Information Governance

Data Protection

We register with the Information Commissioner Office (ICO) and have a legal duty to protect your data. This means we process your data lawfully and securely. Our data protection officer oversees this process. 

We hold personal data about various groups we have contact with. Our Privacy Notice explains what data we collect, why we collect it, and who we share it with.

Under data protection law you have rights in relation to your personal data which are outlined in the Care Inspectorates core Privacy Notice published on our website.

Our Data Protection Policy outlines how we comply with data protection laws and handle personal data. 

  • We may share information with third parties if it complies with data protection laws.

  • We have several data sharing agreements and carry out Data Protection Impact Assessments when necessary. 

  • We also have Date Sharing and Memorandum of understanding Data Sharing/Memorandums of Understanding

Asking for your personal information

You can ask for a copy of any information we hold about you under the UK General Data Protection Regulation (GDPR) and the Data Protection Act 2018. This is called a ‘subject access request’. You can make a subject access request by filling out the form, by phone or in writing and by providing suitable identification. 

Please read the guidance below on what we hold, and do not hold, before making a subject access request. In some cases, we may not be the right organisation to ask for your data.  

  • Information that pre-dates 2002

  • We are not the primary holder of social work or care records

  • If you have been a manager of a registered service

  • If you have been part of an investigation relating to a registered care service

  • If you were involved in an incident/accident that was notified to us by the care service

  • If you have been employed by the Care Inspectorate

  • If you are dissatisfied with our response please let us know so that we can address any concerns that you may have.

  • If you are unhappy with how our staff have handled your request for personal information you may wish to complain to the Care Inspectorate by following the link here

  • You may also wish to complain to the UK Information Commissioner’s Office and information on how you do this is available via their website https://ico.org.uk/make-a-complaint/.