...
Please note that if you access our service using your NHS login details, the identity verification services are managed by NHS England. NHS England is the controller for any personal information you provided to NHS England to get an NHS login account and verify your identity, and uses that personal information solely for that single purpose.
For this personal information, our role is a “processor” only and we must act under the instructions provided by NHS England (as the “controller”) when verifying your identity. To see NHS login’s Privacy Notice privacy notice and Terms and Conditions, please click here. This restriction does not apply to the personal information you provide to us separately.
We use the notifications and messaging service provided by the NHS Transformation Directorate for sending you information. To do this we will only send a minimal amount of information necessary. Further information about the service can be found in the privacy notice for the NHS App managed by NHS Transformation Directorate.
...
Where multiple Organisations contribute to your PKB Record, each Organisation will need to provide a deletion instruction for data where they are a controller of e.g. Organisation A cannot request deletion of data contributed by Organisation B.
An organisation Organisation may provide a deletion instruction to PKB at any point during their contract. After the Service contract has ceased an Organisation may request the PKB Record to be deleted or retained (in line with the Records Management Code of Practice) within PKB or in a different system. Where the Organisation provides a retention instruction to PKB after the Service contract has ceased, a retention-only contract will be established.
...
PKB has a Data Processing Contract (DPC) that sets out the responsibilities of each party. PKB is a Processor processor for all data that forms the PKB Record.
For NHS organisationsOrganisations, a joint controller relationship is established for any data you, as a patient (PKB Account), share with the Organisation.
...
For a breakdown of all
...
Organisations using PKB, please see this map
PKB's responsibilities in the DPC as a Processor processor are:
Providing the Service.
Providing the security of the Service.
Processing on the written instruction of the Controllercontroller.
Organisations providing data are responsible for:
...
For NHS Organisations using PKB, after you share data with them, a Joint Controller joint controller relationship will be formed for this data between PKB and the NHS Organisation – the NHS Organisation may retain this data as part of your healthcare record.
...