Sets out how DHSC and NHSBSA collect and use personal information as part of the process of providing reciprocal healthcare.
The Department of Health and Social Care (DHSC) and the NHS Business Services Authority (NHSBSA) have joint responsibility for data relating to claims for financial reimbursement for reciprocal healthcare treatment.
This privacy notice describes how we collect and use personal information about you, in accordance with data protection law, including the the UK General Data Protection Regulation 2016/679 (‘the UK GDPR’) and the Data Protection Act 2018.
The joint data controller agreement sets out how DHSC and NHSBSA will process personal data as joint controllers.
Excerpt from the official page. The original is authoritative.