Adult Services – Acute Hospitals

In order to comply with the UK General Data Protection Regulation (UK GDPR), where personal data relating to a data subject is collected, Lancashire County Council would like to provide you with the following details.

Identity and contact details of the data controller

Lancashire County Council, PO Box 78 County Hall, Fishergate, Preston, Lancashire, PR1 8XJ

Contact details of the data protection officer

Our Data Protection Officer is Paul Bond. You can contact him at dpo@lancashire.gov.uk or Lancashire County Council, PO Box 78 County Hall, Fishergate, Preston, Lancashire, PR1 8XJ

Purposes for processing

The Adult Social Care Acute service is responsible for undertaking social care assessments of Lancashire residents within an acute hospital setting and those on a discharge to assess pathway in the community.

The social care assessment will be proportionate and in line with the Care Act 2014, working with Service Users, and where appropriate, their carer(s), providers and health colleagues in promoting independence and reaching positive outcomes.

The aims of the service are to undertake timely and strength based assessments over 7 days, supporting hospital flow and ensuring service users are assessed and supported in the most appropriate environment. The focus remains on maintaining and/or increasing levels of independence and the ability to carry out daily living tasks and to provide appropriate intervention that maintains the safety and wellbeing of a person, usually following illness or injury, or due to the effects of ageing or long term physical conditions.

The Adult Social Care Acute is managed by Lancashire County Council.

Residents of Lancashire (permanent or temporary) who request a needs assessment under the Care Act 2014 are provided with a proportionate assessment process. Once this has been undertaken, there are various potential outcomes which may include Information, Advice and Guidance; signposting and referrals to other non-statutory organisations and partners (including our district councils); in-house services such as rehabilitation and Reablement; provision of community equipment and services or local authority funded support services to people and their families/carers.

The Lancashire Patient Record Exchange Service (LPRES) is a programme of work that allows Healthcare Professionals within the Health and Social Care community to appropriately access the most up-to-date and accurate information about patients to deliver the best possible care.

Lancashire County Council accesses an LPRES viewer in order to collaborate and share information about patients and service users across care boundaries, we aim to provide care givers with access to the right information, at the point of care. This will lead to:

improved continuity of care
safer services for patients
a reduction in unnecessary diagnostic tests
less paperwork and more efficient services
greater access to data for providers of care, patients and their carers

Category of personal data being processed

Personal data (information relating to a living, identifiable individual)
Special category personal data (racial, ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation)

Legal basis for processing personal data

The legal basis for processing your personal data, in accordance with the UK GDPR is:

(a) Consent: the individual has given clear consent for you to process their personal data for a specific purpose.

(c) Legal Obligation: the processing is necessary for you to comply with the law. You must reference the applicable legislation if you wish to rely on this basis for processing.

(e) Public Task: the processing is necessary for you to perform a task in the public interest or for your official functions, and the task or function has a clear basis in law. You must reference the applicable task/function and its' basis in law if you wish to rely on this basis for processing.

Legal basis for processing special categories of personal data

The legal basis for processing your special categories of personal data, in accordance with the UK GDPR is:

(a) The data subject has given explicit consent to the processing of this personal data.

(h) Processing is necessary for the purposes of preventive or occupational medicine, for the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services.

Supporting Legislation

Local Government Act 2000 - Section 2 gives the local authority the power to do anything they consider likely to achieve the promotion or improvement of the social wellbeing of their area.

Health and Social Care (Safety and Quality) Act 2015 – Chapter 28

251B Duty to share information

The Care Act 2014 – Section 45 - Safeguarding Adults Board Supply of Information

Supply of information

Recipients of the data

Lancashire Adult Social Care Service Acute works with other Departments and Services managed by Lancashire County Council. They may also work with external partners and organisations including:

Borough and District Councils;
Home Improvement Agencies;
Registered Contractors and Accredited Retailers;
Department of Works and Pensions;
Primary, Secondary and Acute Health Services;
Lancashire Constabulary;
Lancashire Fire & Rescue Service;
Court Services;
Coroner Services;
Solicitors;
Lancashire Care Foundations Trust (LCFT);
Probation Services;
Housing Associations;
Advocacy Services;
Care Agencies and Domiciliary Providers;
Residential and Nursing Care Homes;
Private healthcare providers (eg. Virgin care)
Local Councillors and Members of Parliament;
Local Government Ombudsman;
Care Quality Commission;
Third Sector and Voluntary/Charitable Organisations;
Carers Services;
Prison Services;
Home Office;
Other Local Authorities.

The work done by the above partners and organisation will be in line with meeting a social care need, as identified through an assessment, where they are the most appropriate organisation to offer that support. The data shared to enable that support will be proportional to the support required.

Information we share

Lancashire Adult Social Care Service Acute collects and holds information about people who contact, access and receive an Adult Social Care Service. We only collect the information we need to administer and monitor the service. All data collected is stored on the Liquid Logic Adults System on secure, encrypted devices which can only be accessed via approved users.

