Data Controller(s)

NHS Sheffield CCG

Purpose

As a public authority, the CCG has a duty to respond to requests made under the Freedom of Information Act 2000 (FOIA), Environmental Information Regulations 2004 (EIR), and the Re-Use of Public Sector Information Regulations 2015 (RPSI).

Type of information Used

Identifiable:   Personal (name and either email or postal address only)

Legal basis

GDPR Article 6(1)(c) ‘processing is necessary for compliance with a legal obligation to which the controller is subject’

Relevant legislation: FOIA, EIR and RPSI.

How we collect (the source) and use the information

We will only collect identifiable information such as name and contact details provided by individuals making requests under the Freedom of Information Act 2000 (FOIA), Environmental Information Regulations 2004 (EIR) and the Re-Use of Public Sector Information Regulations 2015 (RPSI). This information will only be used to respond to such requests and in correspondence with individuals following appeals.

The personal data we process is freely provided by applicants who wish to exercise their right to use the above legislation in order to access information held by or on behalf of the CCG.

Where the individual is making a request under the Re-Use of Public Sector Regulations 2015, by law we also require the name of the organisation and the re-use purpose.

Data Processors

None

Your Rights

With regards to Freedom of Information Requests under GDPR you have the right:

• To be informed about the processing of your information (this notice)
• Of access to the information held about you
• To have the information corrected in the event that it is inaccurate
• To restrict or stop processing
• To object to it being processed or used
• Not to be subject automated decision-taking or profiling
• To be notified of data breaches

How long we will keep the information

FOIA requests and associated responses will be kept for 3 years following the closure of the request except in cases where there has been a subsequent appeal. For those cases, information will be kept for 6 years following the closure of the appeal.

Who we will share the information with (recipients)

This information is not shared outside of the CCG.