Privacy and security notice for the collection, storage and analysis of data, and dissemination of aggregated data, generated through LaingBuisson’s Care Home Benchmarking Club
Why are we collecting this data?
The purpose is twofold:
- To enable owners and managers of care homes to benchmark key indicators of business activity (including staff input, pay rates, occupancy, funding sources, fee levels and costs) against their local peers.
- To generate timely and reliable information, aggregated at a national and local level, which can assist LaingBuisson and accredited independent sector interests in promoting the economic case for fair fees, and fair pay and employment terms, to government, council and NHS commissioners, the media and the general public.
What is the legal basis for processing activities?
The legal basis for the processing activities is to enable the performance of a contract for services between LaingBuisson, the service provider, and participating care homes. The services consist of providing participating homes with aggregated local benchmarking data in a form that allows each participating home to compare its data with an average or a range from its local peers, at the same time maintaining confidentiality of each participant’s data. Participating care homes remain responsible for data uploaded to the service. That is, they are the Data Controllers. Care homes should ensure that they follow the requirements of data protection legislation. LaingBuisson is the Data Processor in this arrangement.
What personal data is being collected by this project?
The only personal data that is being collected is the name and contact details of the individual uploading the participating care homes data (the Respondent). This data is required for the parties to communicate and to enable LaingBuisson to check and validate uploaded data if required. Full data entered into the system is at the discretion of participating care homes, which must have identified an appropriate lawful basis for this usage. All data, except the Respondent’s full name, can be excluded. However, this would impact on the service provided.
Who will the personal data be shared with?
LaingBuisson will only be collecting anonymised Personal Data. Personal data will not be shared with any third parties. Care Home Benchmarking Club is hosted by LaingBuisson, and all data we collect is stored securely in LaingBuisson’s central database. LaingBuisson are compliant with GDPR and Data Protection Laws and Regulations and do not share stored or live data with anyone apart from LaingBuisson.
What confidential data is being collected by this project?
All data being collected is confidential, other than that which is in the public domain by virtue of the participating care home being registered by the Care Quality Commission (England), the Care Inspectorate (Scotland), the Care Inspectorate Wales (Wales) or the Regulation and Quality Improvement Authority (Northern Ireland).
Who will the confidential data be shared with?
Confidential data will not be shared with any third parties. Care Home Benchmarking Club is hosted by LaingBuisson, and all data we collect is stored securely in LaingBuisson’s central database. LaingBuisson are compliant with GDPR and Data Protection Laws and Regulations and do not share stored or live data with anyone apart from LaingBuisson. Aggregated data, calculated from the confidential data, may be disseminated, but only so far as no individual care home’s data is revealed and, using the appropriate protocols, no individual care home’s data can be deduced.
Is personal data being transferred outside of the European Economic Area (EEA)?
No personal data is stored or transferred out of the EEA
How long will personal data be retained?
In anticipation of future use of the service, data will be stored securely for 12 months to allow for progress measures to be shown. Data belonging to care homes which do not return to the service will be securely deleted at the end of their subscription.
Can I stop my personal data being used?
LaingBuisson handles your personal data in accordance with the rights given to individuals under data protection legislation. If at any time you wish us to withdraw your data, or correct errors in it, please contact the Operations Manager at [email protected] including your name and the organisation you work for or make a request by post to: The Operations Manager, LaingBuisson, First Floor, 24 Angel Gate, London, EC1V 2PT.
How will personal and confidential data be securely stored?
All data is stored on LaingBuisson’s central database which uses industry leading security protocols via our provider Fasthosts (fasthosts.co,uk). LaingBuisson run regular maintenance on our database and have a systematic backup schedule.
Only internal LaingBuisson employees will have access to the data and abide by internal LaingBuisson data policies, GDPR, and Data Protection Laws and Regulations.
Who can I contact about this project?
Any queries – please contact: Lisa Fyfe at [email protected].
If you have a concern about the way LaingBuisson processes your personal data we request that you raise your concern with us in the first instance ([email protected]). Alternatively, you can contact the Information Commissioner’s office, the body responsible for enforcing data protection legislation in the UK at https://ico.org.uk/concerns/).
