How we use your information
The fair processing notice explains how NHS Essex uses, stores and protects your personal information. This helps you understand how your information supports healthcare, service planning and improvements, while making sure we keep your personal information safe and used it appropriately.
If you need this information in another language, in large print, in an easy read format or in another format, please contact us.
Who we are
NHS Essex is responsible for planning and paying for many NHS services across Essex. We also work with NHS organisations, local councils and other partners to improve health and care services for local people.
Our main responsibilities include:
- understanding the health needs of people in Essex
- planning and improving local health services
- working with partners to provide joined-up care
- helping reduce health inequalities
- supporting the use of digital technology and data to improve services
- using NHS resources effectively
How we use your information
Sometimes we need to use information about you to help provide, plan and improve NHS services and carry out our responsibilities. For example, we may use your information to:
- help investigate complaints
- arrange specialist treatments
- plan and improve services
- understand the health needs of local communities
- support healthcare research
- train healthcare professionals
- monitor the quality of NHS services
- pay healthcare providers for the care they deliver
Where possible, we use information that does not directly identify you. This means we can plan and improve services while helping to protect your privacy.
If we need to use information that identifies you, we will only do so when we have a legal reason or your permission.
This policy helps us make sure we handle information fairly, safely and transparently.
Who the policy applies to
This policy applies to:
- people who use NHS services in Essex
- patients registered with GP practices
- people who contact NHS Essex about services or complaints
- NHS Essex staff and organisations that process information on behalf of NHS Essex
How we protect your information
We are committed to keeping your information safe and secure. To do this, information is only collected, used and shared when the law allows us to do so. In addition, we follow data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (opens in a new tab).
Everyone who works for the NHS has a legal duty to keep information about you confidential.
We protect your information by:
- storing it securely
- limiting access to authorised staff
- providing regular staff training
- monitoring how we useinformation
- investigating and learning from any information security incidents
We only keep information for as long as we need it. After that, we securely destroy it when it is no longer required.
Population Health Management
Population Health Management helps NHS Essex understand the health needs of local communities. This information is used to:
- Identify health trends
- Improve support for people at risk of poor health
- Design services around local needs
- Reduce health inequalities
- Help people stay well for longer
Most information used for this work does not directly identify individuals.
Supporting early intervention
NHS Essex works with GP practices to identify people who may benefit from extra support or preventive care.
This can help:
- Manage long-term conditions
- Reduce avoidable hospital admissions
- Identify people who may be at higher risk of illness
- Offer support earlier
Sharing information
NHS Essex may share information with other NHS organisations and partner services when this is necessary to:
- Provide healthcare
- Plan and improve services
- Support population health work
- Meet legal requirements
When information is shared, strict safeguards are used to protect confidentiality.
Your rights
You have rights over your personal information. These include the right to:
- Know how your information is used
- Ask for access to information held about you
- Request correction of inaccurate information
- Raise concerns about how information is processed
- Make choices about some uses of your information for research and planning
You may also be able to choose whether we use some information beyond your direct care.
Data protection and confidentiality
NHS Essex is a Data Controller. This means we are responsible for deciding how personal information is used and protected.
Our registration number with the Information Commissioner’s Office (opens in a new tab) (ICO) is ZC096045.
A senior member of staff, called a Caldicott Guardian (opens in a new tab), helps make sure we use confidential information appropriately.
To support this, we also have a Data Protection Officer who advises us on data protection and privacy matters.
For more information, read the full Fair Processing Notice by downloading the accessible Word document below.