The UK National Screening Committee (UK NSC) advises ministers and the NHS in the 4 UK countries about all aspects of screening and supports implementation of screening programmes.

We may process your personal informationdata when you interact with the UK NationalNSC. ScreeningThis Committeeincludes (UKif NSC) services. This includes:you:

• when subscribe youas becomean aindividual subscriber
• whenor registerorganisation asto aupdates stakeholderon UK NSC recommendations or participate in any of the UK NSC’s public consultations
• whensubscribe youto submitUK responsesNSC toBlog our consultationsupdates

This privacy notice sets out how wethe UK NSC will use your personal data when(as youdefined submitby responsesthe toInformation ourCommissioner’s consultations,Office) and your rights.rights It is made under articles 13 and/or 14 of the General Data Protection Regulation (GDPR). Please note we have a separate privacy notice for our mailing list. (GDPR).

Your data

Purpose

TheIf purposeyou forsubscribe whichto weUK areNSC processingrecommendations youror personalthe dataUK isNSC toBlog, gatherwe opinionsuse andyour evidencedata onto populationsend healthyou screening.updates Thisabout helps the UK NSC maketopics informedyou healthare screeninginterested recommendationsin.

If you respond to ministersa andpublic theconsultation NHSon ina screening evidence review, the 4processing UKof countries.your data helps us to develop effective recommendations to ministers.

The data

WeFor updates or blog article subscribers we will process your:

• name
• email address

For UK NSC stakeholders who engage in a UK NSC consultation we will process your:

• name
• email address
• job title (where given)
• employer (where given)
• opinions
• sensitive personal data (includes personal patient experience, race or ethnic origin, or information about someone’s sex life or sexual orientation).

WePlease willtry alsoto processavoid informationincluding yousensitive volunteer(special aboutcategory) personal medicaldata experiences(for orexample, detailed health data about thoseyourself ofor thirdothers). parties.However, if you choose to provide such information, we will handle it under the UK GDPR and the Data Protection Act 2018.

Legal basis of processing

TheOur legallawful basis forunder processingthe yourUK GDPR for handling personal data is

• Public thattask it(Article 6(1)(e))

Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller.controller

InUK thisNSC casedevelops thatevidence-based isrecommendations consulting on draftpopulation health screening evidenceacross summaries,the evidenceUK. maps,This economicis evaluationsin andthe otherpublic’s evidenceinterest.

Who productscan inaccess orderthe todata developyou effectivesend recommendationsus

We toshare healthpersonal ministers.

Thedata legalwith basiscolleagues forwithin processingthe anyUK sensitiveNSC personalsecretariat dataand yourelevant volunteer,policy isteams thatwho need it isto necessarycarry forout reasonstheir ofwork, substantialplus publicUK interestNSC forcommittee themembers exerciseas ofrequired.

Your adata functionis ofstored theon Crown,systems arun Ministerby ofcompanies thethat Crown,provide orour awebsite, governmentemail, department.

Sensitiveand personalconsultation dataplatforms. includesWe personallydo identifiablenot informationshare whichyour includes,data with these companies, but isthey notmay limitedbe able to aaccess personalit patientas experience,part theirof racialrunning orthese ethnicservices. origin,These orcompanies dataare concerningbound aby naturalthe person’ssame sexUK lifedata orprotection sexuallaws orientation.as we are.

Recipients

We may share consultationyour responsespersonal withdata UKwhen NSCrequired members,to andby whenlaw, applicablefor withexample otherin bodiesrelation forto consideration.a request made under the:

• Freedom of Information Act 2000
• Data Protection Act 2018
• Environmental Information Regulations 2004

How we protect your data

All personal informationdata willis be handled in confidence.

We publishkeep allyour responsesdata tosafe ourusing consultationssecurity andmeasures willlike endeavourpassword tocontrols, removeencryption, anyand informationstaff whichtraining.

When maywe leadpublish responses to individualsUK beingNSC identified.

Responsespublic submittedconsultations bywe organisationsremove orpersonal representativesinformation offrom organisationsresponses from individuals.

We may bepublish publishedresponses from organisations in full, minusbut contactwe detailswill ofremove individualcontact representativesdetails unless they haveagree expressly consented to publicationhave of their name.name published.

We will not takeconsider into account or publish any responses which are openly defamatory or offensive.

AsIf yourwe personaluse dataartificial willintelligence be(AI) storedtools onto oursupport IT infrastructure it will also be shared with our dataanalysis, processorswe whoonly provideuse email,DHSC‑approved andAI documenttools, managementsuch andas storageMicrosoft services.

We365 mayCopilot, sharewhich youroperate personalwithin dataDHSC’s whensecure requiredIT toenvironment byand law,protect forall exampleinput inand relationoutput todata a request made under the:

• FreedomEnterprise of Information Act 2000
• Data Protection Act 2018
• Environmental Information Regulations 2004

.

Retention

ResponsesPersonal fromdata individualsshared willto beenable retainedsubscription into identifiableour formservices untilor theto consultationregister andas reviewa hasstakeholder concluded.will Thisbe iskept usuallyby 6us weekswhile after the UK NSC meetingcontinues into whichexist, responsesor wereuntil considered.

Consultationyou responsesopt willout generallyof bethese retainedservices.

We indefinitelykeep onconsultation theresponses basisfor that15 theyears informationbecause isthey ofmight historichelp valueus andupdate mayour informguidance futurein iterations of documents upon which the responsefuture. was submitted. This would include, for example, personal data about representatives of organisations.

Your rights

You have the right to to:

• object to the processing of your personal data.

  You

• ask haveus thehow rightwe touse request information about how your personal data are processed, and toask requestfor a copy of thatit.
• ask personalus data.

  You have the right to requestcorrect that any inaccuraciesmistakes in your personal data arestraight rectifiedaway

• ask withoutus delay.

  Youto haveadd the right to requestyour thatdata anyif incompletethere personal data are completed,things includingmissing

• ask byus means of a supplementary statement.

  You may have the right to requestdelete that your personal data are erased if therewe is no longer aneed justificationit

In forsome themcases, toyou becan processed.

Youask haveus theto rightlimit inhow certainwe circumstancesuse (foryour example,data. whereFor accuracyexample, isif contested)you tothink request that the processingdata ofwe yourhave personalabout datayou is restricted.wrong.

Contact details

The data controller for your personal data is the the Department of Health and Social Care. The contact details for the data controller are:

Email: Email: data_protection@dhsc.gov.uk

Complaints

If you consider that your personal data has been misused or mishandled, you may make a complaint to the Information Commissioner, who is an independent regulator. The Information Commissioner can be contacted at:

Telephone: 0303 123 1113 Email:1113. Email: casework@ico.org.uk

AnyComplaining complaint to the Information Commissioner isdoes withoutnot prejudiceaffect to your right to seektake redresslegal through the courts.action.