National Diabetes Audit data collection Wales
Summary
Why and how we process your data in the National Diabetes Audit (Wales) and your rights.
| Controller | NHS England and Digital Health and Care Wales (DHCW) |
| How we use the information (processing activities) | The National Diabetes Audit (NDA) helps improve the quality of diabetes care by enabling participating NHS services and organisations to:
The NDA collects information about patients who receive diabetes care in Wales. For more information on the data we collect for the National Diabetes Audit in England, see the National Diabetes Audit (England) Transparency Notice. We collect the following information: Personal data
Special category data
We then link this data to other datasets that NHS England holds. Data linkage allows us to understand the types of complications people with diabetes can experience and gives a better picture of diabetes care whilst reducing the burden placed on NHS services who submit the data to NHS England so that they do not have to submit the same data twice. More information on data collected for the purposes of the NDA is available. A more detailed Transparency Notice for the NDA in Wales is also available on the NDA collection page. |
| Does this contain sensitive (special category) data such as health information? | Yes |
| Who are recipients of this data? |
Data is shared or is expected to be shared with organisations such as healthcare providers, clinicians, and commissioners of NHS services, for example:
Organisations must apply and gain approval through NHS England’s Data Access Request Service to access NDA data. |
| Is data transferred outside the UK? | This data is not transferred out of the UK |
| How long the data is kept | 8 years with regular reviews in accordance with the NHS Records Management Code of Practice and our Records Management Policy. |
| Our lawful basis for holding this data | Public task |
| Your rights |
|
| How can you withdraw your consent? |
Consent is not the basis for processing. |
| Is the data subject to decisions made solely by computers? (automated decision making) | No |
| Where does this data come from? | For the NDA programme collections, we collect data from healthcare providers in Wales such as: GP practices (if they have chosen to participate in the audit) ; specialist diabetes out-patient services; maternity units with a joint diabetes and maternity service within NHS Trusts; diabetes footcare services within NHS trusts; NHS acute care providers. We also link to other data NHS England holds, such as the Maternity Services Dataset for the purposes of the National Gestational Diabetes Audit. |
| The legal basis for collecting this data | Public task - Article 6(1)(e) of UK GDPR. NHS England has accepted a section 255 Request under the Health and Social Care Act 2012 from Digital Health and Care Wales (DHCW) to establish and operate an information system for the collection and analysis of information relating to people with diabetes in Wales. This Request is called the National Diabetes Audit for NHS Wales 2021. We also need an additional legal basis in the UK GDPR and the Data Protection Act 2018 (DPA 2018) to use data which is extra sensitive. This is known as ‘special categories of personal data’. Our legal bases to use data relating to your health for the purposes of the NDA are:
|
