Alert close - icon Fill 1 Copy 10 Untitled-1 tt copy 3 Untitled-1 Untitled-1 tt copy 3 Fill 1 Copy 10 menu Group 3 Group 3 Copy 3 Group 3 Copy Page 1 Group 2 Group 2 Skip to content

Public health privacy notice

Privacy notice for public health.


We're committed to protecting your personal data and ensuring that it is processed fairly and lawfully. Information you provide to us will be processed in accordance with the General Data Protection Regulation, the Data Protection Act 2018 and subsequent legislation.

We're supporting also action to manage and mitigate the spread and impact of the current outbreak of COVID-19 which includes the processing of personal data for COVID-19 purposes as per the notice issued by the Secretary of State.

Purpose of processing

Public health has a legal duty to protect and improve the health and wellbeing of people in Derbyshire. The processing is necessary for the performance of this task carried out in the public interest and for compliance with a legal obligation as set out in the Health and Social Care Act 2012. To support this, we use health and social care data from a range of sources. We use this data to:

  • provide services to meet your needs
  • provide you with signposting, relevant advice and information and onward referral
  • monitor, plan, and evaluate our services
  • measure the health, mortality and care needs of specific geographical areas and population groups
  • understand more about the nature, causes and outcomes of disease

Information we process

To provide you with the Live Life Better Derbyshire and substance misuse services we need to record and hold information that includes personal and sensitive characteristics such as:

  • your name, address, date of birth, and contact details
  • your religion, racial or your ethnic background
  • your gender or sexuality
  • your reasons for needing a service including health and lifestyle information
  • service monitoring and observations about you and your needs

Information we receive

To help us fulfil our legal obligations, we receive information from NHS Digital and Public Health England. Civil Registrations (Births and Deaths) data includes:

  • postcode of usual residence
  • place of birth text and postcode, postcode of place of death
  • NHS number
  • date of birth, date of death, date of registration
  • maiden name, name of certifier, name of coroner
  • birth weight, cause of death

National Child Measurement Programme (NCMP) data includes name, address, NHS number, date of birth, ethnicity and body mass index (BMI).

Sharing your information

The information you provide to access our services may be shared with other relevant organisations and agencies for the purposes of onward referral but in this case we will ask for your explicit consent and tell you with whom it will be shared. Information will not be shared with any other third parties unless required by law. You can refuse permission for us to share your information, however, this may limit how much we may be able to support you.

Information we receive from other agencies to fulfil our legal obligations is not shared with any other organisations and we do not publish information that is identifiable.

Amount of time we will hold your information

The information provided will be kept in accordance with our records retention schedules.

Keeping your information secure

We are committed to protecting personal data and have data policies and proceduresin place to ensure that it is safeguarded.

Your rights

Should you wish to raise any concerns about how we have processed your personal data you can contact the data protection officer, email: access2info@derbyshire.gov.uk

You also have the right to contact the Information Commissioner.

If you would like a copy of this information in a different format, please email: kit@derbyshire.gov.uk