Purposes for processing and categories of personal data
The NHS Innovation Service acts as an ‘information gateway’ to support people developing new innovative products, services or initiatives in healthcare (‘innovators’), to understand processes such as the regulations and standards they will need to meet, the real-world evidence they will need to demonstrate, and NHS procurement and reimbursement processes. It will also be a single entry point for innovators to register for support and/or to apply for certain programmes.
Organisations providing support to innovators (e.g. Academic Health Science Networks (AHSNs), the National Institute of Health and Care Excellence (NICE), NHS Supply Chain, the National Institute for Health Research (NIHR)), are able to communicate directly both with the innovator and with each other to help the innovator compile a single record of their progress and evidence generated to date.
The categories of personal data processed are:
- Contact details
- Job title
Categories of recipients
Recipients of the data include:
- Academic Health Science Networks (AHSN)
- NHS Innovation, Research and Life Sciences Group
- National Institute for Health and Care Excellence (NICE)
- NHS Supply Chain
- National Institute for Health Research (NIHR)
- Medical and Healthcare products Regulatory Agency (MHRA)
- NHS England Specialised Commissioning
- Department for International Trade (DIT)
- Health Technology Wales (HTC)
- Life Science Hub Wales (LSHW)
- Scottish Health Technology Group (SHTG)
Legal basis for processing
For the UKGDPR purposes NHS England’s lawful basis for processing is Article 6(1)(e) – ‘…exercise of official authority…’.