Read our privacy notice for information on how we collect, store and process your data.
This privacy notice is to explain and provide you with information on how we collect and hold data about you. This is in relation to information used to evaluate the nature and causes of disease and ill-health in the area, to plan health, social care and public health services, and to protect and improve public health.
You can view the general Brighton & Hove City Council Privacy Notice which has more about how we collect, use and protect personal data generally, as well as your rights as a data subject.
Brighton and Hove City Council is the data controller for purposes of the Data Protection Act (2018) and The UK General Data Protection Regulation (GDPR) and is registered as a data controller with the Information Commissioner’s Office (ICO) under Z5840053.
Brighton & Hove City Council is committed to protecting your personal information. As a data controller we have a responsibility to make sure you know why and how your personal information is being collected. This is in accordance with relevant data protection law.
All local authorities have a duty to improve the health of the population they serve. To help us do this we use data and information from a range of sources including the Office for National Statistics, NHS England, local hospitals and the Sussex Integrated Care Boards. We use this information to evaluate the nature and causes of disease and ill-health in the area, to plan health, social care and public health services, and to protect and improve public health. We are bound by a number of information sharing agreements which are drawn up to ensure that information is only received, processed and shared in a lawful way.
Personal information about births in Brighton & Hove is supplied to local authorities by NHS Digital and this contains data provided at the time of registration of birth along with additional geographic information. This includes the date of birth and NHS number of the child, place and postcode of birth, and address and postcode of usual residence of mother.
Personal information about deaths in Brighton & Hove is supplied to local authorities by NHS Digital and this contains mortality data provided at the time of registration of death along with additional GP details, geographic information and coroner details where applicable. This includes date of birth, date of death, cause of death, place and postcode of death, usual address and postcode of the deceased, their NHS number and maiden name, name of certifier, and name of coroner (where relevant).
NHS provide access to the secure Data Access Environment (DAE) for local authority public health team approved users to access NHS data to perform analysis. This gives public health teams direct access to de-identified HES records for the latest ten-year period for trend analysis for:
Local authority public health teams require HES data to evaluate the performance of local health services and to inform the commissioning of new services. The data may only be used to support their statutory public health duties, and the public health team will be responsible for ensuring that confidentiality is protected and that conditions on the use of the data are adhered to.
Your data may be shared where we have identified a need to provide support, internally or externally, with local health organisations such as:
Brighton & Hove City Council has a Data Access Agreement with NHS England, and data are supplied under Section 42(4) of the SRSA (2007) as amended by section 287 of the Health and Social Care Act (2012) and Regulation 3 of the Health Service (Control of Patient Information) Regulations 2002.
The UK General Data Protection Regulation requires specific conditions to be met to ensure that the processing of personal data is lawful.
The information is provided to Brighton & Hove City Council by NHS England under Health and Social Care Act 2012 - s261(5)(d) – NHS England may also disclose information which it obtains by complying with a direction under section 254 or a request under section 255 (whether or not it falls within subsection (2)) if the disclosure is made to any person in circumstances where it is necessary or expedient for the person to have the information for the purpose of exercising functions of that person conferred under or by virtue of any provision of this or any other Act
The conditions that are relevant for processing by Brighton & Hove City Council are Article 6(1) (e) GDPR - processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
The processing of special categories of personal data, which includes data concerning a person’s health, are prohibited unless specific further conditions can be met, as follows:
We have a legal agreement to hold births data from 1995 to present and deaths data from 1996 to present. This allows us to identify trends relating to the health of the local population.
The local authority HES Data Access gives public health teams direct access to de-identified HES records for the last ten years.
You have rights around the information we hold on you. You can check your rights in relation to your personal information.
If you have a concern about how we collect or use your personal data you can contact the Council’s Data Protection Officer.
We aim to resolve all complaints about how we handle personal information. You also have the right to make a complaint about data protection to the Information Commissioner's Office.
Contact them by post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF or phone 0303 1231 113.
You can also make a complaint or find out more information on the Commissioner's Office website