Birmingham and Solihull Community Care Collaborative Locality and Neighbourhood Operating Model Privacy Notice
The Locality Operating Model (LOM) is a system-wide initiative of the Birmingham and Solihull Community Care Collaborative (BSOL CCC), bringing together professionals from health, care, and voluntary sectors to deliver coordinated, preventative care across Birmingham and Solihull. This privacy notice explains how we collect, use, and protect your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who we are
The LOM is delivered by BSOL CCC, a partnership involving GP Practices, NHS Trusts, Local Authorities, community and voluntary sector organisations. It is commissioned by the Birmingham and Solihull Integrated Care Board (ICB) and led by Birmingham Community Healthcare NHS Foundation Trust (BCHC).
The LOM covers Integrated Neighbourhood Teams (INTs), Locality Care Co-ordination Centres, Intermediate Care and Same Day Emergency Care.
What personal data we collect
To provide you with effective care and support, we may collect the following personal data:
- Name, date of birth, and contact details.
- NHS number and medical records.
- Information about your health, care needs, and treatment history.
- Social care information, including support services used.
- Information provided by carers, family members, and support organisations.
How we use your personal data
We collect and process your personal data for the following purposes:
- To coordinate and provide you with integrated health and care services.
- To ensure you receive the right support from the appropriate professionals.
- To improve delivery service and enhance patient experience.
- To safeguard individuals and support vulnerable citizens.
- To comply with legal and regulatory obligations.
Legal basis for processing
Under UK GDPR, we process your personal data on the following lawful bases:
- Article 6(1)(e) - public Task: processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority.
- Article 9(2)(h) - provision of Health or Social Care: processing is necessary for the provision and management of health and social care services.
- Schedule 1, Part 1, Paragraph 2 of the Data Protection Act 2018 - Health or Social Care Purposes.
- Common Law Duty of Confidentiality is satisfied through implied consent for direct care.
Sharing your personal data
To provide coordinated care, we may share your data with:
- NHS organisations (GPs, hospitals, mental health services, community health services).
- Local authorities and social care providers.
- Voluntary sector organisations involved in your care.
- Other relevant support services.
We will only share the minimum necessary information to ensure you receive appropriate care and support. Your information will not be used for marketing purposes or shared with third parties without your consent unless required by law.
How we protect your data
We have robust technical and organisational measures in place to ensure your data is secure and protected against unauthorised access, loss, or misuse. Access to your data is strictly controlled, and all staff handling your information are trained in data protection and confidentiality.
How long we keep your data
We will only retain your personal data for as long as necessary to provide you with health and care services, in line with NHS records management guidelines. Data shared under this agreement will be retained in the Shared Care Record until the contract with InterSystems ends (31 March 2029).
Your rights
Under UK GDPR, you have the following rights regarding your personal data:
- Right to access: request a copy of the information we hold about you.
- Right to rectification: request corrections to inaccurate or incomplete data.
- Right to erasure: request deletion of your data in certain circumstances.
- Right to restriction: request limited processing of your data.
- Right to object: object to the processing of your data in specific situations.
- Right to data portability: request transfer of your data to another provider where applicable.
Contact us
If you have any questions or concerns about how we use your personal data, or if you wish to exercise your rights, please contact:
Data Protection Officer (DPO)
Birmingham Community Healthcare NHS Foundation Trust
- Email: bchc.dpo@nhs.net
- Address: Data Protection Officer, Birmingham Community Healthcare NHS Foundation Trust, 3 Priestley Wharf, Holt Street, Birmingham, B7 4BN.
Complaints
If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
- Website: www.ico.org.uk
- Phone: 0303 123 1113
- Address: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
