UK NSC consultations privacy notice
How the UK NSC uses your personal data when you respond to a consultation.
We may process your personal information when you interact with UK National Screening Committee (UK NSC) services. This includes:
- when you become a subscriber
- when register as a stakeholder
- when you submit responses to our consultations
This notice sets out how we will use your personal data when you submit responses to our consultations, and your rights. It is made under articles 13 and/or 14 of the General Data Protection Regulation (GDPR). Please note we have a separate privacy notice for our mailing list.
Your data
Purpose
The purpose for which we are processing your personal data is to gather opinions and evidence on population health screening. This helps the UK NSC make informed health screening recommendations to ministers and the NHS in the 4 UK countries.
The data
We will process your:
- name
- email address
- job title (where given)
- employer (where given)
- opinions
We will also process information you volunteer about personal medical experiences or about those of third parties.
Legal basis of processing
The legal basis for processing your personal data is that it is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller.
In this case that is consulting on draft health screening evidence summaries, evidence maps, economic evaluations and other evidence products in order to develop effective recommendations to health ministers.
The legal basis for processing any sensitive personal data you volunteer, is that it is necessary for reasons of substantial public interest for the exercise of a function of the Crown, a Minister of the Crown, or a government department.
Sensitive personal data includes personally identifiable information which includes, but is not limited to a personal patient experience, their racial or ethnic origin, or data concerning a natural person’s sex life or sexual orientation.
Recipients
We share consultation responses with UK NSC members, and when applicable with other bodies for consideration. All personal information will be handled in confidence.
We publish all responses to our consultations and will endeavour to remove any information which may lead to individuals being identified.
Responses submitted by organisations or representatives of organisations may be published in full, minus contact details of individual representatives unless they have expressly consented to publication of their name.
We will not take into account or publish any responses which are openly defamatory or offensive.
As your personal data will be stored on our IT infrastructure it will also be shared with our data processors who provide email, and document management and storage services.
We may share your personal data when required to by law, for example in relation to a request made under the:
Retention
Responses from individuals will be retained in identifiable form until the consultation and review has concluded. This is usually 6 weeks after the UK NSC meeting in which responses were considered.
Consultation responses will generally be retained indefinitely on the basis that the information is of historic value and may inform future iterations of documents upon which the response was submitted. This would include, for example, personal data about representatives of organisations.
Your rights
You have the right to object to the processing of your personal data.
You have the right to request information about how your personal data are processed, and to request a copy of that personal data.
You have the right to request that any inaccuracies in your personal data are rectified without delay.
You have the right to request that any incomplete personal data are completed, including by means of a supplementary statement.
You may have the right to request that your personal data are erased if there is no longer a justification for them to be processed.
You have the right in certain circumstances (for example, where accuracy is contested) to request that the processing of your personal data is restricted.
Contact details
The data controller for your personal data is the Department of Health and Social Care. The contact details for the data controller are:
Data Protection Officer
Department of Health and Social Care
1st Floor North
39 Victoria Street
London
SW1H 0EU
Email: data_protection@dhsc.gov.uk
Complaints
If you consider that your personal data has been misused or mishandled, you may make a complaint to the Information Commissioner, who is an independent regulator. The Information Commissioner can be contacted at:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113 Email: casework@ico.org.uk
Any complaint to the Information Commissioner is without prejudice to your right to seek redress through the courts.
Last updated 12 May 2022 + show all updates
-
Updated contact details for data controller.
-
First published.