To ensure that we process your personal data fairly and lawfully we are required to inform you:
- Why we need your data
- How it will be used and
- Who it will be shared with
This information also explains what rights you have to control how we use your information.
The law determines how organisations can use personal information. The key laws are: the Data Protection Act 1998 (DPA), the Human Rights Act 1998 (HRA), relevant health service legislation, and the common law duty of confidentiality.
Within these pages we describe instances where NHS England is the “Data Controller”, for the purposes of the Data Protection Act 1998, and where we direct or commission the processing of patient data to help deliver better healthcare, or to assist the management of healthcare services.
NHS England recognises the importance of protecting personal and confidential information in all that we do, all we direct or commission, and takes care to meet its legal duties.
This part of the fair processing notice outlines the management of the notice, contact details and other access to information legislation.
Complaints about how we process your personal information
In the first instance, you should contact the Customer Contact Centre.
Changes to our fair processing notice
We keep our fair processing notice under regular review and we will place any updates on this web page. This notice was last updated on 19/08/2015.
Data Protection Notification
NHS England is a ‘data controller’ under the DPA. We have notified the Information Commissioner that we process personal data and the details are publicly available from the:-
Information Commissioner’s Office
Wilmslow SK9 5AF
How to contact us
Please contact us if you have any questions about our privacy notice or information we hold about you:
Customer Contact Centre
Telephone: 0300 311 22 33
Post: NHS England, PO Box 16738, Redditch, B97 9PT
Our opening hours are: 8am to 6pm Monday to Friday, except Wednesdays when we open at the later time of 9.30am.