Purposes for processing
NHS England will in the routine course of its business need to communicate with stakeholders across the business (i.e. with all Clinical Commissioning Group (CCG) Accountable Officers, all Commissioning Support Units or for certain programs and initiatives. These communications are either to provide relevant stakeholders important information in relation to their business or that of NHS England. Other communications may be in relation to a project to which interested parties have subscribed for further information as and when it is available (i.e. event attendance, updates on project progress or canvassing feedback on documentation for initiatives).
Categories of personal data
Name and contact (email) information.
Sources of the data
Contact information is primarily collected by teams in the routine course of their work with relevant stakeholders, i.e. it is deemed appropriate a mailing list is created to canvass responses or feedback on documentation. It may also be collected on request, i.e. colleagues or members of the public contact NHS England and ask to be placed on a relevant mailing list for updates.
Categories of recipients
The information is used by NHS England, its hosted bodies, or data processors acting on our behalf.
Legal Basis for processing
For the General Data Protection Regulation (GDPR) purposes NHS England’s lawful basis for processing is Article 6(1)(e) – ‘…exercise of official authority…’.