This is not an exhaustive list; the following pages provide key examples of the personal information ICB collects.

Our lawful Basis for processing personal information are Public Task and Explicit Consent

The General Data Protection Regulation definition for processing

Public Task

• Articles 6(1)(e) of GDPR: (e) Public task: the processing is necessary for you to perform a task in the public interest or for your official functions, and the task or function has a clear basis in law.

• Article 9(2)(h) of GDPR: (h) Health or social care (with a basis in law): (preventive or occupational medicine, for the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services)

Explicit Consent

• Articles 6(1)(a) the data subject has given consent to the processing of his or her personal data for one or more specific purposes.

• Article 9(2)(a) of GDPR: (a) Explicit consent: the data subject has given consent to the processing of his or her personal data for one or more specific purposes

Where the Common Law Duty of Confidentiality applies information is usually shared under Implied or Explicit Consent.

Purpose, Legal Basis and Processing Activities details for: