Privacy Notice – HR, Staffing, Employment, Recruitment and Training
The Integrated Care Board (ICB) collects and stores information pertaining to staff for the purposes of HR, employment, recruitment and training.
Information is collected and stored about prospective, current and past employees, including self-employed and temporary staff.
Data is collected for purposes including recruitment, occupational health, vetting checks, staff training and payroll.
We share information with the following organisations with your explicit consent or when the law allows: future employers reference request and HM Revenue & Customs.
Data Controller contact
If you have any queries, concerns, or want to request that we change or delete your information, you may contact NHS Derby and Derbyshire ICB at the following address:
Information Governance Team, Scarsdale, Nightingale Close, Newbold, Chesterfield, Derbyshire, S41 7PF
Email: ddicb.igteam@nhs.net
Purpose of the processing
The processing of this data is for the ICB to comply with their legal obligation.
Lawful basis for processing
The lawful justification for the processing and possible sharing of this data is under the following Article 6 and Article 9 of the UK General Data Protection Regulations (UK GDPR):
Article 6(1)(c) “the processing is necessary for compliance with any legal obligation to which the controller is subject”.
Article 9(2)(b) – ‘processing is necessary for the purposes of carrying out the obligations and exercising specific rights of the controller or of the data subject in the field of employment”.
Recipient or categories of recipients of the processed data
The data will be shared with organisations such as HM Revenue & Customs and future employers where a reference is requested.
Right to object
You have the right to object to some or all the information being processed under Article 21 of UK GDPR. To object to the processing of your information, please contact the controller. You should be aware that this is a right to raise an objection, which is not the same as having an absolute right to have your wishes granted in every circumstance.
The ICB processes personal data under Article 6(1)(c) on a lawful and legitimate basis where the organisation is obliged under law to comply with:
- UK employment legislation
By complying with employment laws, the ICB has compelling legitimate grounds for the processing which overrides the interests, rights and freedoms in the right object.
Right to access and correct
You have the right to access the data that is being shared and have any inaccuracies corrected.
Retention period
The data will be retained in line with the law and national guidance. Or speak to the ICB.
Right to complain
You have the right to complain to the Information Commissioner’s Office (ICO).
Contact the ICO online or call their helpline on 0303 123 1113 (local rate) or 01625 545 745 (national rate).
There are National Offices for Scotland, Northern Ireland and Wales.