Electronic Prescription Service (EPS) in England
Summary
The Electronic Prescription Service (EPS) securely transfers prescription information between prescribing and dispensing systems in England via the NHS Spine. Authorised users can issue, track, and dispense prescriptions, record or update pharmacy nominations, Patients can access digital prescriptions through the NHS App, with data held securely in the cloud.
| Controller | NHS England (jointly with the Department of Health and Social Care) |
| How we use the information (processing activities) | The Electronic Prescription Service (EPS) securely transmits prescription information between prescribing systems (for example GP systems) and dispensing systems (for example pharmacy systems) in England. When a prescription is issued, the prescribing system sends the following information to the NHS Spine:
The pharmacy who prepares the medicine / appliance order, downloads the electronic prescription data from the NHS Spine, which includes the patient’s NHS number, name, date of birth, address and details of the medication / appliance that has been prescribed. Pharmacy staff have a professional and legal duty to keep patient information confidential. In order to connect to the NHS Spine users of prescribing and dispensing systems need the appropriate NHS Smartcard permissions. Authorised staff at prescribing and dispensing sites, can also check the status and location of a prescription using the EPS Prescription Tracker. The patient’s choice of nominated pharmacy is recorded in the Personal Demographic Service (PDS). At the request of a patient, prescribing and dispensing system users can add, update and remove their nominated pharmacy. The EPS is used across Primary care (for example GP practices and pharmacies) and urgent care settings (such as walk-in centres and minor injury units) in England. Electronic prescription data known as a ‘digital prescription’ will also be available to patients who have the NHS App and have high-level identity verification through NHS login. The digital prescription has a barcode, which can be presented to the dispenser on the patient’s smartphone so that their prescription can be processed. For more information on how we process personal data to provide the Electronic Prescription Service to NHS organisations and services in Wales and the Isle of Man, see the Electronic Prescriptions Service for Wales Transparency Notice and the Electronic Prescription Service for Isle of Man Transparency Notice. |
| Does this contain sensitive (special category) data such as health information? | Yes |
| Who are recipients of this data? |
NHS England share EPS data (electronic claims messages) with the NHS Business Services Authority (BSA) so that NHSBSA can reimburse the dispenser. |
| Is data transferred outside the UK? | The EPS is part of the NHS Spine which stores data on secure cloud storage in UK regions. For electronic prescriptions relating to patients in the Isle of Man, their data will flow securely between the Isle of Man and the UK. For more information, see the Electronic Prescription Service for Isle of Man Transparency Notice. |
| How long the data is kept | 12 months maximum after prescriptions dispensed or after prescription prescribed but not dispensed in our live system, then archived for 6 years before secure deletion. |
| Our lawful basis for holding this data | Legal obligation |
| Your rights |
|
| How can you withdraw your consent? |
Consent is not the basis for processing. |
| Is the data subject to decisions made solely by computers? (automated decision making) | No |
| Where does this data come from? | Prescribing systems and dispensing systems in England |
| The legal basis for collecting this data | UK GDPR:
|