Adult Social Care and MiiCare remote monitoring privacy notice

The data controller for the information we collect

Adult Social Care are working with MiiCare to investigate how remote monitoring technology in the homes of people living alone can support them to live independently for longer while ensuring that care packages are delivering the appropriate level of care for the individual.

This Privacy Notice is provided to meet the requirements of the UK General Data Protection Regulation (GDPR) and the Data Protection Act 2018 (DPA) to explain how we process your personal data in delivering the project.

Leeds City Council is the data controller for the purposes of the Data Protection Act 2018 and other regulations, including the UK General Data Protection Regulation, which means it determines what your data is used for and why it is collected. The contact details of the data controller are Leeds City Council, Merrion House, 110 Merrion Way, Leeds, LS2 8BB.

Leeds City Council has appointed MiiCare, who will work in collaboration with Leeds City Council (‘the council’) to deliver the project and will act as data processors.

The council have also appointed Health Innovation Yorkshire and Humber as an evaluation partner who will analyse the data collected to complete an end-of-project report.

The data we will collect

To deliver the service, we will process the following data:

  • name, address and contact details of the resident
  • gender
  • date of birth
  • photo
  • names and contact details of family members and carers who support you

Special category data, such as known medical conditions.

The project will collect the following data from a smart speaker (Monica) and small sensors in your home:

  • temperature
  • medication box usage (if applicable)
  • sleep patterns
  • steps (if applicable)
  • hydration activities
  • movement around your home
  • usage of appliances at home (for example, switching your kettle on)
  • location
  • voice and audio recording (only when home hub is activated by saying the wake word “Monica”)

You will also be contacted from time to time by the project team to obtain your feedback and invite you to participate in surveys and personal interviews. You will be issued with a separate privacy notice to explain the process and the options available to you.

How do we collect information about you

We collect information about you from you directly. We may also obtain your information from other sources such as:

  • government departments (for example, Home office, MoD)
  • Mears Group
  • internal council services
  • other local authorities
  • Migration Yorkshire
  • NHS trusts
  • police

Why we process your data

We use your information for the following purposes:

  • We will use the data collected from a smart speaker and sensors 
  • to provide family members and carers with an accurate and insightful overview of your activity of daily living
  • to facilitate early identification and proactive resolution of any potential issues that may impact your health
  • for safety and wellbeing
  • the data collected will also be reviewed by Adults and Health colleagues periodically to decide if a review of your care plan may be required
  • data provided by you in surveys and personal interviews will be used to prepare a final report evaluating the project’s success
  • it will be shared with the council and Health Innovation Yorkshire & Humber
  • the report will not contain any personal data about you or your individual responses which you provided during the project.
  • all the data collected during the project will be treated in strict confidence and in accordance with the requirements of the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR)
  • the data provided by you will not be used for any purpose other than this project

All the data collected will be treated in strict confidence and in accordance with the requirements of the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR). The data provided by you will only be used for the purpose(s) specified.

Lawful basis for processing

We will process your data in accordance with the following:

UK GDPR Article 6(1)(a): the data subject has given consent to the processing of their personal data for one or more specific purposes

UK GDPR Article 9(2))(a): the data subject has given explicit consent to the processing of those personal data for one or more specific purposes

Withdrawing your consent

You have the right to withdraw your consent from participating in the project at any time. Withdrawing your consent will not affect any services or benefits you receive from the council. We will remotely disconnect the sensors installed in your property, so that we no longer receive any data from those sensors and will arrange for the kit to be removed from your property by one of our team. If you decide that you no longer wish to participate in the project, please contact us via email at hello@digitalleeds.com.

Data retention, storage and destruction

Our data retention policies and procedures are designed to help ensure that we comply with our legal obligations in relation to the retention.

The information collected from the sensors will be stored securely on the MiiCare platform and shared with Health Innovation Yorkshire & Humber until the end of February 2025, when the project completes. All data will then be securely destroyed within 1 month of this date.

The information collected during surveys and personal interviews will be retained in accordance with the retention policies of the organisations conducting these surveys.

When we receive a request from you at any time to delete your personal data, we will remotely disconnect the sensors so we no longer receive any data and arrange for collection of the MiiCare kit. Any other personal data obtained in the course of the project will be deleted within 7 days. Your data stored on the MiiCare Platform will be deleted within 7 days. Whilst we will delete all your personal data, we may not be able to remove all of that data retrospectively that has already been used within analysis and reports.

If you get in touch to opt-out of the project, we will treat this as withdrawal of your consent and will make arrangements to delete your personal data.

Who we share your data with

The council will not share your personal data with any other party except with its contractors, MiiCare and Health Innovation Yorkshire and Humber, to fulfil their requirements of the project.

In addition, we will share your personal data:

  • where such disclosure is necessary for compliance with a legal obligation to which we are subject
  • in order to protect your vital interests or the vital interests of another natural person
  • for the purposes of security and prevention of fraud and other criminal activity
  • where such disclosure is necessary for the establishment, exercise, or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure

Automated decision-making

Your data will not be used for any automated decision-making, including profiling.

Your rights

The following rights under data protection law are available under the UK GDPR:

  • the right to access (where you can ask for copies of your personal data)
  • the right to rectification (where you can ask us to rectify inaccurate personal data and to complete incomplete personal data)
  • the right to erasure (where you can ask us to erase your personal data)
  • the right to restrict processing (where you can ask us to restrict the processing of your personal data)
  • the right to data portability (where you can ask that we transfer your personal data to another organisation or to you)
  • the right to object to processing (where you can object to the processing of your personal data)
  • the right to complain to a supervisory authority (where you can complain about our processing of your personal data)
  • withdraw consent (to the extent that the legal basis of our processing of your personal data is consent, you can withdraw that consent)

All data rights apply where we process your information based on your consent.

These rights are subject to certain limitations and exceptions. You can learn more about your rights and how to exercise them, with further details on the Information Commissioner’s Office website. You may exercise any of the above rights in relation to your personal data by writing to us using the contact details provided below.

If your data is sent to other countries

The information you provide will not be transferred to another country outside of the UK.

Contact us

Any queries in relation to this privacy notice should be forwarded to:

Email: hello@digitalleeds.com 

Data Protection Officer

Aaron Linden
Head of Information Management and Governance - Data Protection Officer
Leeds City Council
Merrion House
110 Merrion Way
Leeds
LS2 8BB

DPO@leeds.gov.uk 

The Council privacy notice is available online.

Complaints

If you are unhappy with the way in which your information has been handled, you should speak with the specific service in the first instance. 

Any data protection complaints about how the council has processed your personal data will be handled in accordance with the council’s complaints policy. You can find out how to submit a complaint.

You can refer to the Information Commissioner if you consider that there has been an infringement of data protection legislation. Further details can be found on the Information Commissioner’s website.

Changes to this notice

We keep our privacy notice under regular review. We will notify you of significant changes to this notice by email or other means as appropriate. This privacy notice was last updated January 2025.