NHS Blood and Transplant People First

My Personal Data

NHSBT Employee Privacy Notice - How we use your data and why?

The General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy for all individuals within the European Union and replaces the Data Protection Directive. It also addresses the export of personal data outside the EU.

The General Data Protection Regulation (GDPR) provides us with the legal basis for us to process your data. The vast majority of your personal data is used and processed because it is necessary to fulfil obligations set out in your employment contract.

Following this change to legislation, this page gives you an overview of how NHSBT uses your data. 

You can obtain more information or ask specific questions about your data by contacting customer services at customer.services@nhsbt.nhs.uk or the Data Protection Officer at dpo@nhsbt.nhs.uk.

Why do we need to process your personal data?

As your employer we need to hold and process your personal data to support your employment, this includes payroll, occupational health and wellbeing.

What personal information do we collect?

We hold personal information such as:

  • Name
  • Date of birth
  • Home address
  • Religion, ethnicity and sexual orientation (for the purposes of the Equalities Act)
  • Personal telephone number
  • Bank Account details
  • National insurance number
  • Membership of professional bodies

Could my data be used for other purposes?

The information we hold will be primarily for management and administrative use but we may disclose information we hold about you to relevant third parties such as Her Majesty’s Revenue and Customs, or others as required by law. We may also share your information with third parties regarding your employment, for example with an external payroll/pensions provider. This information will be held to the same high standard under GDPR and regularly audited.

How long will you keep my data for?

We will hold your data securely and it will be retained in line with the NHS Records Management Code of Practice for Health and Social Care 2016.

What rights do I have to my data?

  • to be informed about how your data is used. It is the intention of this page to give you an overview of how NHSBT uses your data.
  • to request a copy of the information we hold about you
  • to update or amend the information we hold about you if it is wrong
  • to change your communication or marketing preferences at any time
  • to erasure (also called the right to be forgotten). Applications to apply this right will be considered by NHSBT on a case by case basis due to our obligations under the Human Tissues Act and Blood Safety and Quality Regulations 2005
  • to restrict how your data is processed to raise a concern or complaint about the way in which your information is being used.

The Data Protection Officer

Under GDPR, all NHS organisations are legally required to appoint a Data Protection Officer (DPO). Our current DPO is Katrina Smith, Head of Information Governance, who is responsible for ensuring that all of our practices and processes are designed to support people’s privacy and data rights and making sure data protection is represented at a board level.

You can contact the Data Protection Officer if you have any questions or concerns about your privacy rights within NHSBT via: dpo@nhsbt.nhs.uk

The Information Commissioners Office (ICO)

The ICO are the UK’s independent authority set up to uphold information rights in the public interest and promote openness in public bodies and data privacy for individuals. The ICO provide free and independent advice to citizens on their privacy rights.  

You can contact the ICO for advice or log a complaint via:

  • Website: www.ico.org.uk
  • Helpline: 0303 123 1113 (local rate – calls to this number cost the same as calls to 01 or 02 numbers). If you're calling from outside the UK, you may not be able to use the 03 number, so please call +44 1625 545 700.
  • Welsh speaking service: 029 2067 8400. Rydym yn croesawu galwadau yn Gymraeg ar 029 2067 8400.
  • Normal opening hours are Monday to Friday between 9am and 5pm.

Or you can write to:

Information Commissioner's Office
Wycliffe House
Water Lane

Twitter |  Facebook |  RSS
Give Blood Yes I Donate logo bone marrow logo tissue donation logo cord blood bank NHS Choices