Information which was previously held by NHS Surrey Heartlands Integrated Care Board and NHS Sussex Integrated Care Board transferred to NHS Surrey and Sussex Integrated Care Board (ICB) on 01 April 2026.
NHS Surrey and Sussex ICB is the new Data Controller. This page details how NHS Surrey and Sussex ICB uses your data.
Fair processing notice
NHS Surrey and Sussex ICB is responsible for buying (also known as commissioning) health services from healthcare providers such as hospitals, for our local population.
We also monitor the performance and quality of these services. In general, we only use data that has been anonymised or pseudonymised for these purposes.
There are certain circumstances in which NHS Surrey and Sussex ICB will have access to identifiable data about patients, for example:
- when responding to concerns/complaints from patients about commissioned services
- when handling Individual Funding Requests
- when handling NHS Continuing Healthcare applications
- for the purposes of safeguarding adults or children
NHS Surrey and Sussex ICB may also share de-identified statistical information with NHS and partner agencies for the purpose of improving local services, for example understanding how health conditions spread across our local area compared to other areas.
For the full detail on how we use and share information please review our Fair Processing Notice. This includes information about all our uses of personal data, how we keep information secure, details about Risk Stratification and Invoice Validation and information on how to opt-out of uses of your personal data. This document is updated at least annually – most recently in April 2026.
Fair Processing Notice NHS Surrey and Sussex ICB [pdf] 489KB
Exercising your data subject rights
If you wish to access any information NHS Surrey and Sussex ICB may hold about you, or make a request under any of the other data subject rights, please contact our Information Governance (IG) team using the following details:
- Email: SXICB.IRR@nhs.net
Requests are handled in line with our Individual Rights Requests (IRR) procedures.
Please note the ICB is not the data controller for medical records held by your GP Surgery or other healthcare providers and to request those records you need to approach the relevant organisation directly.
Complaints
If you have a complaint or concern about how your information has been used by NHS Surrey and Sussex ICB then please contact the Complaints team.
If you are not satisfied with the way the ICB addresses your complaint you have the right to escalate to the Information Commissioners Office (ICO). They can provide independent advice about data protection and data-sharing issues. You can contact the Information Commissioner’s Office using the following details:
- Email: casework@ico.org.uk
- Telephone: 0303 123 1113
- Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF
Contact the NHS Surrey and Sussex Information Governance team
- Email: SXICB.IG@nhs.net
- Address: IG Team, NHS Surrey and Sussex, Horizon House, 28 Upper High St, Epsom KT17 4QJ