Introduction
1. The Lampard Inquiry (the Inquiry) is a statutory inquiry under the Inquiries Act 2005 investigating deaths of mental health inpatients in Essex. This notice explains how the Lampard Inquiry collects and uses personal information.
2. This notice covers personal information collected or created by the Inquiry. In considering how it handles and uses personal information, the Inquiry has reviewed the best practice guidelines on records management, information retention, and handling sensitive material issued by the National Archives Office.
3.In order for the Inquiry to meet its Terms of Reference, it will be necessary for the Inquiry to obtain and use personal information in several ways. These include gathering information and evidence, obtaining witness statements, communicating with those affected by the Inquiry and the wider public, operating our website, the internal management of the Inquiry (for example the data of our staff) and complying with any legal obligations. Personal information may also be referred to within public hearings, published by the Inquiry on its website and included within the Inquiry’s final report.
4. The Inquiry expects to handle a wide range of material and documents within its investigations which may contain personal data. These may be provided voluntarily from individuals or organisations. The Inquiry also has powers to compel the provision of documents to assist in meeting its Terms of Reference. These documents may include (but are not limited to) letters, emails, electronic messages, medical records, notes, audio files, reports, witness statements, personnel records, minutes from meetings, policies, training records, information from websites, recordings and transcripts of evidence sessions and hearings.
5. This notice may be amended to reflect any changes in the Inquiry’s practices or to mention new types of information handled by the Inquiry. When that happens, an updated version of this policy will be made available on the Inquiry website.
Personal Data and Special Category Data
6. “Personal data” means any information relating to an identified living person, or which could be used to identify a living person. The Inquiry will collect personal data, such as names, contact details, financial and lifestyle information, images, voice and video recordings either directly from the person, or from individuals or organisations who may supply data about other people.
7. The Inquiry will also collect and process some more sensitive information, such as data relating to health, religious beliefs, racial or ethnic origin, trade union membership and matters relating to sex and sexual orientation. This is referred to as “special category data”. The Inquiry may also process sensitive personal data relating to criminal offences.
8. The Inquiry will also collect and process data in relation to those who are deceased. Whilst the provisions of data protection legislation only apply to those who are living, the Inquiry will treat the data of deceased individuals respectfully. The Inquiry will take into consideration any concerns raised by the families about how their data are collected and processed by the Inquiry.
Lawful Basis for Processing Data
9. The Inquiry processes personal information fairly and lawfully in accordance with data protection legislation, including the Data Protection Act 2018 and the UK General Data Protection Regulation.
10. The Inquiry collects, stores, shares and uses personal information in order to carry out its work. The work of the Inquiry further to its Terms of Reference is a task carried out in the public interest, in accordance with the Inquiries Act 2005, which is a lawful basis for processing data under the data protection legislation. There may be limited occasions when the Inquiry processes personal data and special category data on the grounds of vital interest. Personal information provided to the Inquiry by an individual may also be processed with their consent (which can be withdrawn). Personal information may also be processed where it is necessary for the Inquiry to comply with a legal obligation, such as the duty to ensure reasonable public access to information and evidence. Personal information provided to the Inquiry by a party it has entered into a contract with (for example for administrative services required for the internal management of the Inquiry) may also be processed in light of contractual obligations.
11. It is necessary for reasons of substantial public interest for special category data, and for criminal offences data to be processed by the Inquiry. In fulfilling its Terms of Reference under the Inquiries Act 2005, the Inquiry will be considering recommendations to reduce the risk of harm to members of the public and to address failings in mental health services in Essex. The Inquiry does not consider it would be possible to achieve this goal without processing this kind of data or by processing it in some lesser way.
Sharing Information
12. The Inquiry will need to share personal data with others. This may involve sharing information with third party data processors who provide information management, administrative services or support to the Inquiry, the data storage facilities of which may be based outside the EU. The Inquiry will require any third-party data processors to ensure that personal data is securely stored and correctly handled.
13. The Inquiry will also need to share personal information with individuals or organisations which could assist the Inquiry with its investigations and to meet its Terms of Reference. This may include members of the Inquiry team; individuals and organisations who are ‘Core Participants’ or otherwise involved in the Inquiry together with their legal advisors; experts or assessors who are asked to provide advice to the Inquiry and other organisations and individuals who are tasked to assist the Inquiry team in the operation of the Inquiry. The Inquiry may also share information with the general public (via Inquiry hearings or through evidence or information posted on the Inquiry website.
14. The Inquiry may also be required to share information with third parties in order to comply with any legal obligations.
Handling, Storage and Destruction of Information
15. The Inquiry will store personal information securely and handle such information fairly and lawfully in accordance with data protection legislation. All members of the Inquiry will receive training on their obligations in handling personal data.
16. The Inquiry will only retain personal information for as long as it requires to fulfil its public function and to meet the Terms of Reference.
17. The Inquiry will publish a report of its findings and recommendations. Once it has done so, some of the documents obtained or created by the Inquiry will be preserved as part of the public record, and as required transferred to the National Archives in accordance with the Public Records Act 1958.
18. Subject to the exceptions set out below, the Inquiry will destroy any documents which it has gathered or created once it comes to an end. Documents will not be destroyed if they are preserved for the public record, where an individual requests the return of an original document or where the Inquiry is required to share or keep a document to comply with any regulation or law.
What are your rights?
19. You are entitled to request information about how your personal data is processed by the Inquiry. You are also able to request a copy of that personal data, to ask for corrections to be made to it. In some circumstances, you may ask for your personal data to be deleted. You may in certain circumstances ask for the processing of your personal data to be restricted or to object to the processing of it.
20. All requests should be sent to the Inquiry’s Data Protection Officer, using the contact details below.
Further Information
21. If you have any queries about this policy or the way that the Inquiry uses personal data, please contact the Inquiry’s Data Protection Officer via email at: contact@lampardinquiry.org.uk.
22. The Inquiry is registered with the Information Commissioner’s Office as a data controller. Details of the Inquiry’s registration, number ZB065538, can be viewed at www.ico.gov.uk.
23. If you wish to make a complaint about the way the Inquiry handles your personal data, you can contact the Information Commissioner’s Office at www.ico.org.uk.
