Our website places small files, known as cookies, onto your device.
Cookies measure how you use our website so we can update and improve it based on your needs.
Find out how to manage cookies.
What cookies we use and why
Google Analytics cookies
We use Google Analytics software to collect information about how you use our website.
Google Analytics collects information about:
- the pages you visit and how long you spend on them
- how you got to the service
- what you click on when you’re using the service
You can opt out of being tracked by Google Analytics across all websites.
Google Analytics uses the following cookies:
| Cookie name | Purpose | How long it stays on your device |
|---|---|---|
| _utma | To determine the number of unique visitors to our website | 2 years |
| _utmb | To establish and continue your internet browser session on our website | 30 minutes |
| _utmt | To manage data transfer volumes | 10 minutes |
| _utmz | To determine where you came from when visiting our website | 6 months |
| _ga | To distinguish users | 2 years |
| _gid | To distinguish users | 24 hours |
| _gat | To manage data transfer volumes | 10 minutes |
| _utmc | To determine whether the user was beginning a new session / visit | Until you close your browser |
| _utmv | To store information about your visit to our webpages. This is updated every time information is sent to Google Analytics. | 2 years after the last update |
| CookieControl | To store your analytic cookies preference for our website www.nhsbsa.nhs.uk | 90 days |
What our services use
Depending on which of our services you use, we also use other cookies. You can view the cookies for each service.
Information Services
We use the following cookies for the ePACT2, eDEN, eOPS, and Catalyst systems.
| Cookie name | Purpose | How long it stays on your device |
|---|---|---|
| JESSIONID | Stores your session ID used by the ISP server to distinguish you from others. This cookie is essential for this system to work. | Until you close your browser |
| ORA_BI_SESSPARAM | To keep you logged into the relevant parts of the system. This cookie is essential for this system to work | Until you close your browser |
| ORA_BI_SESSTOK | To keep you logged into the relevant parts of the system. This cookie is essential for this system to work. | Until you close your browser |
| ORA_BIPS_LBINFO | To keep you logged into the relevant parts of the system. This cookie is essential for this system to work. | Until you close your browser |
| ORA_BIPS_NQ | To keep you logged into the relevant parts of the system. This cookie is essential for this system to work. | Until you close your browser |
The following cookies are used with our Data Hub platform:
Cookies that make our website work (essential)
| Cookie name | Purpose | How long it stays on your device |
|---|---|---|
| _csrf | Protects forms and actions from Cross-Site Request Forgery (CSRF) attacks. A security cookie required for the site to function safely. | Until you close your browser (session cookie) |
| AWSALB | Set automatically by AWS. Routes requests to the same backend server to keep the service stable. | Session cookie |
| AWSALBCORS | Set automatically by AWS. Supports AWS load balancing with modern browser CORS requirements. | Session cookie |
| data-hub.sid | Stores your session ID so the service can maintain your session while you use the service. | 1 year (based on current session configuration) |
| lang | Remembers your language preference so the site displays in the correct language. | 1 year (based on current language preference configuration) |
| nhsuk-cookie-consent | Stores your cookie consent choice so you are not asked again every time you visit. | 90 days (configured by the NHSBSA cookie consent component) |
Cookies that measure website use (analytics)
| Name | Purpose | Expires |
|---|---|---|
| _ga | Distinguishes unique users and is used to generate statistical data about how visitors use the website. | 13 months |
| _ga_ | Stores session state for your Google Analytics 4 property and helps associate activity with the correct analytics session. | 13 months |
NHS Dental Services
We use the following cookies for Compass. Analytic cookies are not used.
| Cookie name | Purpose | How long it stays on your device |
|---|---|---|
Username is the local login rather than the Compass login | This cookie is essential for this system to work | Until you close your browser |
eseries_locale (Examples are en_GB or ga_IE) | This cookie remembers the language you use | Until you decide to delete it |
NHS Help with Health Costs
We use the following cookie for these digital services:
- check if you get free NHS prescriptions
- check what help you could get to pay for NHS costs
- maternity exemption
- NHS low income scheme
- prescription prepayment certificate
- HRT prescription prepayment certificate
- Healthy Start
| Cookie name | Purpose | How long it stays on your device |
|---|---|---|
| JSESSIONID | This cookie is essential for these systems to work | Until you close your browser |
| AWSALB | This cookie is essential for this system to work | Until you close your browser |
Overseas Healthcare Services (including UK GHIC and UK EHIC)
We use the following cookies in relation to the European Health Insurance Card (EHIC) and Global Health Insurance Card (GHIC).
| Cookie name | Purpose | How long it stays on your device |
|---|---|---|
| JSESSIONID | This cookie is essential for this system to work | Until you close your browser |
| AWSALB | This cookie is essential for this system to work | Until you close your browser |
NHS Pensions
We use the following cookies for the online pension service:
| Cookie name | Purpose | How long it stays on your device |
|---|---|---|
| AWSALB | This cookie is essential for this system to work | Until you close your browser |
| pensions_awards_token | This cookie is essential for these systems to work | 40 minutes |
My NHS Pension
We use the following cookies for the My NHS Pension service:
| Cookie name | Purpose | How long it stays on your device |
|---|---|---|
| ASP.NET_SessionId | Functional - required to access the home page and login page | During current session |
| OpenIdConnect.nonce.#### | Functional - required to access the home page and login page | 20 mins |
| Equiniti.SelfService.Auth | Functional - required to use the site but only when the user has chosen to log in or complete an action | 20 mins |
| Equiniti.MemberSelfService.UserOptions | Functional - required to use the site but only when the user has chosen to log in or complete an action | 20 mins |
| Equiniti.MemberSelfService.Memberships | Functional - required to use the site but only when the user has chosen to log in or complete an action | 20 mins |
| Idsvr.xsrf | Functional - required to use the site but only when the user has chosen to log in or complete an action | During current session |
| Idsvr.clients | Functional - required to use the site but only when the user has chosen to log in or complete an action | 1 days |
| Idsvr.session | Functional - required to use the site but only when the user has chosen to log in or complete an action | During current session |
| Idsvr | Functional - required to use the site but only when the user has chosen to log in or complete an action | During current session |
| SignInMessage.#### | Functional - required to use the site but only when the user has chosen to log in or complete an action | During current session |
| cid.clientCode | Functional - required to use the site but only when the user has chosen to log in or complete an action | 1 days |
| cid.brand | Functional - required to use the site but only when the user has chosen to log in or complete an action | 1 days |
| cid.resetpassword | Functional - required to use the site but only when the user has chosen to log in or complete an action | 20 mins |
| cid.registration | Functional - required to use the site but only when the user has chosen to log in or complete an action | 20 mins |
| cid.accountmanagement | Functional - required to use the site but only when the user has chosen to log in or complete an action | 20 mins |
| cid.tfa_device | Functional - required to use the site but only when the user has chosen to log in or complete an action | 20 mins |
| cid.tfa_setup | Functional - required to use the site but only when the user has chosen to log in or complete an action | 20 mins |
| terms-accepted | Functional - required to use the site but only when the user has chosen to log in or complete an action | 999 days |
| cookies-accepted | Functional - required to use the site but only when the user has chosen to log in or complete an action | 999 days |
| wm-popover-dismissed | Functional - assistance cookies (not required to use the site). Acts as an assistant. | During current session |
| TS# | Functional - assistance cookies. Acts to provide additional security. | 13 months |
Google Analytics uses the following cookies in My NHS Pension:
| Cookie name | Purpose | How long it stays on your device |
|---|---|---|
| _ga | To distinguish users | 2 years |
| _gid | To distinguish users | 18 months |
| _gat | To manage data transfer volumes | 2 years |
NHS Prescription Services
We use the following cookie for the electronic Drug Tariff.
| Cookie name | Purpose | How long it stays on your device |
|---|---|---|
| BAYEUX_BROWSER | This cookie is essential for this system to work | Until you close your browser |
| JSESSIONID | This cookie is essential for this system to work | Until you close your browser |
Dictionary of Medicines and Devices (dm+d)
We use the following cookies for these digital services:
| Cookie name | Purpose | How long it stays on your device |
|---|---|---|
| JSESSIONID | This cookie is essential for this system to work | Until you close your browser |
| AWSALB | This cookie is essential for this system to work | Until you close |
Student Services
We use the following cookie for Bursary Online Support System (BOSS) and the Learning Support Fund Application System (LSFAS).
| Cookie name | Purpose | How long it stays on your device |
|---|---|---|
| ASP.NET_SessionId | This cookie is essential for this system to work | Until you close your browser |
We use the following cookies for MyFunding, NHS Learning Support Fund (NHSLSF) and the NHS Bursary application system.
| Cookie name | Purpose | How long it stays on your device |
|---|---|---|
| JSESSIONID | This cookie is essential for this system to work | Until you close your browser |
| AWSALB | This cookie is essential for this system to work | Until you close your browser |
Total Rewards Statement
We use the following cookies for the Total Rewards Statement.
| Cookie name | Purpose | How long it stays on your device |
|---|---|---|
| TRS_PROD | To manage data transfer volumes | Until you close your browser |
| AWSUSER_ID | To determine the number of unique visitors to our website | 2 Months |
| AWSSESSION_ID | To determine whether the user was beginning a new session / visit | 1 Hour |
| ASP.NET_SessionId | This cookie is essential for this system to work | Until you close your browser |
Electronic Staff Record (ESR)
We use the following cookies for the Electronic Staff Record.
| Cookie Name | Purpose | How long it stays on your device |
|---|---|---|
| ajs_anonymous_id | To register the user visits to the site with Google Analytics enabled | 1 year |
| ajs_group_id | To track visitor usage and events within the website. No value stored in this cookie. | 1 year |
| ajs_user_id | To track visitor usage and events within the website. No value stored in this cookie. | 1 year |
| GUEST_LANGUAGE_ID | To identify unique users in browsers | 1 year |
| LFR_SESSION_STATE_20159 | To identify unique users in browsers | Until you close your browser |
| LFR_SESSION_STATE_904895 | To identify unique users in browsers | Until you close your browser |
| NS-N3-MYESR-ENVIRONMENT | To identify unique users in browsers | Until you close your browser |
| PD-H-SESSION-ID | To identify unique users in browsers | Until you close your browser |
| PD_STATEFUL_<<Generated ID>> | To identify unique users in browsers | Until you close your browser |
| POPUPALWAYS | To identify unique users in browsers to facilitate pop-up messaging | Until you close your browser |
| POPUPONCE | To identify unique users in browsers to facilitate pop-up messaging | 1 year |
Vaccine Damage Payment Scheme
We use the following cookies:
| Cookie name | Purpose | How long it stays on your device |
|---|---|---|
| JSESSIONID | This cookie is essential for this system to work | Until you close |