Data Controller(s)

NHS Sheffield CCG

Purpose

The CCG is required by law to protect the public funds it administers. It may share information provided to it with other bodies responsible for; auditing, or administering public funds, or where undertaking a public function, in order to prevent and detect fraud under the National Fraud Initiative.

The Cabinet Office is responsible for carrying out data matching exercises.

Type of information Used

Identifiable: Personal

Legal basis

GDPR Article 6 (1)(c) – processing is necessary for compliance with a legal obligation to which the controller is subject.

Relevant Legislation: Part 6 of the Local Audit and Accountability Act 2014 (LAAA).

How we collect (the source) and use the information

We participate in the Cabinet Office’s National Fraud Initiative: a data matching exercise to assist in the prevention and detection of fraud. We are required to provide particular sets of data to the Minister for the Cabinet Office for matching for each exercise, as detailed here.

Data matching involves comparing computer records held by one body against other computer records held by the same or another body to see how far they match. This is usually personal information.

Computerised data matching allows potentially fraudulent claims and payments to be identified. Where a match is found it may indicate that there is an inconsistency which requires further investigation. No assumption can be made as to whether there is fraud, error or other explanation until an investigation is carried out.

Data matching by the Cabinet Office is subject to a Code of Practice.

Data Processors

None

Your Rights

Under GDPR you have the right:

• To be informed about the processing of your information (this notice)
• Of access to the information held about you
• To have the information corrected in the event that it is inaccurate
• To be notified of data breaches

How long we will keep the information

The datasets used in the matching exercise by the Cabinet Office will be kept as per the Code of Data Matching Practice

Who we will share the information with (recipients)

The Cabinet Office and Counter Fraud Authority