Adult and Community Services (ACS) privacy notice

We may collect the following personal data from you when you work with us:

• Personal information - such as your name and where you live
• Care and support needs including health conditions - so you receive the care that’s right for you
• Financial information - information about money and payments if you pay for any of your care
• Immigration status - one of the factors that determines your eligibility for services.

We may collect the following information from other sources:

• Your health records – from your GP or hospital
• Referrals from law enforcement agencies
• Referrals from other government or charitable organisations.

Our reasons for using personal information include:

• delivery of services and support to you
• managing our services
• training workers
• investigating complaints about our services
• complying with laws that require us to provide personal information to other organisations, such as health organisations and courts.

Personal data

Under data protection law, Adult and Community Services can only process your personal data if it is lawful to do so. Please see the details below of the lawful bases that we rely on for processing different types of personal data.

For processing personal data, we rely on the following lawful basis:

• UK GDPR Article 6(1)(e) – where processing is necessary for us to perform a task which is in the public interest (public task)

Special category data

When we process special category data, we rely on the following additional lawful basis:

• UK GDPR Article 9(2)(b) – where processing is necessary for Adult and Community Services to carry out specific obligations or exercise rights relating to employment, social security, and social protection (Schedule 1, Part 1, section 1, DPA 2018)
• UK GDPR Article 9(2)(g) – where processing is necessary for reasons of substantial public interest, specifically:

• for statutory and government purposes (Schedule 1, Part 2, section 6, DPA 2018)
• for the safeguarding of children and of individuals at risk (Schedule 1, Part 2, section 18, DPA 2018)

• UK GDPR Article 9(2)(h) – where processing is necessary for the provision of health and/or social care purposes (Schedule 1, Part 1, section 2, DPA 2018)

Criminal offence data – general processing

Adult and Community Services also processes criminal offence data which may include:

• Information about any criminal record or criminal history
• Allegations of criminal behaviour, including unproven allegations
• Absences of convictions, for example the results of DBS checks, or Police National Computer checks
• Personal data of victims and/or witnesses
• Personal data about criminal penalties that may have been awarded.

In addition to the lawful bases that we have identified under “Personal data” above, we process criminal offence data under the following conditions of Schedule 1 of the DPA 2018:

• where processing is necessary to carry out specific obligations or exercise rights relating to employment, social security, and social protection (Schedule 1, Part 1, section 1, DPA 2018)
• where processing is necessary for the provision of health and/or social care purposes (Schedule 1, Part 1, section 2, DPA 2018)
• where processing is necessary for the safeguarding of children and of individuals at risk (Schedule 1, Part 2, section 18, DPA 2018).

Adult and Community Services may share information when required to provide you with the best possible services and care. We may share information with the following recipients:

• Providers of care and support services
• Health services
• District and borough councils
• Governing bodies for social work services
• Police
• Office of the Public Guardian
• Voluntary sector organisations
• Healthwatch Suffolk
• Court of Protection
• Courts and criminal justice service
• Suffolk Legal
• Disclosure and Barring Service
• Advocacy services
• Community Safety Partnerships
• Public Health
• Norfolk and Suffolk Foundation Trust
• Integrated Care Boards
• NHS Digital
• Care Quality Commission
• Organisation seeking to prevent the abuse, exploitation, or radicalisation of adults at risk (such as Channel, Prevent, Trafficking)

We do not transfer any personal data to any countries or international organisations outside of the EU or the EEA (European Economic Area), or any other country that does not have an equivalent level of data protection to the UK.

We keep personal data for as long as we need it to fulfil the purpose that it was collected for, and in line with any statutory or locally determined retention periods.

At the end of its retention period all personal data will be securely destroyed.

Adult and Community Services does not use automated decision-making processes or profiling in respect of your information.

Under data protection law, you have the right to request access to the information

that we hold about you. If you would like to make a request to access your personal information, please contact data.protection@suffolk.gov.uk

You also have other rights regarding your personal data. You can find out more information about these rights by looking at the council’s corporate privacy notice.

If you would like independent advice on this privacy notice or other matters about how Suffolk County Council processes your personal data, including how to make a complaint, you can contact the Information Commissioner's Office at:

Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113

Email: casework@ico.org.uk