Consultation outcome

Privacy notice: consultation on the Provider Selection Regime

Updated 13 July 2023

Applies to England

© Crown copyright 2023

This publication is licensed under the terms of the Open Government Licence v3.0 except where otherwise stated. To view this licence, visit nationalarchives.gov.uk/doc/open-government-licence/version/3 or write to the Information Policy Team, The National Archives, Kew, London TW9 4DU, or email: psi@nationalarchives.gov.uk.

Where we have identified any third party copyright information you will need to obtain permission from the copyright holders concerned.

This publication is available at https://www.gov.uk/government/consultations/provider-selection-regime-supplementary-consultation-on-the-detail-of-proposals-for-regulations/privacy-notice-consultation-on-the-provider-selection-regime

Summary of initiative or policy

The Health and Care Bill currently before Parliament proposes that the Provider Selection Regime will be a new set of rules for arranging healthcare services, which is intended to give decision makers a flexible, proportionate decision-making process for selecting providers to deliver healthcare services to the public. The Department of Health and Social Care (DHSC) is responsible for the development and delivery of the regulations which will set out the Provider Selection Regime.

DHSC is holding a consultation focusing on areas of the Provider Selection Regime where we would benefit from further engagement with stakeholders to ensure that regulations (and, where applicable, guidance) achieve our intended aims for the arrangement of healthcare services in England.

Data controller

DHSC is the data controller.

What personal data we collect

We will collect and process the following personal data (where given):

  • your email address
  • your organisation
  • your role

How we use your data (purposes)

The purpose for which we are processing your personal data is to obtain the opinions of members of the public and representatives of organisations and companies about our proposals for the Provider Selection Regime.

Under Article 6 of the United Kingdom General Data Protection Regulation (UK GDPR), we rely on your consent as the lawful basis for processing this information.

Data processors and other recipients of personal data

Where individuals submit responses, we may publish their responses, but we will not publicly identify them. We will not publish any information that may lead to individuals being identified.

Responses submitted by organisations or representatives of organisations may be published in full.

Where information about responses is not published, it may be shared with officials within other public bodies and ministerial departments as is required to develop policy. Any information shared will not be personally identifiable.

International data transfers and storage location(s)

Your information will be stored on secure DHSC servers.

Retention and disposal policy

Your personal data will be retained for 2 years. DHSC will securely store anonymised data to inform policy development.

How we keep your data secure

Your personal data will be securely stored on DHSC servers and shared with those involved in running the consultation.

Your rights as a data subject

By law, data subjects have a number of rights and this processing does not take away or reduce these rights under the EU General Data Protection Regulation (2016/679) and the UK Data Protection Act 2018 applies.

These rights are:

  • the right to get copies of information – individuals have the right to ask for a copy of any information about them that is used

  • the right to get information corrected – individuals have the right to ask for any information held about them that they think is inaccurate, to be corrected

  • the right to limit how the information is used – individuals have the right to ask for any of the information held about them to be restricted, for example, if they think inaccurate information is being used

  • the right to object to the information being used – individuals can ask for any information held about them to not be used. However, this is not an absolute right, and continued use of the information may be necessary, with individuals being advised if this is the case

  • the right to get information deleted – this is not an absolute right, and continued use of the information may be necessary, with individuals being advised if this is the case

Comments or complaints

Anyone unhappy or wishing to complain about how personal data is used as part of this programme, should contact data_protection@dhsc.gov.uk in the first instance or write to:

Data Protection Officer
1st Floor North
39 Victoria Street
London
SW1H 0EU

Anyone who is still not satisfied can complain to the Information Commissioners Office. The postal address is:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Automated decision making or profiling

No decision will be made about individuals solely based on automated decision making (where a decision is taken about them using an electronic system without human involvement) which has a significant impact on them.

Changes to this policy

This privacy notice is kept under regular review, and new versions will be available on our privacy notice page on our website. This privacy notice was last updated on 17 February 2022.

Back to top