Skip to main content Skip to footer

NHS Tax Credits privacy notice

HM Revenue and Customs (HMRC) determine who is eligible for NHS Tax Credit exemptions. They share this information with the NHS Business Services Authority. We’ll use the information to manage the NHS Tax Credit Service for the UK.

Why we process your information

By law, we must process this information to be able to provide this service.

We match the shared information against claims you make of being exempt from NHS charges.

We may use your information to:

  • check that your certificate is valid - if we can’t confirm that it’s valid, you may be sent a Penalty Charge Notice
  • analyse with other patients' information to understand  patterns and trends that will be used  to plan and make improvements to NHS services, and/or direct patient care

Sharing your personal information

To support more effective planning and improvements to NHS services and patient care, we may share our understanding of patterns and trends gained from patient information with:

  • NHS Commissioners and service providers
  • Department of Health and Social Care
  • NHS Counter Fraud Authority
  • Scottish Ministers
  • Welsh Government Department for Health and Social Services
  • The Department of Health, Social Services & Public Safety (Northern Ireland)

We may share your information to prevent or detect crime, and protect public funds from fraud with:

  • Scottish Ministers
  • Welsh Government Department for Health and Social Services
  • The Department of Health, Social Services & Public Safety (Northern Ireland)
  • NHS Commissioners and service providers

Your information will not be transferred outside the UK or European Economic Area.

Keeping your personal information

Your personal data will be deleted from our systems and files no later than 24 months after your certificate expires.

Your rights

The information you provided will be managed as required by Data Protection law.

You have the right to:

  • receive a copy of the information the NHSBSA hold about you
  • request your information be changed if you believe it was not correct at the time you provided it – we will forward your request to HMRC who maintain this information
  • request that your information be deleted if you believe NHSBSA are keeping it for longer than necessary
  • request a review of the automated decision to issue you with a Penalty Charge Notice

Find out more about your rights and how we process information.