Product description

The trust uses this product to support and improve the services they are providing. The transport cancelation product helps the trust ensure you have the appropriate and timely transport to your appointments.

The product enables hospital staff to identify the appointments and scheduled transport that are no longer required for reasons such as the patient being admitted to hospital, or their appointment being cancelled or rescheduled. This ensures that you have the appropriate transport at the right time for your appointments, as well as ensuring there is capacity for other patient transport.

What are the purposes for processing my personal data in this product?

This product processes personal information (called ‘personal data’ under data protection laws) about patients who are scheduled to have transport to an appointment, which is no longer required. This includes information about you and your appointment including the transport time and provider.

The use of the product by the trust will improve the capacity of the transport provider as well as ensuring you have an efficient transport service to and from your appointments. This is completed through better use of the information that the hospital holds, bringing together all required information into one place to support your care in relation to transport needed.

What personal data about me is processed in this product?

Personal data which directly identifies you (we call this directly identifiable data) will be processed by the trust about patients who are having planned treatment scheduled, for the purposes above. Data that is processed by hospitals that use this product may include your:

• name
• address
• postcode
• date of birth and age
• sex
• mobile phone
• general identifier, eg NHS number
• health information, including information about your medical condition, symptoms, diagnosis and treatment

Email addresses of members of staff involved in the delivery of care will also be processed when using this product.

Who is my personal data shared with?

Your personal data is accessed and used by hospital staff who are coordinating your care and transport, this includes support staff who need to support health care professionals to administer your care journey. As well as the transport provider who are contracted by the trust, who requires this information to schedule your transport to and from appointments.

UK General Data Protection Regulation (GDPR) Information

Controllers of your personal data

Under data protection law the trust using the product is the legal controller of your personal data under data protection laws. The specific trust using the product are listed on the product description page of the NHS England website.

Legal grounds for processing your personal data

The processing of personal data by the trust for the purposes explained above is permitted under the following legal grounds under data protection law (this is UK GDPR and the Data Protection Act 2018 (DPA 2018)):

• Public task – Article 6(1)(e) of UK GDPR ‘necessary for the performance of a task carried out in the public interest or in the exercise of official authority…’.
• Health care – Article 9(2)(h) of UK GDPR ‘necessary for the purposes of preventative or occupational medicine for the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services…” In addition, the legal grounds under paragraph 2 of part 1 of the DPA 2018 apply (health care purposes).

The personal data processed about patients by the trust for the purposes above is also confidential data. As the trust is processing your confidential data to provide you with individual care, it is relying on your implied consent to do this, as you would reasonably expect the hospital to process your personal information this way to provide you with care. The trust will keep your personal data confidential and only use and share it with other members of the care team to provide you with care, where you would reasonably expect them to, and subject to strict confidentiality controls to ensure your information remains confidential.

Processor acting on behalf of NHS trusts

The data platform contractor, Palantir Technologies UK LTD is a processor acting on behalf of the NHS trusts who are using this product. They provide the data platform and the technology that the product uses and only act on the instructions of the NHS Trust.

Your rights under UK GDPR

You have the following rights under UK GDPR in relation to the processing of your personal data by the NHS trust for the purposes above:

• right to be informed
• right of access
• right to rectify
• right to object

Further information about these rights is in the NHS Federated Data Platform privacy notice. Your trust will also have a privacy notice on its own website which will explain more about how the trust processes your personal data, your rights and how to exercise them.

Contact details for data protection officers in the trust using this product are available on the NHS England website.

Does the national data opt out or any other opt out apply to this product?

The national data opt out policy does not apply to this product as the confidential patient information processed in this product is used and shared for the purposes of the direct care of patients.

Type 1 opt outs do not apply to this product because the confidential patient information processed in this product is not derived from GP data.

More information

For more information about how personal data is processed within the Federated Data Platform please see the NHS Federated Data Platform Privacy Notice.