We collect your information to:

  • investigate concerns around abuse or neglect of an adult at risk and undertake safeguarding adult reviews (SAR)
  • assess individual need and risk and provide appropriate, accessible and safe support to vulnerable adults

What type(s) of information do we use?

  • contact details
  • demographic information
  • family and relationship details
  • referral, assessment and care plan
  • national unique identifiers
  • health data
  • financial information
  • social care

What is the legal basis for using your information?

The legal bases for processing your personal data, in accordance with the UK GDPR are:

  • (c) Legal Obligation: the processing is necessary to comply with the law. You must reference the applicable legislation if you wish to rely on this basis for processing
  • (e) Public Task: the processing is necessary to perform a task in the public interest or for an official function, and the task or function has a clear basis in law. You must reference the applicable task/function and its basis in law if you wish to rely on this basis for processing

In this instance the legislation that informs this processing is as follows:

  • Care Act 2014
  • Mental Health Act 2007
  • Housing Act 2004
  • Human Rights Act 1998

Depending upon the individual circumstances, one or more of the above lawful bases for processing may be applied.

Where the information you submit contains special category personal data that relates to an individual’s ethnic origin, race, religious or philosophical beliefs, political opinions or data concerning their health, our legal basis for processing special category personal data, in accordance with the UK GDPR is:

  • Article 9(2)(g) (processing is necessary for reasons of substantial public interest)

  • Section 10 (3) of the DPA 18 sets out that in order for processing of special category and criminal offence data to be necessary for the purposes in Article 9(2)(g) of the UK GDPR, it must meet one of the conditions in Part 2 of Schedule 1 of the DPA. The Substantial Public Interest Conditions are:

    • Paragraph 6 which permits processing of special categories of data that is in the substantial public interest and is necessary for the exercise of a function conferred on a person by an enactment or rule of law
    • Paragraph 18 which permits processing of special categories of data required for the protection of children or of adults at risk
    • Paragraph 19 which permits processing of special categories of data which is necessary to protect the economic well-being of adults

  • Article 9 (2)(h) Preventative or occupational medicine, for the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services

  • Section 10(1) of the DPA 18 sets out that in order for processing of special category and criminal offence data to be necessary for the purposes in Article 9(2)(h) of the UK GDPR it must meet one of the conditions in Part 1 of Schedule 1. Those conditions enable the processing of special categories of data for health or social care purposes. The “health or social care purposes" are defined in paragraph 2(2) as:

    • preventive or occupational medicine
    • medical diagnosis
    • the provision of health care or treatment
    • the provision of social care

Where do we get your information?

  • yourself
  • care providers including family members
  • other local authorities
  • health services

Who do we share your information with?

  • care providers including family members (where appropriate)
  • health services

How long will we keep your information?

Personal information collected is subject to Stockport Metropolitan Borough Council’s records management policies and procedures, and will be held in accordance with the council’s records retention schedule. Generally, records are retained for 6 years from the date the incident/investigation is resolved.

Transferring your information outside of the European Union (EU)

We will not transfer your information outside of the EU.

Automated decisions using your information?

For this service all the decisions we make about you involve human intervention.

Your rights

In our guide on exercising your rights you can find information about how to:

  • exercise your rights
  • contact our Data Protection Officer
  • raise a concern with us
  • make a complaint to the Information Commissioner

You can find out what information we hold about you, and ask us not to use any of the information we collect.

Further information

If you would like further information about this privacy notice, please email dpa.officer@stockport.gov.uk

Updates (notice)

Our core data protection obligations and commitments are set out in our primary privacy notice.

We may update or revise this privacy notice at any time. If you are reading this as a printed copy please refer to www.stockport.gov.uk for the most up to date version.