Purposes for processing

NHS England is dedicated in ensuring that the principles and duties of safeguarding adults and children are holistically, consistently and conscientiously applied with the wellbeing of all, at the heart of what we do.

Categories of personal data

The data collected by NHS England staff including its hosted bodies in the event of a safeguarding situation will be as much personal information as is necessary or possible to obtain in order to handle the situation. This is likely to be special category information (such as health information).

Sources of the data

NHS England will either receive or collect information when someone contacts the organisation with safeguarding concerns or we believe there may be safeguarding concerns.

Categories of recipients

The information is used by:

• NHS England staff including its hosted bodies when handling a safeguarding incident.
• NHS England may share information accordingly to ensure duty of care and investigation as required with other partners such as Local Authorities, the Police, healthcare professional (i.e. their GP or mental health team).

Legal basis for processing

For GDPR purposes NHS England’s lawful basis for processing is Article 6(1)(e) ‘…exercise of official authority…’. For the processing of special categories data, the basis is Article 9(2)(b) – ‘processing is necessary for the purposes of carrying out the obligations and exercising specific rights of the controller or of the data subject in the field of employment and social security and social protection law…’