you have the right to ask for your information to be restricted (locked down) on council systems
- The right to data portability – you have the right to ask for your data to be transferred back to you or to a new provider at your request
- The right to object – you have the right to ask the council to stop using your personal data or to stop sending you marketing information, or complain about how your data is used
- The right to prevent automated decision making – you have the right to ask the council to stop using your data to make automated decisions about you or to stop profiling your behaviour (where applicable)
To find out more about your rights under the DPA 2018/UK GDPR, please visit the Information Commissioner’s website.
You can request a copy of your data or ask questions about how it is used by visiting our website here.
By email to: Inforights@knowsley.gov.uk
Or in writing to:
Data Protection Officer
Knowsley Council
Westmorland Road
Huyton
L36 6GA
Who can I complain to if I am unhappy about how my data is used?
You can complain directly to the Council’s Data Protection Team by writing to: -
Data Protection Officer
Knowsley Council
Westmorland Road
Huyton
L36 6GA
Or email: data.protection.officer@knowsley.gov.uk
You also have the right to complain to the Information Commissioner’s Office using the following details:
The Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 08456 30 60 60 or 01625 54 57 45
Website: www.ico.org.uk