This Integrated Care Board (ICB) holds and uses limited patient data for the purposes of complaints, subject access requests and freedom of information requests.
We collect and store information that has been received directly from you or organisations such as local authority and GP Practices if you are a patient with the continuing healthcare, IFR or medicines management Team.
Under GDPR and the Data Protection Act 2018, you have the right to see or be given a copy of any personal data held about you by the Integrated Care Board. To gain access to a copy of your information, you will need to make a subject access request (SAR) to the ICB:
NHS South West London ICB, 120 the Broadway, Wimbledon London SW19 1RH
Under the Freedom of Information Act 2000, you have the right to request copies of non-personal information held by the Integrated Care Board. To gain access to a copy of your information, you will need to make a freedom of information (FOI) request to:
NHS South West London ICB, 120 the Broadway, Wimbledon, London SW19 1RH
Should you wish to make a complaint to the Integrated Care Board, then there may be a need for them to view and access your patient data or request some from you directly. This will allow the Integrated Care Board to look into your complaint. Complaints can be sent to:
NHS South West London ICB, 120 the Broadway, Wimbledon, London SW19 1RH
The Integrated Care Board use a system called Radar to log and track all complaints, Radar do not have access to any personal information.
Controller contact details
NHS South West London ICB, 120 the Broadway, Wimbledon, London SW19 1RH
Data protection officer contact details
Strategic information governance lead: [email protected]
Purpose of the processing
Legal obligations of the ICB.
The lawfulness conditions and special categories
The lawful justifications for the processing and possible sharing of this data are;-
Article 6(1)(c) “the processing is necessary for compliance with any legal obligation to which the controller is subject”
Where your complaint or SAR involves processing of special category data the relevant condition for processing that data will be Article 9(2)(g) “substantial public interest” as defined by Data Protection Act 2018, Schedule 1, Part 2, Section 6(2)(a) “the exercise of a function conferred on a person by an enactment or rule of law”
Recipient or categories of recipients of the shared data
Teams within the ICB.
Rights to object
You have the right under Article 21 of the GDPR to object to your personal information being processed. Please contact the ICB if you wish to object to the processing of your data. You should be aware that this is a right to raise an objection which is not the same as having an absolute right to have your wishes granted in every circumstance.
ICBs process personal data under Article 6(1)(c) on a lawful and legitimate basis where the organisation is obliged under law to comply with
- The General Data Protection Regulations (GDPR)
- The Freedom of Information Act
- The NHS Constitution
- The Local Authority Social Services and National Health Service Complaints (England) Regulations 2009
By complying with these laws, the ICB has compelling legitimate grounds for the processing which override the interests, rights and freedoms in the right to object.
Right to access and correct
You have the right to access any identifiable personal data that is being processed or shared and to have any inaccuracies corrected.
Retention period
The data will be retained for the period as specified in the national records retention schedule.
Right to complain
You have the right to complain to the Information Commissioner’s Office (ICO).
Contact the ICO online or call their helpline on 0303 123 1113 (local rate) or 01625 545 745 (national rate).
There are National Offices for Scotland, Northern Ireland and Wales.