The Information Commissioner’s Office (ICO) is calling on people with experience of the care system in the UK to share the challenges they have faced when accessing their care records from organisations.
With a survey launched today, the UK data protection regulator is committing to improving the support it provides to both people who grew up in the care system in the UK and the organisations that hold their information.
The ICO recognises that records of personal information are especially important to people who have care experience, often revealing elements of their childhood history which they cannot recall. Under data protection law, everyone has rights over their own personal information. This includes the right to ask for this information using a subject access request (SAR) but for people with care experience, this can be a lengthy and stressful process.
Last year, the ICO ran workshops with organisations who support people with experience in the care system. The workshops identified that accessing care records is a significant issue with long delays, heavily redacted records and challenges accessing support. The insight revealed that organisations can struggle to understand what information they can release from complex records and often fail to treat these requests with the sensitivity they require.
It also highlighted that the regulator could do more to help people with care experience obtain their personal information and exercise other information rights, as well as support organisations to provide timely responses.
In response to the concerns raised, the ICO is now urging people with care experience in the UK to come forward to share their experiences both requesting their records and having their personal information handled in the care system. The information gathered about the impact of delays, redactions and other concerns will help the ICO identify areas where it can focus its support.
Catherine Evans O’Brien, Head of Communities at the ICO, said:
“Accessing care records can be an emotive and personal subject, as the information can play a huge role in helping someone to understand their identity. As the UK data protection regulator, we want to empower people to exercise their rights over their own personal information and we want to improve the support and resources we provide to help people understand these rights.
“This survey is a major step towards improving the experience of accessing personal information for people who have been in the care system. As well as experiences trying to access records, we want to hear about any concerns people have about how their personal information has been used, so we can understand where we can make the most difference with our support.”
Jackie McCartney, Ambassador for the Rees Foundation and care experienced campaigner, commented on her experience of accessing her records:
“Someone I do not know, someone who I do not have a relationship with, gets to decide what I can or cannot see. A total stranger knows more about me than I do, or ever will. This is my history and the whole process should be dealt with compassion and care.”
The ICO has also been engaging directly with local authorities in Scotland to improve response times where it has identified poor performance handling requests for care records. In Scotland, many local authorities have seen an increase in SARs, especially since the Redress Scheme requires people to submit supporting documents when applying for redress for abuse suffered while in care.
Jenny Brotchie, Regional Manager for Scotland at the ICO, said:
“We have heard how undue delays and other challenges accessing care records can cause further trauma for people in Scotland. Organisations must get this right which is why we are closely monitoring local authorities until we are satisfied that their compliance has significantly improved.”
Using the insight gathered from both workshops and the survey, the ICO will produce updated resources for all UK organisations, providing clarity on how they can improve their processes when handling requests for care records and protect the personal information of people with care experience.
If you have experience accessing your care records, please share details with the ICO here.
You can read more about the ICO’s work with local authorities in Scotland here.
Find out more on about your information rights on the ICO’s website.
Notes to editors
For the purpose of this work, the ICO defines “experience of the care system” as the experience of growing up in the care system as a child or young person. The ICO is interested to hear from people with this experience, no matter how long they spent in care as a child or young person. It does not refer to experience of health and social care in later life.
The ICO uses the term care experience, but you may use a different phrase. Some terms may include:
- Care Leaver
- Looked After Person
- Fostered
- Adopted
- Kinship care
- Special guardianship
- Lived with family
Under data protection law, organisations are expected to respond to SARs within a 30-day timescale, unless an extension is requested.
- The Information Commissioner’s Office (ICO) is the UK’s independent regulator for data protection and information rights law, upholding information rights in the public interest, promoting openness by public bodies and data privacy for individuals.
- The ICO has specific responsibilities set out in the Data Protection Act 2018 (DPA2018), the United Kingdom General Data Protection Regulation (UK GDPR), the Freedom of Information Act 2000 (FOIA), Environmental Information Regulations 2004 (EIR), Privacy and Electronic Communications Regulations 2003 (PECR) and a further five acts and regulations.
- The ICO can take action to address and change the behaviour of organisations and individuals that collect, use and keep personal information. This includes criminal prosecution, non-criminal enforcement and audit.
- To report a concern to the ICO telephone our helpline 0303 123 1113 or go to ico.org.uk/concerns.
