How information is used
The Health and Social Care Information Centre (HSCIC) collects health and social care information from the NHS and care settings. We process this information and use it for a variety of purposes that benefit and lead to improvements in health and care for everyone. We assure the security of information and only release information where you can be identified where there is a legal basis to do so. For examples of where information has been used to benefit the health and care system see http://www.hscic.gov.uk/benefitscasestudies/extracts.
The HSCIC publishes registers of approved data releases showing where data has been released.
An organisation that collects and uses identifiable information is known as the data controller. By law (Data Protection Act, 1998) the data controller organisation must provide information about why the data are being collected and how they are being used.
HSCIC is the data controller for the information it collects when directed to do so under Section 254 of the Health and Social Care Act 2012. In some instances either NHS England or the Department of Health, who can direct the HSCIC to collect data, also have a role as data controller. All data controllers have a responsibility to let people know how their information is being used.