Direct Payments Privacy Notice
The following privacy notice applies to the London Borough of Islington’s Direct Payments for Children, Young People and Adults.
This privacy notice explains how the Council uses your data to process Direct Payments, including for ongoing case management, financial auditing of Direct Payment accounts, and assisting with managing employment responsibilities, including the requesting of Enhanced DBS and Barred list checks for Personal Assistants employed through a Direct Payment.
What information we collect, hold and use
The information we may collect about you could include, but is not limited to:
- Name
- Date of birth
- Address and post code
- Contact details (phone/mobile/email)
- NHS number
- NI number
- Other ID numbers
- Family details
- Lifestyle and social circumstances
- Case file information
- Financial information
We may ask you for special category data, where required and appropriate. This could include, but is not limited to:
- Racial or ethnic origin
- Physical and mental health details
- Religious beliefs
- Social care support outcomes
- Sexual orientation
We may also process data about criminal convictions, criminal offenses or relevant security measures.
We use your personal information to:
Ensure that we meet all of our legal and statutory duties including, but not limited to, those which apply under the following legislation and/or contractual agreements:
- Care Act 2014
- Care and Support (Direct Payments) Regulations 2014
- Data Protection Act 2018
We may also use your data:
- For service delivery
- For service planning, training and improvement
- For financial processing
-
To prevent and detect crime and fraud
For historical and statistical research
Call recording
Any personal information recorded during telephone conversations may be stored on the system for a fixed period, after which it is securely deleted.
What legal reasons allow us to use your data in this way?
The Council relies on the following lawful basis for processing your personal data under the GDPR:
- Contractual obligation
- Legal obligation
- Vital interest
- Performance of a public task
- Legitimate interest
We also rely on the following for processing special category data:
- Vital interests
- Legal claims or judicial acts
- Health or social care
If we process information about criminal convictions, criminal offences and related security measures, we rely upon the following lawful basis:
- Legal obligation
- Vital interest
- Performance of a public task
In addition, we also rely upon the “Health or Social Care purposes” and “Preventing fraud” conditions under Schedule 1 of the Data Protection Act 2018.
Agencies we might share the information with include:
- NHS agencies (GPs, Hospitals)
- Health organisations
- Welfare organisations
- Voluntary and charitable organisations
- Care Providers
- Residential care/nursing providers
- Government organisations
- The Police
- Prisons and probation services
- Courts
- Other customers and service users
- Family Members
- Carers and Guardians
- Financial organisations
- Regulators
- Pension regulators and authorities
- The disclosure and barring service
- Legal representatives
- Direct Payment support service providers
- Nominated/Authorised persons
Retention
Unless specified in the legislation cited above, we will keep the information you provide in line with the council’s Retention Schedule.
Complaints
Please see the council’s main privacy notice for details about your rights and who to contact about the use of your personal data.
If you are dissatisfied with the service you have been provided and have exhausted the council’s corporate complaints process, you can refer any complaints to the Local Government Ombudsman. Details of how to complain.