Health and Care Experience Survey 2021: privacy notice

The 2021 Health and Care Experience Survey (HACE) asks about your experiences of your GP practice; Out of Hours healthcare; care, support and help with everyday living; and caring responsibilities. 

The survey is run in partnership by the Scottish Government and Public Health Scotland (PHS, part of NHS Scotland). Both the Scottish Government and PHS are involved in the planning and organisation of the survey, as well as analysing and reporting on the survey responses. An approved patient survey contractor, Quality Health, has been appointed to administer the survey fieldwork on their behalf.

This project has been approved by the Public Benefit and Privacy Panel for Health and Social Care in Scotland (ref: 1617-0321 approval letter and amendments for the 2021 survey).

This privacy notice explains how your personal data collected through the survey is used. 

More information about how Public Health Scotland uses patient data is available online via the Public Health Scotland website.

More information on how NHS Scotland may use your personal data is available online via the NHS Inform Website.

Contents

• why this survey is needed
• lawful basis
• how we got your details
• who has access to information that identifies you
• how your survey responses are used
• how your additional comments are used
• how long your information is stored for
• your rights
• how to contact us

Why this survey is needed

The survey aims to provide local and national information on the quality of health and care services from the perspective of those using them. They allow local health and care providers to compare with other areas of Scotland and to track progress in improving the experiences of people using their services.

The survey programme supports three strategic objectives for both the Scottish Government and NHS Scotland – that care be safe, effective and person centred – by providing a basis for the measurement of quality as experienced by people across Scotland. The surveys support the person-centred objective, which is focused on ensuring that care is responsive to people's individual preferences, needs and values. In addition, they support the Chief Medical Officers vision that, by 2025, we will support the Health and Social Care workforce to practice Realistic Medicine, thereby enabling the delivery of high quality and personalised care to the people of Scotland.

The survey’s specific objectives are:

For local improvement:

• provide GP practices with structured feedback on people's experiences of their service, relative to other practices in Scotland and to previous results
• provide NHS Boards, Health & Social Care Partnerships and GP Clusters with information about people's experiences in their respective areas and about variation within and between local areas

National results:

• for informing national planning and monitoring performance
• identify variation within and between local areas and if and how the level of positive and negative experiences have changed over time
• highlight areas of best practice and areas for improvement
• inform the Quality of Care Experience National Performance Framework indicator
• monitor the NHS Scotland LDP standards on accessing GP services
• informs nine out of the twenty-three health and wellbeing outcomes indicators under the Public Bodies (Joint Working) (Scotland) Act 2014

This survey is a means for Scottish Ministers to monitor how well they are fulfilling their duty, under Section 1 of the NHS (S) Act 1978, to continue to promote a comprehensive and integrated health service that is designed to secure:

• improvement in the physical and mental health of the people of Scotland, and
• the prevention, diagnosis and treatment of illness, and for that purpose to provide or secure the effective provision of services in accordance with the 1978 Act

Lawful basis

We conduct this survey as a “public task in the public interest”. Our legal basis is that the use is necessary:

• for reasons of public interest in the area of public health
• for providing health or social care or treatment or managing health or social care systems and services
• for archiving, scientific or historical research, or statistical purposes

How we got your details

The Scottish Government submitted an application to the Public Benefit and Privacy Panel (PBPP) seeking approval to use the NHS database of patients registered with a GP practice to identify a survey sample and approach individuals. A copy of the approval letter from the PBPP (ref: 1617-0321) is available via our webpages.

PHS selected names and addresses at random from all those who are registered with a GP Practice in Scotland, live at a Scottish address and are aged 17 and over.

Who has access to information that identifies you

Only specifically authorised personnel within PHS and Quality Health have access to the name and address of the individuals who are sent the survey. 

Quality Health has only been given your name and address for the purpose of mailing you the survey and they are required to destroy this information once the survey work has been completed. They have signed a contract which stipulates this. They do not have access to any other information about you.

PHS also securely shares some identifiable data with staff at the NHS Central Register (NHS CR) and Atos Origin Alliance (who host the CHI database), who run checks to reduce the risk of sending a survey pack to someone who has died.

Individual survey responses are tracked and stored using a unique survey ID number. Only specifically authorised NHS analysts at PHS will retain a record of the identity of those who took part in the survey and this will be stored separately from the survey responses.

No access to your identity, including name and address, will be given to GP Practices, NHS Boards, the Scottish Government or any other organisation or individual. The health and care professionals involved in your treatment or care will not know whether or not you took part in the survey.

All of the organisations involved in handling your name and address for the purpose of this survey adhere to the Information Sharing Toolkit Scotland. This brings together all of the statutory requirements, standards and best practice that apply to the handling of personal information, including requirements set out in Data Protection legislation. All transfers of personal or identifiable data are carried out securely.

How your survey responses are used

Access to your individual responses, held against the unique survey ID number, is very tightly controlled and is restricted to named individuals within PHS, the Scottish Government and Quality Health. 

