The charter covers correspondence, involvement in public policy consultations or any other dealings that lead to us holding personal information about you.
What you can expect from us, and what we ask from you
We need to handle personal information about you so that we can provide better services.
High standards in handling personal information are very important to us, because they help us maintain the confidence of everyone who deals with us. So when we ask you for personal information, we will process your personal data in line with our privacy notice.
In return, we ask you to:
- give us accurate information
- tell us as soon as possible if there are any changes, such as a new address
- let us know, at time of writing, if you would like your correspondence or enclosed documents returned to you
This helps us to keep your information reliable and up to date, and ensures your correspondence is returned if requested.
Agencies and arm’s length bodies
Most of our agencies and arm’s length bodies hold personal data for specific purposes that are set out in their own information charters. For example, NHS Blood and Transplant holds information on patients requiring transplants so that a match can be arranged efficiently once an organ becomes available.
Department of Health and Social Care data protection policy
When we process your information we will keep to the law, including the General Data Protection Regulation and the Data Protection Act 2018. Through appropriate management and strict controls, we will follow the 6 principles of data protection described in the act.
We will also ensure that:
- there is someone with specific responsibility for data protection in the organisation (the nominated person is called the Data Protection Officer)
- everyone managing and handling personal information understands that they are contractually responsible for following good data protection practice, is appropriately trained to do so and is appropriately supervised
- we deal with enquiries about how we handle personal information promptly and courteously
- we describe how we handle personal information clearly, regularly review and audit how we manage personal information, and regularly assess and evaluate methods of handling personal information
- the Data Protection Officer for the Department of Health and Social Care is George Menzies, who can be contacted at the address below or by email: firstname.lastname@example.org
How to make a subject access request to the Department of Health and Social Care
The Data Protection Act allows you to find out what information we hold about you on computer and in some paper records. This is known as the ‘right of subject access’. We don’t charge a fee for this service.
To request access to personal data we hold about you, write to:
Data Protection Officer
Department of Health and Social Care
1st Floor North
39 Victoria Street
We are required to supply you with your personal data within 30 days of receiving a valid request. If we can’t meet this deadline, we will keep you informed of progress towards fulfilling your request.
Find out more about how we deal with personal information
Details of how we use personal data are set out in the Information Commissioner’s Register of Data Controllers.
Contact us for a hard copy of our personal information charter, or to find out more about:
- agreements we have with other organisations for sharing information
- circumstances where we can pass on your personal information without telling you, for example, to prevent and detect crime or to produce anonymised statistics
- our instructions to staff on how to collect, use and delete your personal information
- how we check the information we hold is accurate and up to date
Get in touch using our web contact form.
Or write to our Data Protection Officer at the address given above.
Independent advice on data protection and privacy
For independent advice about data protection, privacy and data-sharing issues, you can contact:
The Information Commissioner
Telephone: 0303 123 1113