[Skip to content]


Privacy notice

What we do

NHS South Kent Coast (CCG) is responsible for planning and buying (also known as ‘commissioning’) health services from healthcare providers such as hospitals, as well as directly providing some health services such as continuing healthcare and Individual Funding Requests.

We are a membership body made up of all GP practices in the South Kent Coast area.  We do not provide healthcare services like a GP practice or hospital. Our role is to make sure the appropriate NHS care is in place for the people of South Kent Coast within our available budget.

As an NHS organisation, South Kent Coast CCG operates at a number of different levels in regards to the processing of personal data. We act as a Controller primarily for the management of data relating to our employees and those working on behalf of or with our organisation and also covering some NHS patient provider functions. 

What is a privacy notice?

The EU General Data Protection Regulation (GDPR) requires that Controllers provide certain information to people whose information (personal data) they hold and use. A privacy notice is one way of providing this information.

A privacy notice should identify who the Controller is, including contact details for the Data Protection Officer. It should also explain the purposes for which personal data are collected and used, how the data are used and disclosed, how long the data is kept, and the Controller’s legal basis for processing.

Why we collect information about you

In carrying out our role and responsibilities as a commissioner of services for people living in South Kent Coast, it is essential that the CCG has an understanding of the health and social care needs of our community.  The only way that we can achieve this is by using information that your GP, your clinician or your social worker has entered into your care record, as well as some information that is provided via external public sources such as, hospitals. This information may exist on paper or in electronic format and South Kent Coast CCG ensures that these are kept safe and secure in an appropriate way.

We do not however, need to have and use all the information that is provided.  Where this is identified, information is de-identified by the Data Services for Commissioners Regional Offices (DSCRO) prior to being shared with the rest of the CCG for its use. Further information regarding this, can be provided on request.

We may keep your information in written form and / or in digital form. The records may include basic details about you, such as your name and address or may also contain more sensitive information about your health and social care usage and also information such as outcomes of needs assessments.

South Kent Coast CCG may collect information about you which helps us to respond to your queries and help us to design services to improve the health needs and outcomes of local people.

How we use your information

Please select the information that is relevant to you from the list below for full details on how your information is used.


CCG oversight and responsibility

South Kent Coast CCG is supported by a number of key roles within the CCG led by the Senior Information Risk Owner, who is accountable for information risk management within the CCG; The Caldicott Guardian who advises the CCG on specific issues relating to the use of patient confidential data and the Data Protection Officer who provides advice and support to the CCG on Data Protection compliance and monitoring obligation. These roles have oversight of the handling of information within the CCG or by any support organisations we may buy services from.

  • The Senior Information Risk Officer or SIRO for the CCG is Anthony May.
  • The Caldicott Guardian for the CCG is Dr Jonathan Bryant.
  • The Data Protection Officer for the CCG is Michelle Harris.


For more information on these roles, please click here.

Relevant links to associated documents or organisations:

If you would like to find out more information on the wider health and care system approach to using personal information or other useful information, please click on the following links: