Skip to main content Skip to footer

NHS Injury Benefits Scheme privacy notice

The NHS Business Services Authority administers the NHS Injury Benefit Scheme in England and Wales on behalf of the Secretary of State for Health and Social Care in accordance with the regulations which govern the scheme.

Why we process your information

We’ll use your information to consider your entitlement to NHS Injury Benefits and to calculate and process payments to you, your partner or your dependants.

We may also use your information to:

  • send you details about your Injury Benefits
  • communicate with your employer
  • prevent, detect, investigate and prosecute possible fraud
  • help plan and make improvements to NHS services

We may ask you for:

  • information that identifies you, and if appropriate, your partner and dependants
  • banking details
  • medical information to support your application
  • details of relevant Department for Work and Pensions benefits you receive or have received
  • details of any compensation or damages payments
  • authority to deal with third party representatives

Sharing your personal information

We may share your information with:

  • the Department of Health and Social Care – to administer and pay Injury Benefit claims, or to inform government policy
  • the Department for Work and Pensions, the Cabinet Office, and the General Register Office – to prevent and detect fraud and mistakes
  • those acting on our behalf, such as our Medical Services provider
  • anyone the law requires us to, such as HM Revenue and Customs

Your information will not be transferred outside of the European Economic Area, unless you instruct us to do so.  

Keeping your personal information

We’ll delete or anonymise your personal data when we no longer need to be able to identify you from that information. This will be:

If an allowance is paid to your partner or dependants in the event of your death

7 years after your partner or dependant’s death. We’ll also retain your partner or dependant’s information for 7 years after their death.

All other circumstances

No more than 50 years after you die.

Your rights

The information you provide will be managed as required by Data Protection law.

You have the right to:

  • receive a copy of the information the NHSBSA holds about you
  • request your information be changed if you believe it was not correct at the time you provided it

From 25 May 2018, you have the right to:

  • request that your information be deleted if you believe we are keeping it for longer than necessary

Find out more about your rights and how we process information.