Skip to main content

Digital

NHS Communications Manager (NHS Notify) service

Summary

Why and how we process your data in the NHS Communications Manager service and your rights.

Controller NHS Digital is the controller and patients are the data subjects.
How we use the information (processing activities)

The Communications Manager service (now renamed NHS Notify) is a standalone service product that supports NHS England direct care services by using a variety of digital and physical messaging to communicate with patients (a defined patient cohort) in a centralised and standardised way.

NHS England services that consume the Communications Manager service manage their communications with content and templates and choose a multi-channel routing configuration so that emails, SMS, NHS App notifications and letters (inc. accessible formats) are sent to their intended recipients. Accessibility format letters include braille, large print, easy read, and foreign languages.
Does this contain sensitive (special category) data such as health information? Yes
Who are recipients of this data?

Patients to whom the message is sent.  
Is data transferred outside the UK? This data is not transferred out of the UK
How long the data is kept Audit data is held for up to 18 months.
Our lawful basis for holding this data Public task
Your rights
  • Tick Be informed
  • Tick Get access to it
  • Tick Rectify or change it
  • Cross Erase or remove it
  • Tick Restrict or stop processing it
  • Cross Move, copy or transfer it
  • Tick Object to it being processed or used
  • Tick Know if a decision was made by a computer rather than a person
How can you withdraw your consent?

To discuss your rights on withdrawing consent or opting out of the data you can email our customer service centre or call us on 0300 303 5678.
Is the data subject to decisions made solely by computers? (automated decision making) Not relevant
Where does this data come from? Data subjects
The legal basis for collecting this data

NHS Digital relies on Health and Social Care 2012 - Schedule 18, paragraph 10 (General Powers). 

GDPR

Article 6 (1e) – Public task , Article 9(2)(g) - processing is necessary for reasons of substantial public interest, Article 9 (2) (h) – processing is necessary for the management of health or social care systems and services

Where we use this data

internal

NHS Notify

NHS Notify allows organisations and services to send NHS App messages, emails, texts and letters to patients and the public more effectively.