How we use your data

The Privacy Notice

The Privacy Notice and Children’s Privacy Notice explain the NHS North East Lincolnshire Clinical Commissioning Group’s privacy policy and how we will use and protect any information about you that you give us when you contact us by whatever method.

It covers who we are and what we do as a Clinical Commissioning Group (CCG), the legal duty we have under current Data Protection legislation and the General Data Protection Regulations (GDPR) to protect any information we collect, hold and process to prevent any unauthorised access to it.

It provides details on the information we collect and how we use it to better plan and commission health services for the local area. This could include, monitoring of quality and efficiency of services commissioned, statistical analysis of the local populations illnesses and preparing national data submissions for quality and cost.

Everyone working for the NHS is trained to keep information secure and confidential and the NHS Confidentiality Code of Conduct applies to all of our staff, and they are required to protect your information, inform you of how your information will be used, and allow you to decide if and how your information can be shared. Each NHS organisation has a senior person responsible for protecting the confidentiality of patient information and enabling appropriate information sharing. This person is called the Caldicott Guardian. 

The GDPR also requires the CCG to appoint a Data Protection Officer (DPO) and specifies the functions of the role as follows:

  • information and advice regarding our obligations under the GDPR and other data protection provisions
  • Queries and information on data protection staff training and data protection auditing
  • Advise on data protection impact assessments (DPIA)
  • Advice on seeking prior consultation or breach notification with the Information Commissioners Office (ICO)

The DPO is:
Paul Ellis - Information Governance and Data Protection, Communications & Facilities
 (01472) 32 3372 

The Privacy Notice highlights those partner organisations who we may share your personal data with (such as but only where there is a valid legal basis to do so. Statistical information may be shared with them for the purpose of improving local services. 

Everybody has the right to access their personal record and see, or have a copy, of data we hold that can identify them, with some exceptions. You also have the right to opt-out and withdraw consent to use of your information and if you wish to do this then you need to contact us to discuss the options.

For further information on requesting your information and opting out please read the The Privacy Notice, Children’s Privacy Notice and national data opt out policy 

The CCG does not directly provide health care services and therefore does not routinely create or hold any clinical records about any individuals as it does not provide direct care. If you wish to have sight of your own personal health care records you will need to apply to your GP Practice, or the NHS Hospital or NHS organisation which provided your healthcare.

Changes to this Privacy Notice

If our privacy policy changes in any way, we will place an updated version on this page. Regularly reviewing the page ensures you are always aware of what information we collect, how we use it and under what circumstances, if any, we will share it with other parties. If you want to request information about our privacy policy you can write to us at:

North East Lincolnshire Clinical Commissioning Group
Municipal Offices,
Town Hall Square,
DN31 1HU