Skip to main content Skip to footer

Provider assurance privacy notice

We provide a range of services on behalf of the NHS.

Why we process your information 

We support primary care contractors to meet their contractual obligations. We do this on behalf of NHS England and the Welsh Government. 

We support dental providers, GPs, General Ophthalmic Services contractors, and pharmaceutical contractors to:  

  • identify and prioritise contracts for review
  • manage resources and workflows
  • measure the benefits achieved

We inform NHS England and the Welsh Government of the actions taken, and potential further opportunities for the NHS. 

The service provider performing your review may forward your information to us. You agreed to this when you signed the relevant form, which is part of the NHS contract terms of service. 

By law, we must process this information on behalf of the NHS. 

We’ll use the information to: 

  • make sure the service provider has claimed the correct amount
  • identify error or potential fraud
  • help plan and make improvements to NHS services and direct patient care

Keeping your information 

If we use any of your information, we’ll keep a copy for 7 years plus one year of receipt of the claim or record. This is for audit and review purposes and in line with NHS England and the Welsh Government’s data retention schedules. After this, the information will be deleted or destroyed. 

Any physical copies of your information will either be returned to the contractor or destroyed.  

Sharing your information 

We deliver this service on behalf of NHS England and the Welsh Government and summaries of activity will be shared between us. Where we do hold confidential patient information, we will only share this with those: 

  • directly involved in the Provider Assurance work who already have access to the confidential patient information
  • with a legal right to it
  • who you've given us permission to share with

To prevent, detect and investigate fraud, we may share your information with: 

  • NHS England
  • NHS Counter Fraud Authority
  • The Department for Work and Pensions
  • HM Revenue and Customs
  • Veterans UK
  • NHS commissioners and service providers

Your information will not be transferred outside the UK or European Economic Area

Your rights 

The information you provided will be managed in line with data protection law. 

You have the right to: 

  • receive a copy of the information the NHSBSA hold about you
  • request we amend your information if you believe it is not accurate
  • request we delete your information if you believe we're keeping it for longer than necessary

Find out more about your rights and how we process information