Public Health privacy notice
All local authorities have a duty to improve the health of the population they serve. To help with this, our Public Health team use data and information from a range of sources.
This includes information collected at the registration of a birth or a death and client or customer use of provider services as commissioned by Bracknell Forest Council. Although not direct care, this helps us to understand more about the health and care needs of the population/s in our area.
We can use the data to measure the health, mortality, morbidity and care requirements of our population, allowing us to plan and deliver health and care services in a coordinated and efficient way.
We act as a ‘data processor’. This means that we collect and process information. We also follow the high information governance standards and instructions as set by the ‘data controller’. Our data controller is NHS Digital and it is their responsibility to ensure we are keeping the data safe and monitoring what we use it for.
The council’s main privacy notice can be viewed online.
Types of information we use
We work with many types of data to be able to promote health and support improvements in the delivery of health and care services in Bracknell Forest.
This includes processing:
- identifiable data – containing personal data that can identify individuals, such as name, date of birth, gender, address, postcode and NHS number
- pseudonymised data – this contains information about individuals but with the identifiable details replaced with a unique code
- anonymised data – this information about individuals has had all identifying details removed
- aggregated data – this is when all anonymised information has been grouped together so that it doesn’t identify individuals
How is my information used?
We hold the following data collections that contain various types of data about individuals and populations:
Hospital Episode Statistics (HES)
We hold pseudonymised records about health care and treatment you may have received in any English hospital in the form of HES. This includes inpatient and day case admissions, outpatient appointments and Accident and Emergency attendances. This data is supplied by NHS Digital (previously the Health and Social Care Information Centre) to us under license. We do not hold identifiable HES data.
Primary Care Mortality Database (PCMD)
The PCMD provides us with access to identifiable mortality data as provided at the time of the registration of the death, along with additional General Practice details, geographical indexing and coroner details where applicable. This includes:
- postcode of residence of the deceased
- postcode of the place of death
- NHS number
- date of birth
- date of death
- name of certifier
- cause of death
Our access to the data is based on our geographical boundaries. We are only able to securely access the database by use of the NHS Open Exeter system via an N3 internet connection.
Births data tables
This dataset provides us with access to identifiable data about the number of births that occur within our geographical boundaries. It includes the address of usual residence of mother, place of birth, postcode of usual residence of the mother, postcode of place of birth of child, NHS number of child and the date of birth of the child. This data is only supplied to us by NHS Digital under strict license and data disclosure controls.
Vital statistics tables
This dataset is aggregated together so that it does not identify individuals. It contains data on live and still births, fertility rates, maternity statistics, death registrations and cause of death analysis by our geographical boundaries. This data is only supplied to us by NHS Digital under strict license and data disclosure controls.
What is the legal basis for the flow of Public Health data?
We have different legal responsibilities for different types of information we hold and analyse in the Public Health Information team. The below law applies:
- Section 42(4) of the SRSA (2007) as amended by section 287 of the Health and Social Care Act (2012)
- Regulation 3 of the Health Service (Control of Patient Information) Regulations 2002
How is my data kept safe and secure?
All the data we process and hold is kept safely and securely within our IT systems. We do not disclose any data to a third party who is not identified on our license agreement with NHS Digital.
Any data requests received from a third party will only receive anonymised and aggregated data to a level that complies with the Office of National Statistics Disclosure Guidance or, if we are required to do so for legal reasons.
Linking data with other data sources
Linked data is the term used to describe a method of connecting data from different sources. Bracknell Forest Council Public Health will only link your data by aggregating it upwards to larger geographical boundaries, such as Ward Level.
This is to allow the data to be used for planning and commissioning purposes. Data is never linked at a record or personal level.
Can I opt out of Public Health datasets?
You have the right to opt out of Bracknell Forest Council Public Health receiving and processing your personal identifiable information. There are occasions where service providers will have a legal duty to share information, for example for safeguarding or criminal issues.
The process for opting out will depend on what the specific data is and what programme it relates to. You can choose not to have information about you shared or used for any purpose beyond providing your own treatment or care. Simply contact your GP for further information about registering an opt-out or to end an opt-out you have already registered.
The NHS Choices website explains how your personal information is held, accessed and shared with organisations, such as Bracknell Forest Council.