NHS England’s Privacy notice describes how we use your personal data and explains how you can contact us and exercise your rights as a data subject.

Purposes for processing

NHS England collects personal data about you to understand the talent within NHS boards and sub-boards. This data will be used to send individuals information about training, development opportunities, and evaluations related to appraisals.

Any information related to Equality, Diversity, and Inclusion (EDI) will be used to assess the diversity of internal talent and to offer targeted training and development. Providing EDI data is optional.

Personal data is collected from the point of creating an account to access the system and during relevant leadership and management activity.

Categories of personal data

• Name
• Email address
• Region
• Sector
• Organisation
• Profession
• Job Title
• Age
• Gender
• Ethnicity
• Disability (as defined by the Equality Act 2010)

Categories of recipients

We ensure that personal data is accessed and used only by staff who need it to support leadership and management activities, or as required by law.

Data may also be shared with partner organisations under data sharing agreements, but only for leadership and management purposes.

For reporting, all personally identifiable data will be anonymised. Your identifiable diversity data will not be shared outside of the NHS England Talent and Leadership team without your consent.

Legal basis for processing

• Where NHS England process personal data about you, we use Article 6(1)(e) of the UK GDPR: exercise of official authority.
• Where NHS England process special categories of personal data about you, including any revealing racial or ethnic origin, we use Article 9(2)(h) of the UK GDPR: Health or social care (with a basis in law) The basis in law is  Equality Act 2010, Section 149.