When you submit your application, the following privacy notice applies:
Your data is being collected by NHS England, whose privacy notice can be found here.
The data controller for this information is NHS England. This application tracking system is provided by Civica UK Ltd (https://www.civica.com/en-gb/product-pages/trac/) as a data processor.
To make an enquiry, a request for your personal information held as part of this process, or to arrange for any mistakes to be corrected, you may contact either the team who are handling your application or the Data Protection Officer ([email protected]).
Recruitment privacy notice
NHS England is the Data Controller for the personal data you provide during the recruitment process. NHS England determines how and why your data is processed.
NHS England has appointed the NHS Business Services Authority (NHSBSA) as a Data Processor to manage applications on its behalf.
How we process your information
The NHSBSA supports NHS England throughout the recruitment process prior to interview, and for successful candidates when NHS England has made a job offer. This is managed through our end-to-end recruitment system, Trac.
We will use the information you have provided to verify your identity, confirm your Right to Work, and manage all stages of the recruitment process.
NHS England are also required to monitor the diversity of candidates to ensure we comply with the Equality Act 2010.
For successful applicants
Before confirming your employment, we will use your information to complete pre-employment checks in line with NHS Employers’ guidance, including:
- Professional registration checks
- Employment history and reference checks
- Disclosure and Barring Service (DBS) check (if required)
- National Security Vetting check (if required)
- Work health assessment: to check you are fit to work or confirm what reasonable adjustments are required, if applicable
- Confirming Right to Work, identity, and eligibility for the vacancy
- Meeting safeguarding law requirements where this is relevant to the vacancy role
Where we process your information
Your information will not be transferred outside the European Economic Area (EEA).
Sharing your personal information
We may share your information with:
- Amiqus and TransUnion for verification services
- Health Partners, to assess your fitness to work and reasonable
- The Disclosure and Barring Service (DBS), if your role requires a DBS check
- Named referees for reference checks
- Other organisations with a legal right to access the data
- Companies who provide candidate assessment tools and applicant tracking services to NHS England
- Other third-party suppliers (or potential suppliers), who provide services on NHS England’s behalf
Keeping your personal information
For non-successful applications, personal information in the e-recruitment system will be deleted within 400 days from the date the application is first submitted through Trac.
This information is retained so that we can revisit vacancies and applications in case the vacancy needs re-advertising or to enable us to respond to any candidate queries.
Successful applications will remain in the system for 400 days, but only employment-related information will be retained within staff records as specified in your contract of employment.
If you withdraw at offer stage, you will not receive any further information and your details may still be retained for 400 days from your application or 200 days from your most recently acquired start date, whichever is longest.
Your rights
NHS England’s privacy notice explains how we use personal data and how you can exercise your rights under the Data Protection Act 2018.