Adopt Birmingham Privacy Notice
Updated May 2026
Who we are
Adopt Birmingham is the Regional Adoption Agency (RAA) covering Birmingham and surrounding areas. The service is delivered through partnership arrangements led by Birmingham Children’s Trust, working with voluntary adoption agencies including Family Society (Adoption Focus).
Birmingham Children’s Trust is the data controller for the majority of personal data processed in connection with adoption services.
Purpose of this notice
This notice explains how we collect, use, store and share personal information in relation to adoption services. It applies to prospective adopters, approved adopters, children, adopted adults and those accessing adoption support services.
Why we process personal data
We process personal information to:
- Recruit, assess and approve adoptive parents
- Match children with adoptive families
- Provide adoption support services (including access to the Adoption and Special Guardianship Support Fund)
- Safeguard children and promote their welfare
- Meet statutory duties under adoption and children’s legislation
- Monitor, evaluate and improve our services (including performance reporting)
- Prevent and detect crime or fraud
Processing is always limited to what is necessary for these purposes.
Legal basis for processing
Personal data (UK GDPR Article 6)
We rely on:
- Article 6(1)(c) – Legal obligation
- Article 6(1)(e) – Public task
Special category data (Article 9)
We rely on:
- Article 9(2)(g) – Substantial public interest
- Article 9(2)(h) – Health and social care
- Article 9(2)(f) – Legal claims
Where relevant, processing is supported by Schedule 1 of the Data Protection Act 2018.
Key legislation includes:
- Adoption and Children Act 2002
- Adoption Agencies Regulations 2005 (as amended)
- Children Act 1989 and 2004
- Children and Families Act 2014
- Care Planning, Placement and Case Review Regulations 2010
- Adoption statutory guidance (updated versions)
What information we collect
We collect only information necessary to deliver adoption services. This may include:
About prospective and approved adopters
- Personal details (name, address, contact details, date of birth)
- Household and family composition
- Employment and financial information
- Health and medical information
- Ethnicity, religion, sexual orientation and other protected characteristics
- Social care history
- References and assessments
- DBS checks
About children and adopted individuals
- Care records and background history
- Health and developmental information
- Education and SEND information
- Legal status and court-related information
From third parties
We may obtain information from:
- GPs and health professionals
- Police and DBS
- Local authorities and other adoption agencies
- Schools and education services
- Personal and professional referees
- Previous partners (where required by regulation)
We will only obtain information that is necessary and lawful.
How we collect information
Information is collected through:
- Application forms and assessments
- Interviews and home visits
- Secure case management systems
- Communication via telephone, email or online platforms
- Partner agencies and statutory bodies
How we use your information
We use your information to:
- Carry out adoption assessments and approvals
- Make best-interest matching decisions for children
- Deliver adoption support and therapeutic services
- Meet safeguarding responsibilities
- Maintain accurate records required by law
- Inform service development and commissioning
We do not use your data for marketing purposes.
Sharing your information
We share information only where necessary, lawful and proportionate.
Typical recipients include:
- Adoption Panel members (subject to strict confidentiality requirements)
- Other local authorities and RAAs
- Voluntary adoption agencies
- NHS organisations and health professionals
- Schools and education providers
- Courts, CAFCASS and legal representatives
- Ofsted and government bodies (e.g. DfE returns via CoramBAAF)
- Adoption support providers
- Police or safeguarding agencies where required
We apply the data minimisation principle and only share what is necessary.
International transfers
Personal data is not routinely transferred outside the UK. Where this is necessary, appropriate safeguards will be in place in line with UK GDPR.
How long we keep your information
Retention follows the Adoption Agencies Regulations 2005 and organisational retention schedules:
- Adoption case records: up to 100 years
- Adoption panel records: up to 100 years
- Unsuccessful applicants: 15 years
- Financial/support records: minimum 6 years, then review
Records are securely archived or destroyed when no longer required.
How we keep your information safe
We use appropriate technical and organisational measures, including:
- Secure electronic case management systems
- Role-based access controls
- Encryption and secure data transfer
- Staff training and confidentiality requirements
- Data breach reporting procedures
Your rights
Under data protection law, you have the right to:
- Be informed about how your data is used
- Access your information (Subject Access Request)
- Request correction of inaccurate data
- Request deletion (where applicable)
- Restrict or object to processing (in certain circumstances)
- Data portability (where applicable)
- Complain to the Information Commissioner’s Office (ICO)
Some rights may be limited where we must retain or process information to meet legal safeguarding duties.
Automated decision-making
We do not make decisions about individuals solely by automated means.
Contact details
Data Controller
Birmingham Children’s Trust.
Data Protection Officer
Email: DPO@birminghamchildrenstrust.co.uk
Subject Access Requests
Email: DisclosureTeam@birminghamchildrenstrust.co.uk
Complaints
CustomerRelations@birminghamchildrenstrust.co.uk
You can also contact the Information Commissioner’s Office at www.ico.org.uk.