The Public Health team at Bedford Borough Council (“The Council”) has a duty to improve the health of the population we serve.
To help us do this, we use data and information from a range of sources including the Office for National Statistics, NHS Digital, Integrated Care Board (ICB) and hospitals to understand more about the nature and causes of disease and ill health in Bedford Borough.
The Council is a data controller. This means we are the organisation that decides how personal information/data (information about living individuals) we collect will be used.
As part of its duties as a data controller, the Council is registered with the Information Commissioners Office and is bound by a number of information sharing agreements which are drawn up to ensure information is received from and shared with these organisations in a way that complies with relevant legislation.
Where we collect personal information for Public Health purposes, this information will be held securely and will not be disclosed to anyone other than those stated above, unless we have a legal reason to do so, for example disclosure is necessary to protect a person from suffering significant harm or necessary for crime prevention or detection purposes.
The Public Health directorate obtains data from different organisations. This includes (list not exhaustive):
- Hospital Episode Statistics (HES) from NHS England.
- Primary Care Mortality Database (PCMD) from NHS England.
- Births data tables from NHS England.
- Population Health Management data from local and national data sources from health and care providers.
- UK Health Protection Agency (eg to deal with disease outbreaks).
- Commissioned Services data including National Child Measurement Programme (NCMP), Integrated Contraception and Sexual Health Service(iCaSH), Weight Management Service (Morelife) and Smoking Cessation.
Please note: All of the above organisations have their own privacy notices which set out why they need to share this data.
We use the data to exercise our statutory Public Health functions, which include:
- measuring the health, mortality or care needs of the population for specific geographical area or population group and looking at variation in health outcomes between groups in the population
- planning, evaluating or monitoring health and social care policies, services or interventions
- protecting or improving public health, including such subjects as the incidence and prevalence of disease, by different population characteristics (eg age, gender, ethnicity) or the risk factors pertaining to sections of the population, or the effectiveness of preventative care services
The processing of personal data is governed by the UK General Data Protection Regulation (UK GDPR). The legal basis for the Council using this information in this manner is contained in Section 42(4) of the SRSA (2007) as amended by section 287 of the Health and Social Care Act (2012) and Regulation 3 of the Health Service (Control of Patient Information) Regulations 2002
This data will only be processed and used for statistical public health purposes by Public Health team members within the Council who are listed in an associated Data Access Agreement.
As partners in the local Integrated Care System, we also access pseudonymised health and care data through a sublicensing agreement with NHS Bedfordshire, Luton and Milton Keynes ICB. This is to support population health management and understanding how risk of disease and poor health varies across the population in our area. The datasets we use are listed here: Commissioning datasets - NHS England Digital .
In addition, where we need to share sensitive or confidential information such as medical details, we will do so only with your permission or where we are legally required to. We may share information to prevent risk of harm to an individual.
Your rights
You have the right to opt out of Bedford Borough Council Public Health receiving or holding your personal identifiable information.
There are occasions where we or our service providers will have a legal duty to share information, for example for safeguarding or criminal issues.
The process for opting out will depend on the specific data and what programme it relates to.
For further information, please contact the Data Protection Officer by email: dpo@bedford.gov.uk.
You also have the right to request a copy of the information the Council hold about you.
To obtain a copy of your personal information, please write to:
Request for Information
Bedford Borough Council
Information Governance
6th Floor Borough Hall
Cauldwell Street
Bedford
MK42 9AP
Or email: requestforinformation@bedford.gov.uk.
The Information Commissioner's Office is the national regulator for compliance with the Data Protection Act.
If you remain unsatisfied with a response you have received from the Council or if you require more information about data protection, you can contact them at:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Email: casework@ico.org.uk
How to find out more
See Public Health section for more information about Public Health in Bedford Borough.
See our Privacy notice webpage for information about how the Council will protect your privacy.
