Skip to content

Home > Privacy Notice > HR, Staffing, Employment, Recruitment and Training Privacy Notice

Privacy Notice – HR, Staffing, Employment, Recruitment and Training

The Integrated Care Board (ICB) collects and stores information pertaining to staff for the purposes of HR, employment, recruitment and training.

Information is collected and stored about prospective, current and past employees, including self-employed and temporary staff.

Data is collected for purposes including recruitment, occupational health, vetting checks, staff training and payroll.

We share information with the following organisations with your explicit consent or when the law allows: future employers reference request and HM Revenue & Customs.


Data Controller contact

If you have any queries, concerns, or want to request that we change or delete your information, you may contact NHS Derby and Derbyshire ICB at the following address:

Information Governance Team, Scarsdale, Nightingale Close, Newbold, Chesterfield, Derbyshire, S41 7PF



Purpose of the processing

The processing of this data is for the ICB to comply with their legal obligation.


Lawful basis for processing

The lawful justification for the processing and possible sharing of this data is under the following Article 6 and Article 9 of the UK General Data Protection Regulations (UK GDPR):


Article 6(1)(c) “the processing is necessary for compliance with any legal obligation to which the controller is subject”.


Article 9(2)(b) – ‘processing is necessary for the purposes of carrying out the obligations and exercising specific rights of the controller or of the data subject in the field of employment”.


Recipient or categories of recipients of the processed data

The data will be shared with organisations such as HM Revenue & Customs and future employers where a reference is requested.


Right to object

You have the right to object to some or all the information being processed under Article 21 of UK GDPR. To object to the processing of your information, please contact the controller. You should be aware that this is a right to raise an objection, which is not the same as having an absolute right to have your wishes granted in every circumstance.

The ICB processes personal data under Article 6(1)(c) on a lawful and legitimate basis where the organisation is obliged under law to comply with:

  • UK employment legislation

By complying with employment laws, the ICB has compelling legitimate grounds for the processing which overrides the interests, rights and freedoms in the right object.

Right to access and correct

You have the right to access the data that is being shared and have any inaccuracies corrected.


Retention period

The data will be retained in line with the law and national guidance. Or speak to the ICB.


Right to complain

You have the right to complain to the Information Commissioner’s Office (ICO).

Contact the ICO online or call their helpline on 0303 123 1113 (local rate) or 01625 545 745 (national rate).

There are National Offices for Scotland, Northern Ireland and Wales.

Visit the ICO

Last Updated: Wednesday 17th January 2024 - 1:16:pm

Subscribe to our Newsletter

Joined Up Care Derbyshire produces a bi-monthly newsletter which provides important updates on health and care developments around the city and county.

Previous copies of the newsletter can be found on our website.

If you would like to receive this newsletter, please visit our newsletter page to sign up.