Where do we get your data from and who will we share it with?

The personal information we collect, use and share comes from a variety of sources. We also sometimes need to share your personal information with other people and organisations. Our sources and recipients of personal data are:

Sources:

• Your care provider(s)
• The NHS
• Directly from you

Recipients

• The Department of Health and Social Care (DHSC) 
• NHS track and trace for system registration and results
• National Test and Trace service (NTAT)
• NHS Digital
• NHS England
• GCC Internal departments tasked with the response to Covid-19
• Department for Environment, Food and Rural affairs (DEFRA)
• Information Commissioners Office (ICO)
• The Local Government Ombudsman
• Other central government departments
• Police
• GP practices
• Gloucestershire Health and Care NHS Foundation Trust
• Gloucestershire Hospitals NHS Foundation Trust
• NHS Improvement
• Public Health England
• Other providers of healthcare or NHS bodies where appropriate
• Gloucester City Council
• Cheltenham Borough Counci
• Tewkesbury Borough Council
• Stroud District Council
• Cotswold District Council
• Forest of Dean District Council
• Other local authorities where appropriate
• Community Groups
• Volunteers and charities
•  3^rd party contractors
• Tesco PLC
• Insurance and legal advisory services (internal and external)

Your personal data may also be shared with regulatory and statutory bodies who assess council performance and financial spend, as well as where required by law, such as to prevent and detect crime or fraudulent activity.

Gloucestershire County Council uses third party suppliers to provide Information Technology and Communications solutions, support and hosting services.  These organisations may process your personal data only where it is necessary as part of the service they provide.  These organisations are contractually obliged to handle and protect your data in line with data protection legislation and council policies.