Adult and Community Services (ACS) privacy notice

This privacy notice tells you what information Adult and Community Services (ACS) collects and uses, and your rights regarding your information.

Adult and Community Services (ACS) provide services to you. We will regularly work with partner agencies, providers and other organisations to enable us to deliver our services and as such will share your data with these organisations to deliver the best outcomes with you.

The categories of the information that we collect, process, hold and share include:

  • personal information (such as name and address)
  • care and support needs including health condition/s
  • financial information

Why we collect and use this information

We collect and use this data to:

  • enable us to assess care and support needs you or your family member may have 
  • enable us to establish your financial situation so we can ensure that you are made aware of any financial contributions that you may be required to pay towards the cost of care
  • enable us to put in place the care and support you need
  • inform the planning and provision of services for Suffolk residents
  • monitor our performance
  • ensure people are kept safe from harm
  • enable us to signpost you to external agencies who you may be able to access support from

The lawful basis on which we use this information

Our lawful basis for holding and processing your information is usually because the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the council. Where this lawful basis does not apply we ask for consent to process your information.

Collecting this information

Whilst the majority of information you provide to us is because of a statutory requirement, some of it is provided to us on a voluntary basis.

Storing this information

Your information will be held securely by ACS and will be held in accordance to the Local Government Service Lists (LGSL) which determines the length of time for which your personal data will be stored and then destroyed.

In ACS it is usual to keep records for 6 years after the case is closed, and for 20 years for adults who have received mental health services.

Who we share this information with

We routinely share information with:

  • Providers of care and support
    • Home care
    • Residential
    • Nursing
    • Learning Disabilities
    • Day services
    • Supported housing
  • Health services
    • GP’s
    • Community health providers
    • Hospitals
    • Norfolk and Suffolk Foundation Trust
    • NHS Digital
    • NHS England
    • Clinical Commissioning Groups
    • East of England Ambulance
  • District and Borough Councils
  • Governing bodies
    • Local Medical Council
    • Care Quality Commission
    • Health and Care Professions Council
    • General Medical Council
    • Local Government Ombudsman
  • Office of the Public Guardian
  • Voluntary sector
  • Healthwatch
  • Court of Protection
  • Courts and criminal justice
    • Probation
    • Prisons
    • Police
    • Coroners
  • Suffolk Legal
  • Disclosure and Barring Service
  • Advocacy
  • Community Safety Partnerships
  • Elected Members
  • Public Health

Why we share this information

We share the data we have collected in line with our duties to comply with:

  • The General Data Protection Regulation
  • Data Protection Act 2018
  • Care Act 2014
  • Mental Capacity Act 2005
  • Mental Health Acts 1983 and 2007

We do not share information about individuals without consent unless the law and our policies allow us to do so.

Data collection requirements

You can find out more about the data collection requirements placed on us by the Department for Health.

The Department may share information about your care and support and any related processes for:

  • conducting research or analysis
  • producing statistics
  • providing information, advice or guidance

The Department has robust processes in place to ensure the confidentiality of our data is maintained and there are stringent controls in place regarding access and use of the data. Decisions on whether ACS releases data to third parties are subject to a strict approval process and based on a detailed assessment of:

  • who is requesting the data
  • the purpose for which it is required
  • the level and sensitivity of data requested: and
  • the arrangements in place to store and handle the data

To be granted access to your information, organisations must comply with strict terms and conditions covering the confidentiality and handling of the data, security arrangements and retention and use of the data.

Your rights

You have several rights regarding your personal data. Find more information about your rights on our privacy and data protection page. 

If you have a concern about the way we are collecting or using your personal data, we request that you raise your concern with us in the first instance by contacting Alternatively, you can contact the Information Commissioner’s Office.

Further information

You can read SCC’s corporate privacy notice.