This notice is designed to explain how and why information about you will be used by Oxfordshire County Council in relation to the information it is required to share with CP-IS, an IT system operated by NHS Digital, known as the Child Protection Information Sharing System (CP-IS).

CP-IS is a system that helps health and children’s social care staff in England to share information about children or unborn children on child protection or children we care for securely, to better protect society's most vulnerable children.  

To ensure that your information is used appropriately and that your privacy is respected, your personal information will be held and used in compliance with the requirements of all applicable legislation. This means that:

• the council will take steps to ensure that your information is kept as safe as possible and that it is always accurate and up to date
• only those staff who need to do so will access your personal information.

The legal basis for sharing this data and information is:

Schedule 1 of the Data Protection Act 2018 contains 'safeguarding of children and individuals at risk' as a processing condition that allows practitioners to share information, including without consent (where in the circumstances consent cannot be given, it cannot be reasonably expected that a practitioner obtains consent, or if to gain consent would place a child at risk).

General lawfulness of processing [of personal data]:

• Article 6(1)c: processing is necessary for compliance with a legal obligation to which the controller is subject
• Article 6(1)e: processing is necessary for the performance of a task carried out in the public interest or the exercise of the official authority vested in the controller
• Processing of special categories of personal data:
• Article 9(2)h: processing is necessary for the purposes of preventive or occupational medicine, for the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services on the basis of Union or Member State law or pursuant to contract with a health professional and subject to the conditions and safeguards referred to with the Schedule 1, Part 2 of of the DPA 2018 substantial public interest condition being paras 6 (6. Statutory and government purposes) and 18 (Safeguarding of children and individuals at risk) with the underlying law being the Children Act 2004 and the statutory guidance Working Together to Safeguard Children
• Article 9(g) Reasons of substantial public interest (with a basis in law), Data Protection Act 2018 with the Schedule 1, Part 2 of the DPA 2018 substantial public interest condition being paras 6 (6. Statutory and government purposes) and 18 (Safeguarding of children and individuals at risk) with the underlying law being the Children Act 2004 and the statutory guidance Working Together to Safeguard Children.

What type of information will be shared with CP-IS

Basic information about a child’s plan will be shared. The purpose of sharing this information is to ensure health and care professionals know if a child is on a child protection plan or is cared for, as they have a statutory responsibility and professional duty of care to ensure the health and wellbeing of a child. This information is needed so health and care workers can assess the risks to the child and determine the right care and support pertaining to their health and welfare and any appropriate actions that may be necessary.

This data will also inform social workers about a child who is on child protection or child we care for plan if they have attended any health setting to assess whether an intervention may be necessary to safeguard and protect the child. 

What are your rights?

In addition to having the right to be informed about how we will use your information, you have the right (free of charge) to the following:

• access to personal information we hold about you
• to have your information corrected if there are inaccuracies or if the information is incomplete
• to restrict the processing of your information in certain circumstances in accordance with applicable law
• in some instances, to object to your personal information being used at all due to special grounds relating to your particular situation - however, there may be compelling reasons why we may need to continue using your information even in these circumstances
• to be told if your personal information is lost and if, as a result, your privacy and rights may be at risk.

Who can I contact with any questions or complaints?

Please speak to your usual contact in the council in the first instance. If you are still unhappy, you may contact the council’s Data Protection Officer as follows:

Information Management Team
Oxfordshire County Council
County Hall
New Road
Oxford
OX1 1ND
dataprotectionofficer@oxfordshire.gov.uk

You can also complete the online complaints form.

You also have the right to appeal to the Information Commissioner’s Office which is the UK regulatory authority for data protection issues:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
www.ico.org.uk