Skip to main content

Use of personal data in NHS Digital’s corporate email communications: GDPR information

Summary

Why and how we process your data and how NHS Digital’s communications team uses personal data in bulk email communications with the NHS and care system and your rights.  

 

Controller NHS Digital
How we use the information (processing activities)

NHS Digital’s corporate communications team send bulk emails to people across the health and care system to help them get the best out of our products and services and stay abreast of new standards and requirements for the use of data and digital technology. We maintain email distribution lists for key groups in the health and care system (for example, GP practice staff, Chief Information Officers, and pharmacy professionals) and use these lists to distribute regular bulletins and one-off announcements. We ask people on these distribution lists to provide information about themselves to help us make these communications more useful. For example, by understanding the job roles recipients in GP practices are performing, we can tailor our emails to their needs. We also collect information about how recipients use our emails. This helps us make our emails more effective. For example, information about the number of recipients who open and click links in a bulletin shows us how useful people found it and helps us make the next bulletin more useful.

Does this contain sensitive (special category) data such as health information? No
Is data transferred outside the UK? We use the Granicus gov.delivery platform to hold mailing list data. The servers are based in the United States and the data is protected by Standard Contractual Clauses (SCCs) which allow for data transfer from the EU to third countries.
How long the data is kept We will hold your information for as long as you are using our bulletins. On an annual basis, we will contact subscribers who have not opened or clicked on a link for a consecutive period of 11 months. We will ask if they still wish to receive the bulletin. If they do, they will be directed to the subscription page to update their preferences or will be offered the opportunity to unsubscribe.
Your rights
  • Tick Be informed
  • Tick Get access to it
  • Tick Rectify or change it
  • Tick Erase or remove it
  • Tick Restrict or stop processing it
  • Cross Move, copy or transfer it
  • Tick Object to it being processed or used
  • Tick Know if a decision was made by a computer rather than a person
How can you withdraw your consent?

Bulletins issued include a link to enable subscribers to unsubscribe or manage their preferences. We also include a link to our privacy policy, enabling subscribers to clearly access information explaining how and why we process their data and their rights.

Alternatively, subscribers may email brandteam@nhs.net with their full name and email address and we will respond within 48 hours.
 

Is the data subject to decisions made solely by computers? (automated decision making) No
Where does this data come from? How we source the mailing data - Mailing data is collected as follows: (1) from individuals who have freely requested to receive the bulletins of their choice via a sign-up page hosted on the NHS Digital website (2) from research done by NHS Digital which indicates you are in one of the key audience groups with whom we need to share information and, if you were not to receive this information, may harm your ability to work effectively with NHS Digital, its products, and services. ---How to enforce your rights --- Bulletins issued include a link to enable subscribers to unsubscribe or manage their preferences.  We also include a link to our privacy policy, enabling subscribers to clearly access information explaining how and why we process their data and their rights. Alternatively, subscribers may email brandteam@nhs.net with their full name and email address and we will respond within 48 hours. --- Personal data collected --- (1) Name (2) Email address (3) Job role (4) Organisational name and what it does (5) Reason for subscribing (6) Subscriber preference for content (subscribers can indicate which content is most beneficial to them) (7) Use of our emails (for example, whether recipients have opened a bulletin and what links they clicked on)
The legal basis for collecting this data

If you are on a bulletin list and don’t want to be, you have the right to be removed.

Anybody can ask to be added to any of our email distribution lists. By choosing to receive our communications, you are consenting to NHS Digital collecting and using your data to improve our email communications.