This privacy policy tells you what to expect when NHS England collects personal information on this system.
By providing us with your details, you are giving your consent that your personal information may be processed for the purposes necessary to conduct and improve our services. When collecting your personal information we will explain what we intend to do with it.
This information helps to improve our service. We do not know (and do not wish to know) the identities of the individuals who visit our website, unless it is via a specific login for subscribed services.
If you do not wish to receive any information from us please let us know at the point you first contact us or by emailing information.standards@nhs.net.
If you already receive correspondence from the website, and no longer want to, please email information.standards@nhs.net.
If you would like your account and details to be removed, email information.standards@nhs.net and we will remove your details from this website and, if applicable, cancel any subscriptions you have on this system. However, records of any downloads made by your account may be retained for logging and audit purposes.
In order to meet our public task as the national source of health and social care information, NHS England collects and process a range of information relating to individuals in their capacity as service users or patients. This includes information on:
In addition to the above, NHS England collects and processes information relating to its customers and stakeholders for business purposes. All personal information is handled with the utmost care and attention — whether on paper, electronically, or other means — and safeguards are in place to ensure that we adhere to the Data Protection Act 1998.
NHS England regards the fair and lawful processing of personal information as essential in order to successfully achieve its objectives and ensure the support and confidence of the general public and stakeholders.
Notification is a statutory requirement and every organisation that processes personal information must notify the Information Commissioner's Office (ICO), unless they are exempt. Failure to notify is a criminal offence.
As a data controller, NHS England provides the ICO with details about their processing of personal information. The ICO publishes certain details in the register of data controllers, including the name and address of data controllers and a description of the kind of processing they do. You can read this register on the ICO website.
The Principles of The Data Protection Act 1998, as set out below are fully endorsed by NHS England. The eight principles require that personal information:
You are entitled to obtain a copy of the personal information held about you by NHS England. Any request to access or obtain a copy of this information will be considered under Section 7 of the Data Protection Act.
To make a request for personal information, email enquiries@nhsdigital.nhs.uk or write to:
Information Governance Compliance Team
NHS England
1 Trevelyan Square
Boar Lane
Leeds
LS1 6AE
There are robust security measures in place for all personal information held by NHS England to protect against the loss or alteration of information under the organisation's control. If you have any questions about our privacy policy or the information we hold please contact us at the above address.
This privacy policy only relates to information that we obtain from you on this website. If you visit a different website through a link included on this site, your information may be used differently by the operator of the linked website. When you are moving to another website you are advised to read the privacy policy on that website.