Information commissioning boards (ICBs) and NHS England are working together to deliver the Maternity and Neonatal Independent Senior Advocacy (MNISA) service. A list of all ICBs involved in this pilot can be found below.

For the purposes of data protection laws, the ICBs and NHS England are “joint controllers” for the use (processing) of your personal information in this notice. This means that we have both worked together to decide why and how your personal data (processed). It also means we are jointly responsible to you under the law for that processing.

To confirm:

• The ICB in your pilot area is responsible for handling your personal information regarding any engagement you have with the MNISA service.
• NHS England has responsibility for providing the reporting system that the MNISA service (e.g., an ICB) uses to handle your personal information. For example, securely storing any information you provide when engaging with the service. NHS England will also process your de-identified and anonymised data to ensure the service works, can improve and adapt to any changing requirements.

This notice describes how and why your personal information is used and by who. Any sharing of that information; by who and why. As well as how to contact us or NHS England should you have any questions or concerns about the use of your personal information.

Whilst the ICBs and NHS England are joint controllers for your information, the ICBs have taken responsibility to be the point of contact for any data protection queries. Please see your local ICB privacy notice for information around how they process your personal data for this pilot service.

The type of personal information we collect

We collect and process the following information:

• your contact information; name, telephone number, email address
• health related information
• date and details relating to your experiences
• racial or ethnic origin.

How we get the personal information and why we have it

The personal information is provided directly by you for one of the following reasons:

• When you approach the MNISA service to engage with an Advocate/the service.
• NHS England use your personal data to assess the viability of the service and ensure improvement in services; for both the MNISA and maternity services
  • This includes using de-identified information to help understand themes and trends raised, scope and reach of the service, to be able to report progress of the pilot and to help understand the impact of the MNISA work.

Under the UK General Data Protection Regulation (UK GDPR), the lawful bases the ICBs and NHS England rely on for processing your information under this service, and of which is special category data are:

• Article 6(1)(e) We need it to perform a public task.
• Article 9(2)(h) We need it for the provision and management of our health or social care system.

How we store your personal information

Your personal information is stored securely on NHS England’s IT system. Your personal information will not be routinely accessed by anyone in the ICBs or NHS England, apart from the MNISA themselves and relevant staff (e.g., line management for business continuity purposes or in cases where your advocate is absent and your case, with your agreement, is transferred accordingly) or in the event of a technical issue with CRM and it is necessary for NHS England to assess the issue to maintain the security and functionality of the system and its data. We and NHS England will retain and dispose of your personal information in line with the NHSX_Records_Management_CoP_V7.pdf (england.nhs.uk).

Your data protection rights

Under data protection law, you have a number of data protection rights. For example, right of access, where you have the right to ask us for copies of your personal information. You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

The regulatory body responsible for upholding data protection, the Information Commissioner’s Office (ICO) also has information regarding data subject rights.

Please contact your local pilot ICB if you wish to make a request.

List of ICBs involved in the pilot:

1. Bath and North East Somerset, Swindon and Wiltshire
2. Birmingham and Solihull
3. Cheshire and Merseyside
4. Cornwall
5. Devon
6. Frimley
7. Gloucestershire
8. Kent and Medway
9. Lancashire and South Cumbria
10. Leicester, Leicestershire and Rutland
11. Mid and South Essex
12. North East London- External
13. North Central London
14. North East and North Cumbria- External
15. Nottingham and Nottinghamshire
16. Shropshire, Telford and Wrekin
17. Somerset
18. South Yorkshire
19. Staffordshire and Stoke on Trent
20. Suffolk and North East Essex
21. West Yorkshire