Health and social care

Adult Social Care Privacy Notice

We keep the Adult Social Care Privacy Notice under review. It was last reviewed and updated in March 2021.

If you have any questions about this Privacy Notice contact the council’s Data Protection Officer.

View the privacy information for all of the City of York Council (CYC).

Personal data

The information we collect about you will include, but is not limited to:

  • name
  • date of birth
  • NHS number
  • address
  • gender
  • next of kin
  • contact details, such as telephone and email
  • physical or mental health condition

We may ask you further details where required and appropriate such as:

  • ethnicity
  • religious or other similar beliefs
  • National Insurance number (NINO)
  • language
  • accommodation status
  • nationality
  • sexual orientation
  • marital status
  • financial information

We will:

  • only ask you for the information that is necessary
  • protect it and make sure nobody has access to it who shouldn’t
  • ensure you know if you have a choice about giving us information
  • make sure we don’t keep it for longer than is necessary

We ask that you:

  • give us accurate information
  • tell us as soon as possible of any changes
  • tell us as soon as possible if you notice mistakes in the information we hold about you

See further details about how we define personal data and non-personal data.

Using personal data

We'll use your information to deliver social care services for adults in compliance with the legal duties of the City of York Council. This includes, but is not limited to:

  • assessment of need
  • provision of services
  • Adults Safeguarding and Deprivation of Liberty Safeguarding processes
  • assessing financial eligibility for services
  • delivery of a range of preventative services (including Occupational Therapy), information and signposting

We may use the information to create reports and statistics that are anonymous and cannot be linked back to your provision or to individuals, such as:  

  • informing market development
  • statistical analysis
  • statutory returns
  • knowing we're delivering care to the right people
  • ensuring service quality

Our legal basis for using personal data

We use your personal information to ensure that we meet all of our legal and statutory duties including, but not limited to, those which apply under the following legislation and/or contractual agreements:

We will always ask for your explicit consent if we need your information to be used outside the legislation or contractual agreements listed above.

Sharing personal data

We will share your personal information with other council services as appropriate, and with other organisations, agencies, partners such as:

This includes organisations or providers that we commission to provide support, such as home care agencies or residential homes. This is because they are delivering support on our behalf.

It is very important that Adult Social Care is able to plan and realign its delivery of services to meet the needs of adults with care and support needs within the City of York. To do this, we carefully use the information we collect about how services are delivered and who is using these services. This also includes the statutory functions of Public Health which is now part of the council’s responsibility.

We have an agreement in place with Attend Anywhere to provide secure online conversations. See the Attend Anywhere privacy statement.

Sharing data with Upstream Health

If, as part of your assessment, you've been offered the Upstream Health Bridgit Watch and/or Home Hub, some data will be shared with Upstream Health.

View the Upstream Health Privacy Notice to see how they will handle the data they collect.

Sharing data under Data Protection legislation

We may be required or permitted, under data protection legislation, to disclose your personal data without your explicit consent, for example if we have a legal obligation to do so, such as for:

  • law enforcement
  • fraud investigations
  • regulation and licensing
  • criminal prosecutions
  • court proceedings

Retaining personal data

We will only keep your personal information for as long as is necessary and then we will delete or destroy it securely.

At the end of the retention period, we may pass any relevant information to the City Archives where it is required or appropriate to do so.

Transferring personal data abroad

As a rule, we do not transfer your personal data to third party processors outside the European Economic Area (EEA).

However, for as long as the provisions of the Local Authorities and Police and Crime Panels (Coronavirus) (Flexibility of Local Authority and Police and Crime Panel Meetings) (England and Wales) Regulations 2020/392 remain in effect, we'll be hosting public virtual meetings and we are currently using Zoom Pro or Business version of Zoom to host meetings (version 5) for that purpose.

Where meetings are recorded, recordings will be kept locally on our server and will not be retained by Zoom.

Some personal data will be stored securely on Zoom’s system in the USA (that is, outside the EEA) in compliance with the EU, USA Privacy Shield Framework. This data may include a user's:

  • name
  • email address
  • telephone number where applicable
  • IP address
  • MAC address
  • other device ID (UDID)
  • device type
  • operating system type and version
  • client version
  • type of camera, microphone or speakers
  • connection type

Zoom does not sell personal data to third parties; collects only the personal data required to provide Zoom services; and retains that data only for so long as is necessary for the provision of those services.

View Zoom’s certification.

View Zoom’s privacy policy.

Further processing of personal data

If we wish to use your personal data for a new purpose, not covered by this Privacy Notice, then we'll provide you with a new notice.

The new notice will:

  • explain this new use before we start the processing
  • set out the relevant purposes and processing conditions

Where and whenever necessary, we'll seek your consent to the new processing, if we start to use your personal data for a purpose not mentioned in this Privacy Notice.

Caldicott Guardians

See details of our Caldicott Guardians, responsible for protecting the confidentiality of people’s health and care information, and making sure such data is used properly.

Use of your NHS Number in Adult Social Care

See further details about how we use your NHS number in connection with Adult Social Care services.

Your rights relating to personal data

When we collect your personal data we'll tell you how we are going to use it. Where we process your personal data, you have a number of rights under data protection law.

See further details of your rights relating to personal data.

Also see

Data Protection Officer

West Offices, Station Rise, York, YO1 6GA

Telephone: 01904 554145

Comment on this page