Evaluation of the Leadership for Personalised Care (LPC) Programme: privacy notice

In line with the new EU General Data Protection Regulation (GDPR), in this privacy notice for research participants, we explain the legal basis for data processing for the evaluation of the LPC programme. This includes who will have access to your personal data, how your data will be used, stored and deleted and who you can contact with a query or a complaint.

What is the legal basis for processing my data?

For this project, NHS England is the data controller, and the Institute for Employment Studies (IES) is the data processer. This means that NHS England are responsible for deciding the purpose and legal basis for processing data. For this project, the legal basis for processing data is Article 6(1)(e) of the General Data Protection Regulation where “processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the [data] controller”. This project will include processing personal information such as names and email address, and passing those details to the evaluator, IES.

The privacy notice for NHS England is available online here: www.england.nhs.uk/contact-us/privacy-notice/, which outlines how your data might be used.

Who will have access to my personal data?

IES have been commissioned by NHS England and NHS Improvement (NHSE/I) to conduct an evaluation of the Leadership for Personalised Care (LPC) programme. The evaluation will aim to explore the impact of the LPC suite of offers and understand the difference that programme participation can make to local communities. As well as a survey of people accessing the range of LPC offers, IES will conduct deep dive case studies into a small number of local systems that will tell the story of leading the change to personalisation. Only the research team at IES will have access to your personal data.

How will my interview data be treated?

If you choose to take part in a survey or interview, the data will be used for research purposes. If you take part in an interview, we will ask you to describe actions you have taken, the role the LPC programme has played and ask you to tell us about the achievements so far. We would also like to speak with other stakeholders locally that could provide further insight into the personalisation journey, so we might also ask you to nominate a colleague. IES will use the information you provide to produce a case study that documents the personalisation journey in your local community. Whilst the interview is confidential, we would like to use quotes in the final case study which references your job role, but individuals will not be named. Some case studies may be published on NHSE/I or IES website to provide inspiration to other local systems. Your personal information will be securely deleted from the IES systems three months after the project is complete.

Who can I contact if I would like to withdraw my interview data?

You also have the right to have your interview information deleted. If you have taken part in an interview or survey but would like to withdraw your data (up to one month after taking part), please contact: megan.edwards@employment-studies.co.uk

Who can I contact with a query about how my data will be used?

If you have any questions about how your data will be used, please contact Suzanne Anderson (Suzanne.Anderson@employment-studies.co.uk), data protection adviser. Or please contact the data protection officer, england.dpo@nhs.net, with the subject “For the attention of the Data Protection Officer”.

Who can I contact with a complaint?

Under GDPR, you have the right to lodge a complaint with the Information Commissioner’s Office at www.ico.org.uk