Privacy and security notice for the collection, storage and analysis of data, and dissemination of aggregated data, generated through LaingBuisson’s Care Home Benchmarking Service
June 2023
- Why are we collecting this data?
The purpose is twofold:
- To enable owners and managers of care homes to benchmark key indicators of business activity (including staff input, pay rates, occupancy, funding sources, fee levels and costs) against their local peers;
- To generate timely and reliable information, aggregated at a national and local level, which can assist LaingBuisson and accredited independent sector interests in promoting the economic case for fair fees, and fair pay and employment terms, to government, council and NHS commissioners, the media, and the general public.
- What is the legal basis for processing activities?
The legal basis for the processing activities is to enable the performance of a contract for services between LaingBuisson, the service provider, and participating care homes and groups. The services consist of providing participating homes with aggregated local benchmarking data in a form that allows each participating home to compare its data with an average or a range from its local peers, at the same time maintaining confidentiality of each participant’s data. Participating care homes remain responsible for data uploaded to the service. That is, they are the Data Controllers. Care homes should ensure that they follow the requirements of data protection legislation. LaingBuisson is the Data Processor in this arrangement.
- What personal data is being collected by this project?
The only personal data that is being collected is the name and contact details of the individual uploading the participating care homes data (the Respondent). This data is required for the parties to communicate and to enable LaingBuisson to check and validate uploaded data if required. Full data entered into the system is at the discretion of participating care homes, which must have identified an appropriate lawful basis for this usage. All data, except the Respondent’s full name, can be excluded. However, this would impact on the service provided.
- Who will the personal data be shared with?
Personal data will not be shared with any other third parties. All data and software are held on LaingBuisson’s private servers which are hosted by Fasthosts using industry leading security and encryption. Access to the data is limited to LaingBuisson employees or contracted staff, who understand and have agreed to our Data Protection Policy.
- What confidential data is being collected by this project?
Confidential data will not be shared with any other third parties. All data and software are held on LaingBuisson’s private servers which are hosted by Fasthosts using industry leading security and encryption. Access to the data is limited to LaingBuisson employees or contracted staff, who understand and have agreed to our Data Protection Policy. Aggregated data, calculated from the confidential data, may be disseminated, but only so far as no individual care home’s data is revealed and, using the appropriate protocols, no individual care home’s data can be deduced.
- Who will the confidential data be shared with?
Confidential data will not be shared with any other third parties. However, the Benchmarking Service is hosted by a third party (Jaguar Computers Ltd) and third party software (Jaguar Computers Ltd) is used for report production. Aggregated data, calculated from the confidential data, may be disseminated, but only so far as no individual care home’s data is revealed and, using the appropriate protocols, no individual care home’s data can be deduced.
- Is personal data being transferred outside of the European Economic Area (EEA)?
No personal data is stored or transferred out of the EEA
- How long will personal data be retained?
Data belonging to care homes which cease to participate in the service will be securely deleted on request.
- Can I stop my personal data being used?
LaingBuisson handles your personal data in accordance with the rights given to individuals under data protection legislation. If at any time you wish us to withdraw your data, or correct errors in it, please contact the Operations Manager at [email protected] including your name and the organisation you work for or make a request by post to: The Operations Manager, LaingBuisson, First Floor, 24 Angel Gate, London, EC1V 2PT.
- How will personal and confidential data be securely stored?
All data is stored on LaingBuisson’s central database which uses industry leading security protocols via our provider Fasthosts. LaingBuisson run regular maintenance on our database and have a systematic backup schedule.
Access to the data is limited to LaingBuisson employees or contracted staff, who abide by internal LaingBuisson data policies, GDPR, and Data Protection Laws and Regulations.
Access to results will be made available to a nominated individual following submission of a care home’s data. The results portal uses a certified HTTPS connection, password encryption and two-factor authentication with each login.
- Who can I contact about this project?
Any queries – please contact: Hina Choksy Evans at [email protected]
If you have a concern about the way LaingBuisson processes your personal data we request that you raise your concern with us in the first instance ([email protected]). Alternatively, you can contact the Information Commissioner’s office, the body responsible for enforcing data protection legislation in the UK at https://ico.org.uk/concerns/).