Before any analysis takes place, PHS analysts will use your postcode to identify whereabouts in Scotland you live. They will then link your survey responses to the area of Scotland you live in (so that we can compare responses from people living in different areas). PHS analysts will also link your survey responses to the GP practice you are registered with (so that we can produce reports about each GP practice) and to your age group and sex (so that we can make sure that responses are representative of the population). PHS analysts will not link your name and address to the survey responses. The survey responses will then be analysed by specifically authorised PHS and Scottish Government analysts who will produce national and local reports on the results, and carry out ad-hoc analyses. No individuals will be identifiable in the responses dataset or in the reported results. The reports will be published in April 2022 and will be made available on our website. 

The arrangements for protecting the confidentiality and privacy of individual information within the analysis are made in accordance with the Office for National Statistics Anonymisation and data confidentiality policy and PHS protocols.

The survey dataset, containing individual level survey responses but not including anything that identifies individuals, will sometimes be shared with a third party, such as a charity or academic researcher, for the purpose of undertaking additional analysis. Before any data are shared, the third party must seek the necessary approvals from the relevant NHS research, ethics and governance groups and sign a Data Processing Agreement or Data Sharing Agreement with the Scottish Government and PHS.

Sometimes survey responses are linked to other data sources in order to undertake other analyses. Linkage of survey responses can only be done by specifically authorised NHS analysts working at PHS and is only done once the necessary approvals have been granted by the relevant NHS research, ethics and governance groups. All personnel involved with this additional analysis are governed by the Information Sharing Toolkit.

How your additional comments are used

Additional comments made by respondents on the survey form are shared with Health and Care services for service improvement. All comments are anonymised before they are shared or analysed to ensure your identity is protected. 

This means that all personal details; all references to staff / patient / ward / unit names; and any other information which might allow an individual to be identified, such as specific diagnoses/tests/procedures will be removed.

For example, if an individual had written “Doctor Smith was very nice”, this would be anonymised to “Doctor [name removed] was very nice”. Similarly, if an individual had written “I work as a male midwife on Trinity Ward”, this would be anonymised to “I work as a [job title removed] on Ward [name removed]”.

Anonymised additional comments from the survey will sometimes be shared with a third party, such as a charity or academic researcher, for the purpose of undertaking additional analysis. They will only be shared once appropriate approvals and governance are in place.

How long your information is stored for

All survey responses are stored securely and confidentially under the terms of Data Protection legislation.

Quality Health are required to destroy names and addresses once the survey work is complete. They will destroy hard copies of returned surveys once scanned copies are available and stored securely.

The survey dataset, containing individual level survey responses but not including anything that identifies individuals, will be stored by Quality Health for a period of five years and by the Scottish Government and PHS indefinitely. This is to allow additional analysis to be carried out as required, for example time trends or more detailed analysis of particular aspects of the survey responses. This retention will be reviewed regularly to ensure that it is still appropriate to hold the data.

Scanned copies of completed questionnaires will be held by Quality Health for three years then destroyed as there will no longer be a need for them.

A file containing personal identifiers and the respondents’ unique survey ID numbers will be stored by PHS indefinitely. This file will be stored separately from the individual level survey responses. This file is retained to allow future data linkage with other data. This linkage would only be done where the necessary approvals have been granted by the relevant NHS research, ethics and governance groups.

Your rights

Taking part in the survey is voluntary. Completing the survey gives you an opportunity to provide feedback on your experience of health and care services in your local area. You don’t have to answer every question if you don’t want to and you will be asked to skip questions that don’t apply. 

None of the health or social care professionals involved in your care will know whether or not you have responded.

If you have received a survey form and do not wish to be contacted again, please contact the free survey helpline which is detailed on your survey letter and request that you are not sent a reminder.

Data Protection legislation gives rights to individuals in respect of the personal data that organisations hold about them. These include:

• the right to be informed
• the right of access
• the right to rectification
• the right to erasure
• the right to restrict processing
• the right to data portability
• the right to object
• rights in relation to automated decision making and profiling

The Information Commissioners Office provides more information on your rights under Data Protection legislation.

If you are concerned about our information rights practices you should contact us directly by writing to the Scottish Government’s Data Protection Officer at:

Data Protection Officer

Victoria Quay

Commercial Street

Edinburgh

EH6 6QQ

Email: DataProtectionOfficer@gov.scot

If you have engaged with us and are still dissatisfied, you have the right to lodge a complaint with the Information Commissioners Office. For more information see the Information Commisioner's Office's website.

How to contact us

Please contact us if you have any concerns about our privacy policy or information we hold about you. You can contact us at:

Care Experience Team

Basement Rear

St Andrew’s House

Regent Road

Edinburgh

EH1 3DG.

E-mail: patientexperience@gov.scot

Quality Health can be contacted at:

Quality Health

Unit 1

Holmewood Business Park

Chesterfield Road

Holmewood,

Chesterfield

Derbyshire

S42 5US

Tel: 0800 783 1775

E-mail: helpline@quality-health.co.uk

We have published more information about the survey and its background.