Skip to main content

HES IAPT bridging file: GDPR information


Why and how we process your data within the Hospital Episode Statistics (HES) Improving Access to Physiological Therapies (IAPT) Bridging File, and your rights.

Controller NHS Digital
How we use the information (processing activities)

Improving Access to Physiological Therapies (IAPT) concerns the provision of emotional wellbeing services. This is combined with Hospital Episodes Statistics (HES) data to monitor and improve the management of health and care services.

Does this contain sensitive (special category) data such as health information? Yes
Who are recipients of this data?

See Data Release Register

Is data transferred outside the UK? Within Europe
How long the data is kept 8 years minimum after no longer required
Our lawful basis for holding this data Legal obligation
Your rights
  • Tick Be informed
  • Tick Get access to it
  • Tick Rectify or change it
  • Cross Erase or remove it
  • Tick Restrict or stop processing it
  • Cross Move, copy or transfer it
  • Cross Object to it being processed or used
  • Cross Know if a decision was made by a computer rather than a person
How can you withdraw your consent?

Consent not the basis for processing

Is the data subject to decisions made solely by computers? (automated decision making) No
Where does this data come from? Hospital Episodes Statistics (HES) dataset, Improved Access to Psychological Therapies (IAPT) dataset
The legal basis for collecting this data

Legal obligation (Direction) and management of health and social care systems

Where NHS Digital uses this data


Hospital Episode Statistics (HES)

Hospital Episode Statistics (HES) is a data warehouse containing details of all admissions, outpatient appointments and A and E attendances at NHS hospitals in England.