We provide a range of services on behalf of the NHS.
Why we process your information
We support primary care contractors to meet their contractual obligations. We do this on behalf of NHS England and the Welsh Government.
We support dental providers, GPs, General Ophthalmic Services contractors, and pharmaceutical contractors to:
- identify and prioritise contracts for review
- manage resources and workflows
- measure the benefits achieved
We inform NHS England and the Welsh Government of the actions taken, and potential further opportunities for the NHS.
The service provider performing your review may forward your information to us. You agreed to this when you signed the relevant form, which is part of the NHS contract terms of service.
By law, we must process this information on behalf of the NHS.
We’ll use the information to:
- make sure the service provider has claimed the correct amount
- identify error or potential fraud
- help plan and make improvements to NHS services and direct patient care
Keeping your information
If we use any of your information, we’ll keep a copy for 7 years plus one year of receipt of the claim or record. This is for audit and review purposes and in line with NHS England and the Welsh Government’s data retention schedules. After this, the information will be deleted or destroyed.
Any physical copies of your information will either be returned to the contractor or destroyed.
Sharing your information
We deliver this service on behalf of NHS England and the Welsh Government and summaries of activity will be shared between us. Where we do hold confidential patient information, we will only share this with those:
- directly involved in the Provider Assurance work who already have access to the confidential patient information
- with a legal right to it
- who you've given us permission to share with
To prevent, detect and investigate fraud, we may share your information with:
- NHS England
- NHS Counter Fraud Authority
- The Department for Work and Pensions
- HM Revenue and Customs
- Veterans UK
- NHS commissioners and service providers
Your information will not be transferred outside the UK or European Economic Area.
Your rights
The information you provided will be managed in line with data protection law.
You have the right to:
- receive a copy of the information the NHSBSA hold about you
- request we amend your information if you believe it is not accurate
- request we delete your information if you believe we're keeping it for longer than necessary
Find out more about your rights and how we process information.