Privacy notice for the East Riding Safeguarding Children Partnership (ERSCP)

What do we use the information for?

We collect, process and hold your personal information in order to ensure there are effective multi-agency safeguarding systems in place in the East Riding to safeguard and promote the welfare of children and young people in accordance with Working Together 2018.

What information do we hold and use?

We collect and process the following information:

• Personal information (such as name, age, address, education details, NHS number, GP details)
• Characteristics (such as ethnicity, language)
• Client group information (such as chronology of contacts with services e.g. health, social care)
• Details of the concern or suspected abuse or safeguarding concern.

On what grounds do we use the information?

The ERSCP collect and lawfully process your personal information under the following:

• Crime and Disorder Act 1998
• Anti-social Behaviour, Crime and Policing Act 2014
• Domestic Violence, Crime and Victims Act 2004
• Children Act 1989 & 2004
• National Health Service Act 2006
• Working Together to Safeguard Children 2018
• Children & Social Work Act 2017

We process personal data for the following reasons:

• Article 6 (1)(c)  - processing is necessary for compliance with a legal obligation to which the controller is subject.
• Article 6 (1)(e) - processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

We process special category data for the following reasons:

• Article 9 (g) - processing is necessary for reasons of substantial public interest, on the basis of Union or Member State law which shall be proportionate to the aim pursued, respect the essence of the right to data protection and provide for suitable and specific measures to safeguard the fundamental rights and the interests of the data subject.

How do we collect this information?

We may collect information in the following ways:

• Email
• Audit activity
• Multi-agency performance analysis.

Who we share your information with?

We may disclose your information to others, but only where this is necessary either to comply with our legal obligations or as permitted by Data Protection legislation. We may share it with other similar statutory authorities including:

• NHS England
• Other Local Safeguarding Children Partnerships
• Police
• The National Child Safeguarding Panel
• The reasons why we may share your data with other public bodies are as follows:
• To protect vulnerable children and adults who may be at risk of harm or abuse
• To monitor and improve our performance and delivery of services
• For the prevention and/ or detection of crime
• Where necessary to protect individuals from the risk of harm or injury
• Where otherwise permitted under the General Data Protection legislation.

We will only disclose your sensitive or confidential information, such as medical details to a third party, if we are legally required to do so, or where we have good reason to believe that failing to share the information would put you or someone else at risk of harm.

We will not pass your personal information to external organisations for marketing or sales purposes or for any commercial use without your prior expressed consent.

All three partners (council, police, CCG) have equal and joint responsibility for local safeguarding arrangements. Partners are considered separate Data Controllers for the data held by each organisation and shared at the ERSCP meetings and are each required to comply with the requirements of the Data Protection legislation.  Where the ERSCP produce analysis or reports, which contain personal and special category data, the partners are considered joint data controllers with joint liability for compliance. However all partners will be responsible and accountable for the data produced by the ERSCP.

How long do we store it and is it secure?

We have retention schedules in place to ensure that information is only held for as long as it is needed. We will not keep your information for longer than is required by law.  Your information will be disposed of in a controlled and secure manner in accordance with the council’s Records Management and Data Quality Policy. The council’s IT security and confidentiality policies ensure that your information is protected, and accessed only by staff directly involved in your case.  

For information on how long your information will be held, visit the retention page. 

What rights do you have?

The rights that you have depend upon the grounds upon which we collect your information. All of the rights you could have are outlined on the data protection rights page. 

In most cases, people who have been involved with the ERSCP partner agencies will be covered by the following rights:

• The right of access - you are entitled to see the information the service holds about you
• The right to rectification - we will amend the information accordingly, if any information that the service holds about you is incorrect.
• The right to restrict processing - you may wish to limit how we use your data
• The right to object - in addition to the right to limit the use of your data, you also have a right to object to the use of your data for certain actions
• The right to erasure / right to be forgotten – in certain circumstances, you may be able to ask for some of the information we hold to be deleted.

To exercise any of your above rights, please visit the data protection rights pages for more information.

The ERSCP is not a public body under the Freedom of Information Act (FOIA) and therefore are not obliged to respond to any FOI requests. However should a request be received in relation to individuals exercising their GDPR/DPA/FOIA rights, the ERSCP collectively will decide which partner agency is best placed to respond to the request.

Where can I find out more?

If you would like to know more about how the council uses your information, your rights or have a concern about the way we are collecting or using your personal data, we request that you raise your concerns with us in the first instance. Contact details are available on the general privacy information page. 

Alternatively, you can contact the Information Commissioner's Office. The ICO is the UK’s independent authority set up to uphold information rights in the public interest and they handle public concerns regarding organisations information rights practices. 

Information Commissioner’s Office (external website)

When was this privacy notice last updated?

We will continually review and update this privacy notice to reflect changes in our services, feedback from customers, and to comply with any changes in the law. This privacy notice was last updated on 15 June 2021.