Adults' services privacy notice

How we handle your personal information

Data protection

Adults’ services keeps information about the people it provides with services and advice. All personal data is processed in accordance with your rights under the Data Protection Act 1998. The act lays down eight principles of good information handling which state that personal information should be:

  1. processed fairly and lawfully
  2. obtained only for specified and lawful purposes
  3. adequate relevant and not excessive for the purpose
  4. accurate and up to date
  5. kept no longer than necessary
  6. processed in accordance with the rights of the data subject
  7. protected against unauthorised or unlawful processing, and against accidental loss or destruction
  8. not transferred outside of the European economic area unless adequate level of protection ensured

How is my information stored?

Adults' services uses an electronic case management system to store information about you. We may also have historical information on paper case files.

We have security measures in place to safeguard the confidentiality of your records and prevent any unlawful access to your personal data.

For example:

  • restricted access to council buildings means that only authorised staff members are able to gain entry to areas where records are kept
  • passwords on computer records mean that only case-workers with a need to know have access to your information
  • locked systems are in place for paper records
  • archived material is held in secure purpose built premises or held on secure electronic systems
  • we will make arrangements to confidentially dispose of customer information once a case is closed to us and has fallen outside of our retention period, after which it is no longer necessary to be kept by the department

Why are personal records kept?

The information we hold helps us to decide the best way to help people. We need to keep this information to help plan and provide the correct services for you. After you have finished receiving services from us, we may keep the information we hold about you if it seems likely that you might need our services again, or we are requested by law to do so. We will not keep your records for longer than is necessary.

What sort of information is kept?

When you ask for help or advice from us, we collect information about your personal and family circumstances. Other people, for example, members of your family, medical professionals or support agencies, might also give information. We keep notes of meetings and conversations with you and with other people. We hold electronic records of your assessments, care and support plans, reviews and any investigations that take place.

We will ensure that your personal data is treated as confidential where appropriate, is relevant, accurate and kept up-to-date.

Who can see the information held about me?

Only those staff involved in providing social care services – this may include social workers, care managers, occupational therapists, mental health workers, and some administrative staff.  All council staff are required to abide by a strict code of conduct on confidentiality and information sharing. We emphasise the importance of sharing information at an early stage to ensure to ensure our customers get the service they require.

We may also share some information with other staff who do not work for Ealing adults services but are involved in providing support to you. This may include, for example, your GP or care provider.

In circumstances where the disclosure of personal data is necessary, our staff understand when, why and how to share information.

This includes:

  • asking for your consent at the outset, and recognising when consent may not be required;
  • only sharing information with those who need to know in order to provide you with good quality care;
  • sharing the minimum information necessary to ensure good quality care;
  • sharing information for legal or contractual reasons or if in the public interest or to reduce risk of significant harm

Your rights to subject access

Under the Data Protection Act customers as “data subjects” are entitled to have, within 40 days, access to  information held by the council regarding their personal details. Under the Act the data subject is also entitled to:

  • a description of the data being processed
  • the purposes for which it is being processed
  • a description of the recipients
  • the source of the data
  • where any decision is taken based solely on an automated process.

These are called subject access requests and must be made in writing to the corporate data management team. There are some exemptions to disclosure of information to data subjects under the terms of the Act.
The Data Protection Act does not give third parties rights of access to personal information about individuals still living.

How to find out more

Find out more information about subject access requests.

For more information about data protection, or to make subject access request contact:

Data Management Team
Business Service Group
Perceval House 3.SE
14-16 Uxbridge Road
London
W5 2HL

Tel: (020) 8825 8282/5124

If you have any questions about your care or support please contact your care management team or the social services contact centre on (020) 8825 8000.