Who will own my data once I submit it?
Knowsley Metropolitan Borough Council, Inspira Health Limited, who are the providers of the NHS Health Check Support Service, and GP surgeries that have signed up to deliver the contract for delivery of the NHS Health Check Programme.
Why do you need my information?
Knowsley Council has a responsibility for improving the health of the local population under the Health and Social Care Act 2012, which requires us to commission services to support the health and well-being of the local population.
Knowsley Council commissions the provision of NHS Health Checks to identify residents’ cardiovascular risk to reduce their likelihood of having a heart attack or stroke within the next 10 years. The NHS Health Check is a mandated service that the Council is required to deliver, and Knowsley GPs are contracted to provide this service. The NHS Health Check Support Service supports GPs in their delivery of NHS Health Checks to increase the number of health checks offered and delivered year on year. The service also aims to improve the quality of the follow-on intervention, including referrals to the appropriate specialist Knowsley services. The service also works to quality assure delivery and help ensure a high take-up of the checks.
Eligible patients between the ages of 40 and 74 are called every 5 years to have an NHS Health Check as part of a rolling programme. Patients consent to the GP undertaking the health check by attending their appointment. Onward transmission of their data for matters relating to lifestyle support (e.g., smoking cessation) must be given via consent during the check. Referrals for further investigation or treatment of a health-related issue identified by the check will not require the patient’s consent.
The provision of this service requires the processing of personal data. Adequate recording must be made regarding an individual’s clinical health and cardiovascular risk factors in line with NICE Guidance.
As part of the delivery of this service, GP practices will share details of individuals receiving an NHS health check, indicating:
- Name
- Date of birth
- NHS number
- Name and designation of the person carrying out the NHS Health Check
- Consent obtained
- Date of NHS Health Check
- 10 -year QRisk Score
What allows you to use my information?
Knowsley Council Public Health Service has responsibility for improving the health of the local population under the Health and Social Care Act 2012. The Act requires the Council to commission services to support health and wellbeing, including the provision of the NHS Health Checks Programme. The Council’s Public Health team is required to commission a set of ‘mandated services’ through the Public Health Grant. There are five core mandatory public health functions, and one of these relates to the provision of NHS Health Checks.
In line with the UK General Data Protection Regulation (UK GDPR), we are using the following lawful bases to process personal information about you:
- Article 6(1)(e), which states that the processing is necessary for the performance of a task carried out in the public interest.
Any special category personal data, which includes information relating to health, will be processed using the following lawful bases, which are available under the UK GDPR:
- Article 9(2)(a), which allows the processing of special category personal data if the individual to whom the data relates has given explicit consent to the processing of the data.
- Article 9(2)(h), which allows the processing of special category personal data for the purposes of preventive medicine, medical diagnosis, and the provision of health or social care or treatment or the management of health and social care systems and services.
The associated lawful condition under the Data Protection Act 2018 is Schedule 1, Paragraph 6, for statutory and government purposes.
Who will my information be shared with?
Relevant Hospital & Community Treatment Providers
- Information may need to be shared with Hospital and Community Treatment Providers, e.g. consultants and specialist practitioners, for any patient-identified needs, such as the treatment and management of Hypertension, Diabetes and Chronic Kidney Disease.
Appropriate Lifestyle services -Healthy Knowsley Service (Mersey Care NHS Trust)
- Following an NHS Health Check, a patient may consent to support with weight management, smoking cessation, and increasing physical activity. The GP can make a direct referral to the Council-commissioned Healthy Knowsley Service for support via a referral from the practice EMIS system. Information shared with Lifestyle services includes name, contact details, and what the patient requires support for. This information is shared via a secure NHS email with Mersey Care NHS Trust. No information is shared regarding the diagnostic outcomes of the NHS Health Check.
Do I have to provide this information and what will happen if I don’t?
Knowsley Council has responsibility for improving the health of the local population under the Health and Social Care Act 2012, which requires it to commission services to support the health and well-being of the local population. This includes the commissioning of services to improve cardiovascular health. Without the provision of information referenced in this privacy notice, GPs would be unable to perform tasks related to the NHS Health Check.
How long will you keep this data for, and why?
Knowsley Council will not store any individual data with regard to the NHS Health Check provision.
How will my information be stored?
The service will process information captured during the health check on the GP EMIS system. This is a health record system used across the NHS in line with NHS data processing requirements.
Will this information be used to take automated decisions about me?
No
Will my data be transferred abroad and why?
No
What rights do I have when it comes to my data?
Under the Data Protection Act (DPA) 2018/ UK General Data Protection Regulation (UK GDPR), you have the following rights with regard to your personal data:
- The right to subject access – you have the right to see a copy of the personal data that the council holds about you and find out what it is used for.
- The right to rectification – you have the right to ask the council to correct or remove any inaccurate data that we hold about you.
- The right to erasure (right to be forgotten), you have the right to ask the council to remove data that we hold about you.
- The right to restriction – you have the right to ask for your information to be restricted (locked down) on council systems.
- The right to data portability – you have the right to ask for your data to be transferred back to you or to a new provider at your request.
- The right to object – you have the right to ask the council to stop using your personal data or to stop sending you marketing information, or to complain about how your data is used.
- The right to prevent automated decision making – you have the right to ask the council to stop using your data to make automated decisions about you or to stop profiling your behaviour (where applicable).
To find out more about your rights under the DPA 2018/UK GDPR, please visit the Information Commissioner’s website.
To request a copy of your data or ask questions about how it is used, please download a copy of our form and send it to:
Data Protection Officer
Knowsley Council
Municipal Building
Archway Road
Huyton
Liverpool
L36 9YU
Or email: Inforights@knowsley.gov.uk
Who can I complain to if I am unhappy about how my data is used?
You can complain directly to the Council’s Data Protection Team by writing to:
Data Protection Officer
Knowsley Council
Municipal Building
Archway Road
Huyton
Liverpool
L36 9YU
Or email: data.protection.officer@knowsley.gov.uk
You also have the right to complain to the Information Commissioner’s Office using the following details:
The Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Telephone: 08456 30 60 60 or 01625 54 57 45
Website: www.ico.org.uk