Bradford Health Determinants Research Collaboration: Data Privacy Notice

Purpose

This notice explains why we collect personal data, what we use data for, how we protect this data and your rights to privacy.

The Health Determinants Research Collaboration

The Health Determinants Research Collaboration (HDRC) is a team based in the City of Bradford Metropolitan Council (CBMDC). Its aim is to improve the health and wellbeing of all people in our district and reduce health inequalities. It does this by working with services across the local authority and with partners across the district to develop evidence-based policy and practice. This work includes conducting research, data analysis, supporting policy development and providing training and professional development for staff. It also includes working with communities to develop a better understanding of community needs and priorities.

What information do we collect

We work with information already collected by the Council from across all its services, and with information collected by our partners in areas such as health and education. We also conduct research with our university partners. This means we may use or collect some or all the following information:

• Name, age, date of birth, ethnicity, postcode.
• Correspondence details (address, telephone number, email addresses) and correspondence.
• NHS number, medical conditions and a range of health data.
• Service user information (can be from a range of services).
• Data gathered from ongoing research projects such as Born in Bradford, Act Early or work with our partners such as Universities, the voluntary and community sector and other public sector organisations.
• New research data – for example through surveys, interviews, focus groups – which may gather personal information (with the consent of participants) across areas such as health, education, housing, work, leisure and lifestyle, transport, community, income and expenditure.

Why do we use this information?

We use this information to ensure that local government and wider public services, voluntary and community services:

• Meet local health needs.
• Work toward reducing health inequalities.
• Understand what works best for different groups of people in different communities.
• Develop the evidence base for better policy making and service provision.
• Help services and practitioners develop services to better meet needs.

What authority does Bradford Council have to collect and use this information?

The Council has legal obligations and statutory responsibilities for providing services and promoting the health and wellbeing of the district’s people. Data Protection Act law provides the basis for the Council to collect and process personal data to meet its public tasks and statutory duties and to pursue its legitimate interests.

Who are we likely to share this information with?

We may sometimes share the information we have collected about you where it is necessary, lawful and fair to do so. In each case we will only share the minimum amount of information and only when required. Where we need to share sensitive or confidential information such as children’s data, financial data or health information with third parties, we will do so only with your prior explicit consent, or where we are required by law to do so, or where otherwise permitted by the Data Protection Act, for example, where the disclosure is necessary to enable the council to exercise its statutory functions. See the main Bradford Council privacy notice for more details.

How do we keep this information secure?

Your information is stored securely on databases and document management systems with stringent access and use policies. We use processes such as anonymisation and pseudonymisation of data to protect privacy. We also undertake quality checks and monitoring to ensure the information we hold is accurate at the time and being used appropriately.

The Data Protection policy and procedures of the Council have a range of data protection measures built into them and these are followed by the HDRC and you can find out more on the Bradford Appropriate Data Policy page.

When new data is collected from research the HDRC conducts or commissions, strict ethical principles govern the collection and use of this data to protect rights to privacy. These principles and the data protection policy of the Council apply to any partners we may work with, or organisations commissioned to conduct research.

Primary research data will only be gathered from people who consent to participate in research. They will always have the right to withdraw this consent and the right to have access to their personal data.

When computers make any decisions about you

Not applicable

When your data gets sent to other countries

Not applicable

How long do we keep this information?

We have a HDRC retention schedule which details how long we keep different types of records and how they will be destroyed when we no longer require them.

What are your rights?

Please contact the Corporate Information Governance Team at dpo@bradford.gov.uk to exercise any of your rights, or if you have a complaint about why your information has been collected, how it has been used or how long we have kept it for.

You can contact our Data Protection Officer at dpo@bradford.gov.uk or write to: Data Protection Officer, City Hall, Centenary Square, Bradford, BD1 1HY.

The UK GDPR also gives you the right to lodge a complaint with the Information Commissioner's Office who are the supervisory authority responsible to regulate and monitor the legislative obligations within the UK and can be contacted on 03031 231113.