Consultation outcome

Privacy notice: consultation on the statutory scheme to control the costs of branded health service medicines

Updated 1 June 2022

Summary of initiative or policy

The Department of Health and Social Care (DSHC) (the Department) proposes to update the payment percentages in the statutory scheme for branded medicine pricing (known as the ‘statutory scheme’).

Data controller

DHSC is the data controller.

What personal data we collect

We will be collecting information in relation to the following:

• the capacity in which you are responding to the survey, that is if you are sharing your personal views and experiences, your professional views and experiences, or responding on behalf of an organisation
• if you are responding as an individual, we will collect information on protected characteristics (such as age, sex, ethnicity, disability status) should you elect to provide this information. It will not be mandatory for individuals to provide this information in order to respond to the policy questions in the consultation
• if you are responding as an individual and sharing your professional views and experience, we will collect information on what sector you work in (the NHS, elsewhere in the public sector, private or voluntary sector and so on). It will not be mandatory for individuals to provide this information in order to respond to the policy questions in the consultation
• alternatively, if you are responding on behalf of an organisation, we collect information on the type of the organisation you are responding on behalf of (for example whether it is a pharmaceuticals company who is a member of either branded medicine pricing scheme, sector representative organisation, charity, NHS organisation and so on)
• whether you would like to receive information on other consultations carried out by the department
• your email address – it will not be mandatory to provide this information in order to respond to the policy questions in the consultation

How we use your data (purposes)

We will collect personal information via the survey for the consultation. If you write or email us directly then we will collect your personal information via this channel.

We need to hold your information to understand in what capacity you are responding as this is crucial in our analysis of how our proposals will affect different individuals and organisations.

We ask you to provide your email address for the following reasons:

• for verification purposes if you need to contact us about amending or deleting your response
• to contact you if our policy team have a follow-up question to ask

We ask you to provide information about your protected characteristics so that we can understand the range of individuals represented in the response to the consultation, as we would like to ensure that a broad cross section of the population is included in the consultation.

Legal basis for processing personal data

Under Article 6 of the United Kingdom General Data Protection Regulation (UK GDPR) we rely on your consent as the lawful basis for processing this information.

Under Article 9 of the United Kingdom General Data Protection Regulation (UK GDPR) we rely on your consent as the lawful basis for processing special category data (including data relating to an individual’s ethnicity and health data).

Data processors and other recipients of personal data

Personal data will only be shared internally within the department with employees involved in this consultation.

International data transfers and storage location(s)

All data is stored on DHSC secured platforms.

Retention and disposal policy

We will keep your information for one year and then will dispose of it from the department’s secured platform.

How we keep your data secure

All data is stored on a secure platform and only people involved in the consultation will have access to this.

Your rights as a data subject

By law, data subjects have a number of rights and this processing does not take away or reduce these rights under the EU General Data Protection Regulation (2016/679) and the UK Data Protection Act 2018 applies.

These rights are:

• the right to get copies of information – individuals have the right to ask for a copy of any information about them that is used

• the right to get information corrected – individuals have the right to ask for any information held about them that they think is inaccurate, to be corrected

• the right to limit how the information is used – individuals have the right to ask for any of the information held about them to be restricted, for example, if they think inaccurate information is being used

• the right to object to the information being used – individuals can ask for any information held about them to not be used. However, this is not an absolute right, and continued use of the information may be necessary, with individuals being advised if this is the case

• the right to get information deleted – this is not an absolute right, and continued use of the information may be necessary, with individuals being advised if this is the case

Comments or complaints

Anyone unhappy or wishing to complain about how personal data is used as part of this programme, should contact data_protection@dhsc.gov.uk in the first instance or write to:

Data Protection Officer
1st Floor North
39 Victoria Street
London
SW1H 0EU

Anyone who is still not satisfied can complain to the Information Commissioners Office. The postal address is:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Automated decision making or profiling

No decision will be made about individuals solely based on automated decision making (where a decision is taken about them using an electronic system without human involvement) which has a significant impact on them.

Changes to this policy

This privacy notice is kept under regular review, and new versions will be available on our privacy notice page on our website. This privacy notice was last updated on 14 March 2022.