Purposes for processing

Specialised services are accessed by comparatively small numbers of patients but with catchment populations of usually more than one million. They are provided in relatively few hospitals. These services tend to be located in specialised hospital trusts that can recruit a team of staff with the appropriate expertise and enable them to develop their skills.

The specialised services that we commission include Internal Medicine, Cancer, Mental Health, Trauma, Head and Spine, Women and Children, Blood and Infection, the Cancer Drugs Fund, high cost drugs and devices and Highly Specialised Services.

NHS England employs mental health case managers who are responsible for tailoring services to the individual requirements of mental health patients / clients. They work with professionals in provider organisations, sharing information to ensure that patients receive the best possible care in the most appropriate setting for their needs.

Sources of the data

The information may be collected from any organisation that provides specialised services to the NHS, including NHS Trusts and NHS Foundation Trusts, independent sector providers and charities.

Categories of personal data and recipients

NHS England uses data that has been anonymised in accordance with the Information Commissioner’s Anonymisation code of practice, and summary data (numbers) for monitoring and payment for specialised services. This data is provided to us by NHS Digital who collects and analyses personal data submitted by providers on our behalf – see Data services for commissioners. The data processed by NHS Digital includes personal details such as NHS number, date of birth, postcode, and details of the diagnosis and treatment received.

Legal basis for processing

For GDPR purposes NHS England’s lawful basis for processing is Article 6(1)(e) ‘…exercise of official authority…’. For processing special categories (health) data the basis is Article 9(2)(h) ‘…health or social care…’.