NHS UK photography content
Summary
This list is used to contact individuals used in NHS photographs in order to validate consent and identify photos within our database when these are requested to be removed.
| Controller | NHS Digital |
| How we use the information (processing activities) | To contact subject to validate consent when necessary and to help identify photos within our database should the subject wish for them to be removed. |
| Does this contain sensitive (special category) data such as health information? | No |
| Who are recipients of this data? |
Publicly available |
| Is data transferred outside the UK? | Outside Europe - Photographs |
| How long the data is kept | 3 years minimum after no longer required |
| Our lawful basis for holding this data | Consent |
| Your rights |
|
| How can you withdraw your consent? |
Yes - via designated mailbox, limited to any future usage |
| Is the data subject to decisions made solely by computers? (automated decision making) | No |
| Where does this data come from? | Public events |
| The legal basis for collecting this data | Explicit Consent |