Fair Processing Notice

The purpose of this notice is to inform you of the way in which we, NHS Surrey Downs Commissioning Group, use information (including personal data) about you.  In this notice we will explain:

  • Who we are and what we do;
  • The types of information we hold about people;
  • How we use this information and why we need to do this;
  • Who we may share your information with;
  • How you can object to the way we use information or complain about this;
  • How you can access a copy of the information we hold about you;
  • What other rights you may have in relation to this information;
  • How we keep your information secure and confidential;
  • Where to go if you require further information.

This guidance applies to all individuals whose information is used by the CCG; including local NHS service users, our staff and suppliers, and visitors to our offices.    

This information is sometimes known as a ‘Privacy Notice’ or ‘Fair Processing Notice’ and it is a legal obligation under data protection legislation that we provide you with this.   

We will review this information regularly and update it as required - so we would recommend that you check this webpage regularly to ensure that you remain informed about the way in which we use your information.


We will review the information contained within this notice regularly and update it as required.  We therefore recommend that you check this webpage regularly to remain informed about the way in which we use your data. 

This version was last updated by the DPO on the 06/11/2018.

Who we are

This notice applies to NHS Surrey Downs Commissioning Group (the CCG) only.  CCGs were established under the Health and Social Care Act 2012 to commission (buy) a range of health and social care services to meet the needs of local areas.  We also monitor the performance of these services to ensure that they offer the highest quality of healthcare.  You can find out more about us and the work that we do from our website

The six CCGs that operate within Surrey have agreed to work collaboratively to commission Surrey-wide services for patients.  Please see link below for further information regarding Surrey collaborative commissioning arrangements

In addition to this, the three CCGs that operate within the Surrey Heartlands Health and Care Partnership area work together closely and share a number of senior posts and corporate functions to ensure strategic alignment and the best possible use of public funds. 

The CCG is usually the Data Controller for your information that we hold and this means that we are the legal entity that is responsible for determining how this will be used and ensuring that this use complies with applicable data protection legislation.  Where we are working collaboratively with another CCG we may be joint data controllers for your information. 

The CCG is registered as a Data Controller with reference number Z3631142 – please see the public register for further information.