Adults Receiving Care and Support Census: privacy notice

This notice informs adults receiving care and support from local authorities over the age of 18, who have a care and support plan, about the processing of their personal data by the Welsh Government and the uses to which their data will be put by the Welsh Government. The Welsh Government are the data controller for the uses set out in this notice.

Some of the information the local authority collects from adults in providing their services will be transferred to the Welsh Government on an annual basis. This is so that the Welsh Government can carry out research and statistical analysis to improve the care and support provided to people in Wales. The dataset transferred to the Welsh Government is the Adults Receiving Care and Support Census (ARCS).

Personal data is defined under the UK General Data Protection Regulation (UK GDPR) as ‘any information relating to an identifiable person who can be directly or indirectly identified by reference to an identifier’.

The following is a summary of the data that local authorities will transfer to the Welsh Government in the ARCS datasets:

• personal information including name, postcode, date of birth and gender
• special categories of personal information such as ethnic group, disability status and other health information
• the unique reference number.

A complete list of the data items required by the Welsh Government can be found on the Welsh Government website.

The lawful basis for processing information in this data collection exercise is our public task; that is, exercising our official authority to undertake the core role and functions of the Welsh Government.

The ARCS datasets will only be transferred through secure methods, with access limited to those working on the project.

The Welsh Government becomes responsible for this data once it has been transferred to them, although local authorities will retain responsibility for any data they continue to hold on their own systems. The transferred data are stored in a secure database with access limited to approved Welsh Government users and locations.

Data will be retained by the Welsh Government for as long as it remains useful for research and statistical purposes, and because historical data can be very useful in this context, this is likely to be a considerable number of years. As an example the Welsh Government currently holds detailed Looked After Children data that dates back to 2002.

The ARCS datasets will be used by government as follows:

• to monitor progress towards national outcomes, including the publication of official statistics
• to monitor local authority performance and funding
• to develop and evaluate policy
• to identify and assist development of good practice
• to support research relating to the well-being of individuals

This may include linking or combining the information with other data about individuals in Wales.

The Welsh Government will only use the identifiable aspects of the data to support the statistical and research processes required for any of the uses set out above, but will neither use the identifiable aspects of the data nor process the data in such a way as to:

• take action or support measures or decisions with respect to an individual or their families
• cause any damage or distress to individuals or their families
• identify any individuals in any reports

Results from analyses carried out using the data will be made available in statistical or research publications released via the Welsh Government Statistics and Research website and also via data placed on the StatsWales website (children's services).

External users such as the local authorities and the wider public will be able to use this published information for their own purposes, such as performance measurement and management; to improve practice and to hold government to account.

As part of their role as data controller for the ARCS subset of data that is transferred to Welsh Government, the Welsh Government may share the data provided to them with non-government agencies and researchers, but only deidentified data for statistical or research purposes. In every case, any such disclosures will be scrutinised by the Welsh Government’s Chief Statistician and if approved, controlled by an appropriate Welsh Government data access agreement which will:

• ensure secure transfer, storage and eventual destruction of the data
• limit the use to the specific requirement identified, ensuring that no individual can be identified in any published reports
• only allow the data to be stored for the duration of the research project, requiring the data to be destroyed after that period

Data linking is the process of bringing together person-level records from different sources.

Linking information to other records:

• reduces demands on people to take part in surveys
• greatly reduces the cost of collecting information
• allows different types of information to be more readily available, and so allows research to be carried out more quickly
• allows better use to be made of already existing information

Digital Health and Care Wales (DHCW) will have access to a part of the personal data for a period of three months, to allow data linking with SAIL databank. The SAIL Databank is a databank of anonymised data about the population of Wales, which is internationally recognised for the robust secure storage and use of anonymised person-based data for research to improve health, well-being and services.

Names, addresses and postcodes are not included in the linked data. The information is used for research purposes only.

Under UK GDPR, you have the following rights in relation to the personal information you provide as part of this research project, specifically you have the right:

• to access a copy of your own data
• for us to rectify inaccuracies in that data
• to object to or restrict processing (in certain circumstances)
• for your data to be ‘erased’ (in certain circumstances)
• to lodge a complaint with the Information Commissioner’s Office (ICO) who is our independent regulator for data protection

The contact details for the Information Commissioner’s Office are:

Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Phone: 0303 123 1113

Questions about either this notice or individuals’ rights should be directed to the Welsh Government in writing to the address below. Complaints should also be directed to this address in the first instance, although you can also complain directly to the Information Commissioner’s Office.

Data Collection Team
Knowledge and Analytical Services
Welsh Government
Floor 3 North
Cathays Park
Cardiff
CF10 3NQ

Email: stats.pss@gov.wales

Information Commissioner’s Office (Wales)
Churchill House
17 Churchill Way
Cardiff
CF10 2HH
Telephone: 029 2067 8400 or 0303 123 1113

Email: casework@ico.org.uk
Website: Information Commissioner’s Office

The Welsh Government’s Data Protection Officer can be contacted at:
Data Protection Officer
Welsh Government
Cathays Park
Cardiff
CF10 3NQ

Email: dataprotectionofficer@gov.wales

Figure 1: How do we securely link your answers to other information?

Image

Description of Figure 1

How we reference data for approved analysis projects

Data collectors collect your data and responses.

These are separated by:

• ID, data and responses
• ID, name, address, sex and date of birth 

ID, data and responses are sent to Sail Databank.

ID, name, address, sex and date of birth are sent to Digital Health and Care Wales where: 

• a reference number is added
• personal details are deleted

The ID reference number is sent to Sail Databank where it is added to the ID, data and responses along with any other record reference numbers.

SAIL databank and DHCW are Digital Economy Act Accredited Processing Environments (UK Statistics Authority).