This privacy notice explains:
- how personal information is going to be used
- what it is used for
- who it might be shared with and why
- how long it is kept.
The information you provide helps us deliver our services effectively.
Personal and special category data
The partner agencies within MASH hold information relating to past and present referrals that have been made to us. These referrals may include personal information relating to:
- any person at risk (adult or child)
- any suspected perpetrator(s)
- parents, next of kin, family members, carers
- any other person or persons at risk who may be living at the property
witnesses - the person and/or organisation who raised the concern (professional or member of the public).
The type of information the partner agencies within MASH holds will vary depending on the nature of the concern, but is likely to include some or all of the following information:
Person who is at risk:
- Name, date of birth and other personal identifiers such as national insurance number, local authority reference number, health reference number
- Details of any previous involvement with the partner agencies
- Disability information (if applicable)
- GP/Social Worker details
- Domestic violence history
- Previous convictions
- Risks to others
- Victim concerns
Professional reporting the concern (please note professionals are unable to remain anonymous when reporting a concern):
- Name, contact information
- Job title
- Organisation
- Relationship to adult or child at risk.
Details of person causing concern:
- Name
- Age, date of birth
- Gender
- Ethnicity
- Contact details
- Relationship to adult or child at risk.
Parent/carer/others in the household:
- Name, address, date of birth, contact information, for example, email and telephone
- Relationship to adult or child at risk
- Parental responsibility
- Gender
- Ethnicity.
Details of other professionals involved:
- Name
- Contact number.
Details of previous involvement from:
- Children’s or Adult Services.
Data Controller
West Sussex County Council (WSCC) complies with the Data Protection Act and the UK General Data Protection Regulation (GDPR). It is registered as a ‘Data Controller’ with the Information Commissioner’s Office (Reg. No. Z6413427).
You can find details for the WSCC Data Protection Officer (DPO) on our Privacy Policy.
We ensure that your personal data is accurate, processed fairly and lawfully, kept secure and retained for no longer than is necessary.
The legal basis for processing personal data
We will only use your personal information when the law allows us to. Most commonly, we will use your personal information in the following circumstances:
- UK GDPR Article 6(1)(c) - processing is necessary for compliance with a legal obligation to which the controller is subject
- UK GDPR Article 6(1)(e) - the processing is necessary for you to perform a task in the public interest or for your official functions, and the task or function has a clear basis in law.
The legal basis for processing special category data
To process special category data West Sussex County Council must also be able to identify a condition in Article 9 (2) UK GDPR. Most commonly, we will use your personal information under the following conditions:
- processing is necessary to protect the vital interests of the data subject or of another natural person where the data subject is physically or legally incapable of giving consent
- processing is necessary for reasons of substantial public interest
- processing is necessary for the provision of health or social care or treatment or the management of health or social care systems and services.
Relevant legislation
- Human Rights Act
- Children’s Act 2004
- The Crime and Disorder Act 1998
- Criminal Justice and Court Service Act 2000
- Health and Social Care Act 2012
- Data Protection Act 2018
- UK GDPR
How we use your personal information
The Integrated Front Door receive referrals from a variety of sources including:
- referrals from professionals
- referrals from family
- referrals from general public.
Using a Multi-Agency approach, they will assess the referral and evaluate any next steps required, for example:
- provide information, advice and guidance
- recommend Early Help
- progress to Social Care for Assessment of Needs.
If a MASH enquiry is required for a child, professionals working within the hub will share information they hold which may be relevant to the enquiry. Only the minimum information will be held in the MASH team and will only be shared when absolutely necessary.
This is to make sure that an appropriate, timely and informed decision is made by the MASH Team Manager about any services the child may require. Relevant partners have signed up to the MASH Protocol Agreement, which specifies what happens to the data once it is received within the MASH.
Who we share your information with
The information you supply will be kept on a secure WSCC database and can be accessed by a number of authorised people within the children and families services, health professionals and the Police.
Information will be processed within the MASH under strict protocols in accordance with UK GDPR and the Data Protection Act 2018. Information will be held securely by WSCC and will only be used and shared on a strict need to know basis with limited partners, for the purposes of keeping children or young people safe or ensuring they get the best services they need.
Personal information may also be shared if there is a lawful reason to do so, such as for crime prevention or detection purposes or where it is in the interest of maintaining public safety. The parent/carer will normally be informed at the time the enquiry is made unless this could place the child or someone else at further risk or undermine a police investigation.
How long we keep your personal data
Personal data will not be retained for longer than is necessary in relation to the purposes for which they are collected.
The council is currently reviewing and updating its retention policies. See our records management page for published retention schedules.
Transfer outside the European Economic Area
If your data needs to be transferred, we will make sure that an adequate level of protection is in place.
Your rights
See our Privacy Policy for more information on your rights.
Complaints
See our Privacy Policy for information about making a complaint.