By providing us with your details, you are giving your consent that your personal information may be processed for the purposes necessary to conduct and improve our services. When collecting your personal information we will explain what we intend to do with it.
This information helps to improve our service. We do not know (and do not wish to know) the identities of the individuals who visit our website, unless it is via a specific login for subscribed services.
If you do not wish to receive any information from us please let us know at the point you first contact us or by emailing email@example.com.
If you already receive correspondence from the website, and no longer want to, please email firstname.lastname@example.org.
If you would like your account and details to be removed, email email@example.com and we will remove your details from this website and, if applicable, cancel any subscriptions you have on this system. However, records of any downloads made by your account may be retained for logging and audit purposes.
In order to meet our public task as the national source of health and social care information, NHS Digital collects and process a range of information relating to individuals in their capacity as service users or patients. This includes information on:
In addition to the above, NHS Digital collects and processes information relating to its customers and stakeholders for business purposes. All personal information is handled with the utmost care and attention — whether on paper, electronically, or other means — and safeguards are in place to ensure that we adhere to the Data Protection Act 1998.
NHS Digital regards the fair and lawful processing of personal information as essential in order to successfully achieve its objectives and ensure the support and confidence of the general public and stakeholders.
Notification is a statutory requirement and every organisation that processes personal information must notify the Information Commissioner's Office (ICO), unless they are exempt. Failure to notify is a criminal offence.
As a data controller, NHS Digital provides the ICO with details about their processing of personal information. The ICO publishes certain details in the register of data controllers, including the name and address of data controllers and a description of the kind of processing they do. You can read this register on the ICO website.
The Principles of The Data Protection Act 1998, as set out below are fully endorsed by NHS Digital. The eight principles require that personal information:
You are entitled to obtain a copy of the personal information held about you by NHS Digital. Any request to access or obtain a copy of this information will be considered under Section 7 of the Data Protection Act.
To make a request for personal information, email firstname.lastname@example.org or write to:
Information Governance Compliance Team
1 Trevelyan Square