The NHS Business Services Authority (NHSBSA) is responsible for this service.
What information we process
We may process the following information in relation to student services:
- demographic data such as your name, age, and address
- education information such as the course and university you attended
- financial details such as student bursary information and, where applicable, debt recovery
Why we process your information
We will use the information you provide to:
- assess your application
- pay you
- detect and prevent fraud and mistakes
- analyse general trends to support more effective planning of NHS services
- research the effectiveness of the training grant, social work bursary and NHS bursary.
- check your claim for help with NHS charges under the NHS Low Income Scheme
- recover money from you where this is owed to NHSBSA
By law, we must process this information on behalf of the Department of Health and Social Care (DHSC).
Sharing your personal information
To prevent, detect and investigate fraud and errors, we may share your information with:
- Student Loans Company
- HM Revenue and Customs
- Higher education institutions
- The Home Office
- Organisations from which you receive benefits, bursaries, grants or support
- Bodies performing functions on behalf of the above organisations
We may share personal information with the DHSC to investigate and prosecute fraud, or any other unlawful activity affecting the NHS.
We may share information with the Cabinet Office in relation to the National Fraud Initiative.
Anonymised information may also be shared with the DHSC to:
- monitor compliance with equality law
- research the effectiveness of the Training Grant
If you owe NHSBSA money in relation to Student Services, we may share your information with our debt recovery partners, Integrated Debt Services Ltd, who collect the debt on our behalf.
Your information will not be transferred outside the UK or European Economic Area.
Keeping your personal information
We will delete incomplete or rejected applications one academic year after it was received.
All data for successful applications will be deleted no later than seven years after your course finishes.
Any information in relation to debt collection will be retained for no longer than seven years from the from the date of the last payment we made to you.
Your rights
The information you provided will be managed as required by Data Protection law.
You have the right to:
- receive a copy of the information the NHSBSA hold about you
- request your information be changed if you believe it was not correct at the time you provided it.
- request that your information be deleted if you believe we are keeping it for longer than necessary.
Find out more about your rights and how we process information.