Service users:

Date of birth/age.
Date of death.
Contact Numbers and details including e-mail addresses.
Address including Tenure and Accommodation Status.
Family Details, relationships and Next of Kin.
Ethnicity and Religion.
Immigration Status.
Employment/Education Status.
Marital Status.
Sexual Orientation.
General Practitioner Details (and other relevant health professionals involved with the delivery of care and support).
NHS number.
Medical Information.
National Insurance Number.
LAS number/identifier.
Risk assessments.
Personal/sensitive information gathered during the assessment process.
Category of need/risk.
Details of current and previous support services.
Safeguarding Referrals and associated information, including details of alleged perpetrators.
Informal Carer Support Details.
Information gathered during formal visits and meetings, including relevant e-mails, documents and minutes both created by Adult Social Care and/or submitted by an external partner.

Relevant family members/informal carers

Date of birth/age.
Date of death.
Contact Numbers and details including e-mail addresses.
Address including Tenure and Accommodation Status.
Family Details, relationships and Next of Kin.
Ethnicity and Religion.
Immigration Status.
Employment/Education Status.
Marital Status.
Sexual Orientation.
General Practitioner Details (and other relevant health professionals involved with the delivery of care and support).
NHS number.
Medical Information.
National Insurance Number.
LAS number/identifier.
Risk Assessments.
Personal/sensitive information gathered during the assessment process.
Category of need/risk.
Details of current and previous support services.
Safeguarding Referrals and associated information, including details of alleged perpetrators.
Information gathered during formal visits and meetings, including relevant e-mails, documents and minutes both created by Adult Social Care and/or submitted by an external partner.

Any transfers to another country

Retention periods

Lancashire County Council will only store your information for as long as is legally required or in situations where there is no legal retention period they will follow established best practice.

File type	Description	Security	Retention period
email	emails held in Outlook that haven't been exported or moved elsewhere.	encrypted used when emailing personal data to partners.	Retained in accordance with appropriate internal retention guidelines
Database of Service users and Carers (Liquid Logic for Adults – LAS)	Case Records Demographic details. Social Care Assessments and Reviews. Carer Assessments and Reviews. Risk Assessments Safeguarding Information. Occupational Therapy Assessments Support Plans and current/historical support services. Informal Support Details. Support from other relevant partners/organisations. Reablement Plans External Information held within Documentum, such as letters, reports, e-mails, word documents. Referral forms to other external partners. Financial Information.	Held on a secure server.	Active case file until no further services are required. Destroy 3 years after death or cessation of service (whichever is soonest) – or retention extended if further services accessed.

Your rights

You have certain rights under the UK General Data Protection Regulation (UK GDPR), these are the right:

to be informed via Privacy Notices such as this.
to withdraw your consent. If we are relying on your consent to process your data then you can remove this at any point.
of access to any personal information the council holds about yourself. To request a copy of this information you must make a subject access request in writing. You are entitled to receive a copy of your personal data within 1 calendar month of our receipt of your subject access request. If your request is complex then we can extend this period by a further two months, if we need to do this we will contact you. You can request a subject access request, either via a letter or via an email to Information Governance Team, address below.
of rectification, we must correct inaccurate or incomplete data within one month.
to erasure. You have the right to have your personal data erased and to prevent processing unless we have a legal obligation to process your personal information.
to restrict processing. You have the right to suppress processing. We can retain just enough information about you to ensure that the restriction is respected in future.
to data portability. We can provide you with your personal data in a structured, commonly used, machine readable form when asked.
to object. You can object to your personal data being used for profiling, direct marketing or research purposes.
in relation to automated decision making and profiling, to reduce the risk that a potentially damaging decision is taken without human intervention.

If you want to exercise any of these rights then you can do so by contacting:

Information Governance Team
Lancashire County Council
PO Box 78
County Hall
Preston
PR1 8XJ

Or email: dpo@lancashire.gov.uk

To ensure that we can deal with your request as efficiently as possible you will need to include your current name and address, proof of identity (a copy of your driving licence, passport or two different utility bills that display your name and address), as much detail as possible regarding your request so that we can identify any information we may hold about you, this may include your previous name and address, date of birth and what council service you were involved with.

Further information

If you would like more information about this specific service then please contact 0300 123 6720.

For more information about how we use personal information see Lancashire County Council's full privacy notice.

If you wish to raise a complaint on how we have handled your personal data, you can contact the Information Governance team who will investigate the matter.

Lancashire County Council, PO Box 78 County Hall, Fishergate, Preston, Lancashire, PR1 8XJ or email: dataprotection@lancashire.gov.uk

If you are not satisfied with our response or believe we are processing your personal data not in accordance with the law you can complain to the Information Commissioner’s Office (ICO).