NHS DigiTrials Recruitment Support Services (Pilot): GDPR information

Summary

Who we share NHS DigiTrials Recruitment Support Services (Pilot) with and your rights.

Controller	NHS England
How we use the information (processing activities)	A service to identify suitable individuals to invite to participate in clinical research that meets the definition as set out in the UK Policy Framework for Health and Social Care Research and as overseen by the Health Research Authority, by analysing and linking the data NHS England holds as Controller. The aim of the pilots is to explore and test NHS England – via its NHS DigiTrials service – generating and sending the invitations out on behalf of the trial. Limited to a maximum of 22 trials for the pilot.
Does this contain sensitive (special category) data such as health information?	Yes
Who are recipients of this data?	In most cases the studies/research team will not be directly receiving any patient data as part of the invitation process (unless specifically approved by the Health Research Authority). The minimum data required for the invitations to be sent will be shared with a 3rd party provider that is listed in the appropriate Data Sharing Agreement. See the data release uses register for more details.
Is data transferred outside the UK?	No
How long the data is kept	3 years minimum after no longer required
Our lawful basis for holding this data	Legal obligation
Your rights	Be informed Get access to it Rectify or change it Erase or remove it Restrict or stop processing it Move, copy or transfer it Object to it being processed or used Know if a decision was made by a computer rather than a person
How can you withdraw your consent?	Consent is not the basis for processing, however, if an individual has previously opted out of sharing their health data for planning and research purposes by submitting a National Data Opt-out, then they will not be invited to take part in a trial. This pilot service covers the invitation to participate in a trial or research project and if an individual is interested they would need to contact the trial/research team and give their consent to participate. Once in the trial an individual can withdraw at any time.
Is the data subject to decisions made solely by computers? (automated decision making)	No
Where does this data come from?	This is dependent upon the criteria set by the trial, analysis and linkage of data held by NHS England as Controller.
The legal basis for collecting this data	Analysis and linkage only – legal obligation – Directions for pilot NHS DigiTrials Recruitment Support Services Directions 2021.