Search results
Showing: 3 of 3
Lawful basis for processing
We are required by law to process your information. You can view the lawful basis for each of our services.
Our legal basis for processing under the UK General Data Protection Regulation (UK GDPR) for each service set out on this page is:…
Overseas Healthcare Services privacy notice
View the Welsh version of the Overseas Healthcare Services privacy notice (PDF: 123KB).
The NHS Business Services Authority (NHSBSA) and the Department of Health and Social Care (DHSC) are jointly responsible for this service under a Joint…
Appropriate Policy Document – Our processing of special categories of personal data and criminal offence data
As part of the NHS Business Services Authority (NHSBSA) statutory and corporate functions, we process special category data and criminal offence data in accordance with the requirements of Article 9 and 10 of the General Data Protection Regulation…