Privacy Policy

This page outlines NHS Blood and Transplant privacy policy, including information on how the data we collect is shared. If you are looking to request recorded information held by NHSBT, please visit our freedom of information and privacy page.

For a Welsh language version of our privacy information, visit: Hysbysiad preifatrwydd

Coronavirus (COVID-19) and Data Protection

You may have already provided information for a specific reason to NHS Blood and Transplant or its health and social partners. Due to the rapidly emerging situation we may seek to collect and process your personal data in response to the coronavirus pandemic (COVID-19) which is above and beyond what would ordinarily be collected. We are doing this to ensure patient safety and protect life. Such information will be limited to what is proportionate and necessary, taking into account the latest legislation from GDPR, the Data Protection Act 2018 and guidance issued by NHS Digital, NHSX and Department of Health and Social Care.

Control of Patient Information Regulations – Notice under Regulation 3(4) of the Health Service Control of Patient Information Regulations 2002

NHS Blood and Transplant would like to inform you that the Secretary of State for Health and Social Care has provided a legal notice in the form of a Control of Patient Information (COPI) Notice to support the processing and sharing of information amongst those organisations providing healthcare services to the public and monitoring and managing the outbreak of COVID-19.  The Notice is valid until 31st March 2021.

Further information on the Notice can be found on the Government website

NHS Digital and Blood Donation – data sharing during the COVID-19 pandemic

Information has been provided to us by NHS Digital in these unique circumstances to help us find potential suitable donors to tackle the COVID-19 global pandemic. This information may be shared with processors of NHSBT under strict controls and in compliance with the law.  The description of data shared includes:

  • Name
  • NHS number
  • Date of Birth
  • Gender
  • Address
  • Postcode
  • Mobile telephone number
  • Landline telephone number
  • Date of test
  • Source diagnosis
  • Date of hospital admission for COVID-19
  • Date of hospital discharge for COVID-19

Anyone has the right to opt out of any future communications from NHSBT should they wish to do so. NHSBT will not retain data if an individual chooses not to donate or register with our services.

Find out more about how we are working to overcome the challenges caused by the Coronavirus pandemic