Skip to content
Town Hall icon

Direct Payments Privacy Notice

The following privacy notice applies to the London Borough of Islington’s Direct Payments for Children, Young People and Adults.

This privacy notice explains how the Council uses your data to process Direct Payments, including for ongoing case management, financial auditing of Direct Payment accounts, and assisting with managing employment responsibilities, including the requesting of Enhanced DBS and Barred list checks for Personal Assistants employed through a Direct Payment.

What information we collect, hold and use

The information we may collect about you could include, but is not limited to:

  • Name
  • Date of birth
  • Address and post code
  • Contact details (phone/mobile/email)
  • NHS number
  • NI number
  • Other ID numbers
  • Family details
  • Lifestyle and social circumstances
  • Case file information
  • Financial information

We may ask you for special category data, where required and appropriate. This could include, but is not limited to:

  • Racial or ethnic origin
  • Physical and mental health details
  • Religious beliefs
  • Social care support outcomes
  • Sexual orientation

We may also process data about criminal convictions, criminal offenses or relevant security measures.

We use your personal information to:

Ensure that we meet all of our legal and statutory duties including, but not limited to, those which apply under the following legislation and/or contractual agreements:

  • Care Act 2014
  • Care and Support (Direct Payments) Regulations 2014
  • Data Protection Act 2018

We may also use your data:

  • For service delivery
  • For service planning, training and improvement
  •  For financial processing
  • To prevent and detect crime and fraud
    For historical and statistical research

Call recording

Any personal information recorded during telephone conversations may be stored on the system for a fixed period, after which it is securely deleted.

What legal reasons allow us to use your data in this way?

The Council relies on the following lawful basis for processing your personal data under the GDPR:

  • Contractual obligation
  • Legal obligation
  • Vital interest
  • Performance of a public task
  • Legitimate interest 

We also rely on the following for processing special category data:

  • Vital interests
  • Legal claims or judicial acts
  • Health or social care

If we process information about criminal convictions, criminal offences and related security measures, we rely upon the following lawful basis:

  • Legal obligation
  • Vital interest
  • Performance of a public task

In addition, we also rely upon the “Health or Social Care purposes” and “Preventing fraud” conditions under Schedule 1 of the Data Protection Act 2018.

Agencies we might share the information with include:

  • NHS agencies (GPs, Hospitals)
  • Health organisations
  • Welfare organisations
  • Voluntary and charitable organisations
  • Care Providers
  • Residential care/nursing providers
  • Government organisations
  • The Police
  • Prisons and probation services
  • Courts
  • Other customers and service users
  • Family Members
  • Carers and Guardians
  • Financial organisations
  • Regulators
  • Pension regulators and authorities
  • The disclosure and barring service
  • Legal representatives
  • Direct Payment support service providers
  • Nominated/Authorised persons


Unless specified in the legislation cited above, we will keep the information you provide in line with the council’s Retention Schedule.


Please see the council’s main privacy notice for details about your rights and who to contact about the use of your personal data.

If you are dissatisfied with the service you have been provided and have exhausted the council’s corporate complaints process, you can refer any complaints to the Local Government Ombudsman. Details of how to complain.

Was this information helpful?

Data protection: We will handle your personal information in line with the Data Protection Act 1998 and in accordance with the council’s Fair Processing Notice.