Home Health & social care Public health Workplace Health Check Privacy notice
SECTION MENU

Workplace Health Check Privacy notice

Data Controller and Purpose 

The information you provide as part of the Workplace Health Check programme will be used by the London Borough of Tower Hamlets’ Public Health team, to process your workplace health check data. The service is provided jointly with Tower Hamlets GP Care Group and the participants are Joint Controllers of the data you provide. 

Tower Hamlets Local Authority has been funded this grant as part of a national pilot programme by the Department of Health and Social Care. The provider of this programme is Tower Hamlets GP Care Group. The purpose of any data collected will be used to evaluate the pilot programme and help to inform future funding decisions only.  

Consent for data sharing 

You will also be asked to consent for your data to be shared – this is non-identifiable i.e. the data cannot be used to identify you. The non-identifiable data that will be shared with Tower Hamlets local authority (data processor) for data processing before being submitted to the Department of Health and Social Care on a quarterly basis for purposes of grant monitoring and programme evaluation. The data once shared will not be used for marketing or insurance purposes or be shared outside of the UK. It is solely intended to be used to evaluate the programme and ensure local authorities are delivering the health checks for the grant they have received. 

Part A: What data will be collected on individuals receiving a check as part of this pilot?  

The provider (GP Care Group) will collect data for each individual employee level before this is processed by the local authority. The local authority will not share individual data to DHSC/the evaluator, but only aggregated and anonymised data as set out in part B.  

The data that will be collected by the provider (GP Care Group) on individuals includes: 

  • Sex (M/F/prefer not to say) 

  • Is the gender you identify with the same as your sex registered at birth (Y/N/Prefer not to say) 

  • Age (in years) 

  • Ethnicity 

  • Profession 

  • GP registration status 

  • Whether the individual can recall receiving an offer of an NHS Health Check in the last five years? 

  • If the individual can recall receiving an offer of an NHS Health Check in the last five years, did they complete the check? 

  • Blood pressure of 140/90mmHg or more (Y/N) 

  • Smoker (Y/N) 

  • BMI of 25 or more (Y/N) 

  • Was the individual referred to their GP for any reason following a check delivered as part of this programme? (Y/N) 

  • Agreed consent to be contacted for further research (Y/N) 

This data will then be sent to Tower Hamlets local authority (data processor) for aggregation to send to Department of Health and Social Care. 

Part B: What aggregated data will be submitted to Department of Health and Social Care? 

N.B. There will be no personal identifiable data sent to the Department of Health and Social Care as part of this programme evaluation. The data will be aggregated and anonymised before it is returned to DHSC. 

The following data will be aggregated according to age, ethnicity, sex, occupational group and GP registration status: 

  • Total number of checks carried out 

  • Number with blood pressure over 140/90 

  • Number of current smokers 

  • Number of overweight or obese 

  • Number of referrals to GP following the health check 

  • Number of individuals who can recall receiving an offer of an NHS Health Check in the last 5 years 

  • Of those who recall receiving an offer of NHS health check, the number who completed a check 

We process your data in accordance with the General Data Protection Regulation (GDPR) and if you have any concerns the Council’s Data Protection Officer can be contacted on DPO@towerhamlets.gov.uk  

Condition For Processing Personal Data 

It is necessary for us to process your personal data [(Sex, Gender, Age, Ethnicity, Type of Profession and health check results)], under the GDPR as a task carried out for the performance of a contract and for compliance with a legal obligation as part of a contract with the Department of Health and Social Care. This data submitted will only be aggregated and anonymised data, and will no personal data will be shared with the Department of Health and Social Care.  

How long do we keep your information? 

We will only hold your information for as long as is required by law and to provide you with the necessary services. This is likely to be for [2] years after the case is closed. For further details, you can view our Retention Schedule. 

We will anonymise your personal data you provide to us to ensure that you cannot be identified and use this for statistical analysis of data to allow the Council to effectively evaluate the pilot programme.  

Information sharing  

Your personal information may be shared with internal departments or with external partners and agencies involved in delivering services on our behalf. As stated above this will include the Department of Health and Social Care.  

The council has a duty to protect public funds and may use personal information and data-matching techniques to detect and prevent fraud, and ensure public money is targeted and spent in the most appropriate and cost-effective way. Information may be shared with internal services and external bodies like the Audit Commission, Department for Work and Pensions, other local authorities, HM Revenue and Customs, and the Police. This activity is carried out under social protection law.