Cookie Settings
This site uses cookies to store information on your computer, to improve your experience.  If you continue to use this site we will assume that you are happy with this. Learn more about cookies
.

Privacy notice for public health services

What do we use the information for?

The council has the responsibility for delivering a range of public health services. There are many services we can provide without using personal data and we do this as much as we can, however, there are some services which require us to use information about individuals in order to deliver the service. 

A summary of our public health functions are outlined below:

  • Statistical analysis

  • Control of infection

  • Managements of risks to public health

  • To inform planning and commissioning (buying) of health services

  • The National Child Measurement Programme

  • The NHS Health Check Programme

  • Organising and supporting the 0-19 health service and school nursing services; and

  • Public health surveillance.      

To achieve these functions we:

  • produce assessments of the health and care needs of the population, in particular to support the statutory responsibilities of the: 

  • identify priorities for action

  • inform decisions on the design and commissioning of services

  • assess the performance of the local health and care system and to evaluate and develop them

  • Births information is used to identify patterns and trends in birth and fertility rates, low birth weight, and stillbirths

  • use mortality information to identify patterns and trends in mortality rates, life expectancy and premature death. Differences by geographic areas, and by other characteristics, including age, sex and deprivation, are highlighted

  • use the information to monitor seasonal patterns, and for population projections

  • report summary statistics to national organisations

  • undertake equity analysis of trends, particular for vulnerable groups; and

  • support clinical audits. 

We publish a range of outputs in relation to public health, on the East Riding Intelligence Hub website:

East Riding Intelligence Hub (external council website)

However, we will never publish public health information that identifies a group of fewer than five individuals, in order to protect the identities of individuals.

What information do we hold and use?

We collect and hold information for public health purposes about:

  • residents of East Riding of Yorkshire

  • people receiving health and care services in East Riding of Yorkshire; and

  • people who work or attend school in East Riding of Yorkshire.

We have a public health duty of care to all these people.

On what grounds do we use the Information? 

Local authority public health responsibilities are set out in the Health and Social Care Act 2012:

Local authorities’ public health responsibilities (England) - Parliament.uk (external website)

Legal basis for processing are outlined below:

Article 6 (1) (e) GDPR: Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. Official authority is vested in the controller by virtue of: Section 42(4) of the Statistics and Registration Service Act (2007) as amended by Section 287 of the Health and Social Care Act (2012); and Regulation 3 of the Health Service (Control of Patient Information) Regulations (2002)

Legal basis for processing special categories of personal data

Article 9 (2) (i) GDPR: Processing is necessary for reasons of public interest in the area of public health, such as protecting against serious cross-border threats to health or ensuring high standards of quality and safety of health care and of medicinal products or medical devices.

How do we collect information?

This information is provided to the council either direct from the public or by national organisations like NHS Digital, the Office for National Statistics or NHS organisations such as hospitals, GP practices, clinical commissioning groups and local authorities.

Birth records

Personal information about births is supplied to local authorities by:

NHS Digital (external website)

This contains data provided at the time of registration of birth, along with additional geographic information. This includes the date of birth and NHS number of the child, place and postcode of birth, and address and postcode of usual residence of the mother.

Mortality records

Personal information about deaths is supplied to local authorities by NHS Digital (external website).

This contains mortality data provided at the time of registration of death along with additional GP details, geographic information and coroner details where applicable. This includes the date of birth, date of death, cause of death, place and postcode of death, usual address and postcode of the deceased, their NHS number and maiden name, name of the certifier, and name of coroner (where relevant).

For both birth and mortality records, we have a data access agreement with NHS Digital and data are supplied under Section 42(4) of the SRSA (2007) as amended by section 287 of the Health and Social Care Act (2012) and Regulation 3 of the Health Service (Control of Patient Information) Regulations 2002.

Hospital episode statistics (HES) data

Information about hospital activity is supplied to local authorities by NHS Digital. This contains data collected when someone is admitted to a hospital bed, attends as an inpatient, outpatient, or attends an urgent care centre. We have a data access agreement with NHS Digital and data are supplied in accordance with section 261 of the Health and Social Care Act 2012, and Regulation 3 of the Health Service (Control of Patient Information) Regulations 2002. 

Data supplied are pseudonymised, a process by which information within a data record that may identify an individual is replaced by artificial identifiers or pseudonyms which means that individuals are no longer identifiable. Information held includes age, method of admission, source of admission, diagnosis codes, procedure and investigation codes, area of residence, hospital attended, date of attendance, and GP practice of patient.

More information on this NHS Digital dataset can be found here:

Hospital Episode Statistics - NHS Digital (external website)

Who do we share your informationwith?

Data is provided to the public health service either direct by the public or by national and local NHS and local authority data services and organisations and shared with public health in accordance with the Data Protection principles. Confidential public health data will only be shared with other local NHS partners like clinical commissioning groups, local authorities or care organisations, once the necessary legal basis has been established and data protection safeguards have been verified, so that the data is managed and used under the same restrictions. Anyone who receives information from East Riding of Yorkshire Council public health is also under a legal duty to keep it confidential.

Information is held by the public health team at the council and is not shared with any other departments. We will not be disclose any public health information to anyone without appropriate permission, unless we have a legal reason to do so. For example, disclosure may be necessary to protect a person from suffering significant harm or to prevent or detect crime. Such requests are allowed only from a senior police officer and above ranks.

How long do we store it and is it secure?

The council has retention schedules in place to ensure that information is only held for as long as it is needed. For information on how long your information will be held visit the retention explained page. 

All data is stored securely in East Riding of Yorkshire Council systems and is managed using the principles of medical confidentiality and data protection. The staff handling such data only work in the Public Health Team, all who undertake regular training about data protection and managing personal information.

What rights do I have?

You have the right to opt-out of East Riding of Yorkshire Council public health receiving or holding your personally identifiable information. There are occasions where service providers will have a legal duty to share personal data, for example for safeguarding or criminal issues.

The process for opting out will depend on what the specific data is and what programme it relates to.

For further information, you can contact public health intelligence at:

Email: phintelligence@eastriding.gov.uk

Where can I find out more?

If you want to know more about how the Council uses information, your rights or how to complain visit the general privacy information page.