Maternity and Neonatal Independent Senior Advocacy - Privacy Notice

NHS Somerset ICB and NHS England are working together to deliver the MNISA service.

For the purposes of data protection laws the ICB and NHS England are “joint controllers” for the use (processing) of your personal information in this notice. This means that we have both worked together to decide why and how your personal data is processed. It also means that we are jointly responsible for that processing.

To confirm -

  • NHS Somerset ICB is responsible for handling your personal information regarding any engagement you have with the MNISA service.
  • NHS England has responsibility for providing the reporting system that the MNISA service (delivered by NHS Somerset ICB) uses to handle your personal information. For example, securely storing any information you provide when engaging with the service. NHS England will also process your de-identified and anonymised data to ensure the service works and can improve and adapt to any changing requirements.

In this notice, any reference to “we”, “us” or “our” is NHS Somerset ICB and any reference to NHS England is given directly.

This notice describes how and why your personal information is used and by who. Any sharing of that information; by who and why. As well as how to contact us, or NHS England, should you have any questions or concerns about the use of your personal information.

Whilst the ICB and NHS England are joint controllers for your information. The ICB is the point of contact for any data protection queries. For further information about NHS England, including how to contact us, please see our privacy notice here. The NHS Somerset ICB privacy notice can also be accessed here.

Our contact details 

Name:  NHS Somerset Integrated Care Board

Address: Wynford House, Lufton Way, Lufton, Yeovil, Somerset, BA22 8HR

Phone Number: 01935 384000


The type of personal information we collect 

We collect and process the following information:

  • Your contact information; name, telephone number, email address
  • Health related information
  • Date and details relating to your experiences
  • Racial or ethnic origin

How we get the personal information and why we have it

  • We collect personal data from you when you approach the MNISA service to engage with an Advocate/the service
  • We use the personal data, you provide us with, in order to give you relevant support in relation to your experience
  • This includes:
    • Engaging with the healthcare setting you are involved in to seek improvement, dialogue or understand issues
    • Provide you with any signposting for other support relevant to your situation
  • We may also access records held by the Local Maternity & Neonatal Service (provided by Somerset NHS Foundation Trust), to help us understand the care that has been provided to you
  • NHS England use your personal data to assess the viability of the service and ensure improvement in services; for both the MNISA and maternity services
    • This includes using de-identified information to help understand themes and trends raised, scope and reach of the service, to be able to report progress of the pilot and to help understand the impact of the MNISA work.

We may share your information with the healthcare setting you have told us about.

We will talk with you about what information we feel may be necessary to share in order to seek improvement or engage in discussions with them about your experiences.

Under the UK General Data Protection Regulation (UK GDPR), NHS Somerset ICB and NHS England will rely upon the following lawful bases to process your data, in the delivery of this service:

  • Article 6(1)(e) - We need it to perform a public task.
  • Article 9(2)(h) - We need it for the provision and management of our health or social care system

How we store your personal information 

Your personal information is stored securely on NHS England’s IT system. Your personal information will not be routinely accessed by anyone in the ICB or NHS England, apart from the MNISA themselves; unless a technical issue arises that requires NHS England to access the system, in order to assess the issue and undertake work to maintain the security and functionality of the system and its data. If your advocate is absent, your case may be transferred to an advocate in another ICB, with your agreement.

Your personal data will be retained and disposed of in line with the NHSX_Records_Management_CoP_V7.pdf (

 Your data protection rights

Under data protection law, you have a number of data protection rights. For example, right of access, where you have the right to ask us for copies of your personal information. You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

The regulatory body responsible for upholding data protection, the Information Commissioner’s Office (ICO) also has information regarding data subject rights which can be found here.

Please contact NHS Somerset ICB if you wish to make a request.

 How to complain

If you have any concerns about our use of your personal information, you can make a complaint to us, using the contact details above.

You can also complain to the ICO if you are unhappy with how we have used your data. Their address is:

Information Commissioner’s Office

Wycliffe House

Water Lane




Helpline number: 0303 123 1113

ICO website: