You can read Suffolk County Council's statement on our website.
![Councillor Peter Gould](/image-library/peter-gould-ws-hr-1.xb6cb8b20.jpg?width=470&height=256&fit=crop&quality=75&format=webp)
You can read Suffolk County Council's statement on our website.
Health Protection, Public Health and Communities Directorate (Health Protection) is responsible for providing outbreak management support and advice, liaison with internal and external stakeholders, and providing a telephone contact services for individuals regarding their covid vaccination. On occasions we may need to collect and use personal data to fulfil these duties.
The processing of personal data is governed by the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018), collectively referred to as data protection law
Suffolk County Council is the controller for the personal information that is being processed. If you have any queries about how Health Protection is collecting or using your personal data, you can contact the service on: healthprotection@suffolk.gov.uk or ehpt@suffolk.gov.uk
Contact details for the council’s Data Protection Officer and Compliance Manager can be found in the council’s corporate privacy notice, which is available on the council’s website.
The delivery of Suffolk County Council’s Health Protection work involves the co-ordination of resources which includes information sharing between national, regional, and local organisations and agencies to deliver and support all aspects of outbreak management.
We collect the following personal data from you when the contact centre call you via telephone:
We collect data on COVID-19 cases, tests and variants from the UK Health Security Agency, East Suffolk and North Essex NHS Foundation Trust and NHS Digital which may include the following information:
During the period the National Test and Trace programme was in operation, we collected data to support the Suffolk Contact & Trace Service. This service was stood down in February 2022. The data has been archived and is being retained in line with records management policies but is no longer actively used.
In addition to the personal data types detailed above we also collected and managed the following information as part of the Suffolk Contact & Trace Service:
The above data is used to support:
Although contact tracing through the Council’s Contact and Trace Service is no longer conducted, local records have been archived and are being retained in line with records management policies.
The above data is used to support:
Under the national data opt-out everyone who uses publicly funded health and/or care services can stop health and care organisations from sharing their “confidential patient information” with other organisations if it is not about managing or delivering their own care. For example, if this information is used for research or planning purposes.
At this time, the council does not share any data for planning or research purposes for which the national data opt-out would apply. We review all of the confidential patient information we process on an annual basis to see if this is used for research and planning purposes. If it is, then individuals can decide to stop their information being shared for this purpose.
You can find out more at Your NHS data matters.
Under data protection law, Health Protection can only process your personal data if it is lawful to do so. Please see the details below of the lawful bases that we rely on for processing different types of personal data.
For processing personal data, we rely on the following lawful basis:
When we process special category data, we rely on the following additional lawful basis:
The Health Protection Team, Suffolk County Council may share your information. with certain partner organisations, such as UKHSA, other Local Authorities, other stakeholders including Care Settings, Health Settings, Educational Settings
We also collect and may share data with partner organisations and other stakeholders including local authorities, care homes, workplaces and health settings.
We do not transfer any personal data to any countries or international organisations outside of the EU, the EEA (European Economic Area), or any other country that does not have an equivalent level of data protection to the UK.
We keep personal data for as long as we need it to fulfil the purpose that it was collected for, and in line with any statutory or locally determined retention periods. The retention of your information for this purpose is reviewed every six months.
Records pertaining to the outbreak of notifiable disease will be retained for a period of six years, although may be archived before this time, awaiting secure deletion.
The Health Protection Team, Suffolk County Council does not use automated decision-making processes or profiling in respect of your information.
Under data protection law, you have the right to request access to the information that we hold about you. If you would like to make a request to access your personal information, please contact data.protection@suffolk.gov.uk.
You also have other rights regarding your personal data. You can find out more information about these rights by looking at the council’s corporate privacy notice.
If you would like independent advice on this privacy notice or other matters about how Suffolk County Council processes your personal data, including how to make a complaint, you can contact the Information Commissioner's Office at:
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
Email: casework@ico.org.uk