Adult Social Care privacy notice

This policy explains how the information that we collect about you is used and your rights in relation to that information.

Controller DPO

Our controller Data Protection Officer (DPO) is the Head of Information Governance.

Contact the Data Protection Officer.

Information we may collect

  • Name
  • Email Address Telephone Number
  • Postal Address
  • Accommodation type and tenure
  • Date of Birth/Age
  • Gender
  • Ethnicity
  • Religion
  • Communication needs including if interpreter required
  • Financial information such as income and details of property ownership.
  • Bank/Payment Information (where applicable)
  • Relationship information such as next of kin such as Agent/Next of Kin/Carer contact and other details (if applicable)
  • Details of your disability / medical conditions and mental health and wellbeing Assessments
  • Reviews
  • National insurance number (if appropriate)
  • Health/Hospital information including NHS number
  • Care and /Support Plan
  • GP details
  • Social Care services/support received
  • Occupation/Education information
  • Approved Mental Health Assessments 

Special Categories of personal data

  • Information about you racial or ethnic origin, religious or philosophical belief and your sexual orientation
  • Information about health conditions or disabilities that may apply to you
  • Information about you and your circumstances
  • Information about relevant health and safety concerns
  • Information about your needs and wishes


  • Service Delivery (provide information and advice, assess, arrange or provide adult social care services) or arrange for others to provide services to meet your needs
  • Protection of Vulnerable adults
  • The personal information that we have collected from you may be shared with fraud prevention agencies who will use it to prevent fraud and money-laundering and to verify your identity. If fraud is detected, you could be refused certain services, finance, or employment. Further details of how your information will be used by us and these fraud prevention agencies, and your data protection rights, can be found on the CIFAS website.

Lawful Basis

We rely on the following legal bases

  • Processing is necessary for the performance of a task carried out in the public interest with a basis in law or in the exercise of official authority vested in the controller.
  • Processing is necessary for compliance with a legal obligation to which the controller is subject

These legal bases are underpinned by acts of legislation that dictates what actions can and should be taken by local authorities, including the following: Care Act 2014, Mental Capacity Act 2005, Deprivation of Liberty Safeguards 2007, Mental Health Act 1983, Children and Families Act 2014, Housing Grants, Construction and Regeneration Act 1996, Health and Care Act 2015, Homeless Reduction Act 2017, and the Human Rights Act 1998

When we collect “special categories of personal data” we rely on the following additional legal bases:

  • Processing is necessary for reasons of substantial public interest (safeguarding of individuals at risk)
  • Processing is necessary for the provision of health or social care or treatment or the management of health or social care systems and services.


  • Approved Building Contractors
  • Authorised partner organisations that we commission to provide care and support, such as home care agencies or care homes (also referred to as ‘providers’).
  • Cabinet members
  • Care Quality Commission (CQC)
  • Care Providers
  • Community Health
  • Equipment providers and suppliers
  • General Practices
  • Government departments who administer welfare benefits
  • Guy’s and St Thomas’ NHS Foundation Trust
  • Housing associations
  • King's College Hospital NHS Foundation Trust
  • Lambeth Council Revenue and Benefits service including contractors working on their behalf
  • Local Authority teams who administer Housing benefit and Council Support benefits
  • Lambeth Housing
  • Landlords (if appropriate)
  • Legal representatives, such as solicitors
  • London Ambulance Service
  • London Fire Brigade
  • Metropolitan Police
  • Other Hospital Trusts
  • Other Local Authorities
  • St George’s University Hospitals NHS Foundation Trust
  • South London and Maudsley NHS Foundation Trust
  • Voluntary and community organisations


You have the right to access, rectify and delete personal information, in addition to other rights as explained in the full version of our privacy notice.

You have the right to contact us with a complaint if you’re unhappy with the way your personal data has been used.

We are committed to resolving complaints about our collection or use of personal information.

You also have the right to lodge a complaint with the Information Commissioners Office (ICO) if this issue is not resolved. You may at any time control access to and use of your personal information by contacting the Controller: Data Protection Officer (DPO).

Such control will include the ability to see what information we hold and to opt out of any use of your personal information and to prevent disclosure to any third party except as required by law or the order of a court of proper jurisdiction.

How long will we keep your personal information?

We only hold on to your information for as long as it’s necessary or as required by law. For   more information see Lambeth’s Retention Schedule.

Additional Information

To see a full version of our privacy notice, please visit:

Even though we are required to share your information with authorised partner organisations, we will ensure this is done in a secure manner, and the information is proportionate in order for them to arrange or deliver your services. Adult Social Care also delivers an Occupational Therapy Service and Benefits Advice.

It is very important that Adult Social Care is able to plan and realign its delivery of services to meet the needs of Lambeth's vulnerable adults. To do this, we carefully use the information we collect about how services are delivered and who is using these services.