- This privacy policy explains how we use your personal data when you use the NHS check if you need a lung scan - digital service. The NHS check if you need a lung scan pilot is provided as an alternative to the phone - appointment, the lung health check. Find out more about the NHS lung cancer - screening. -
-You may find it helps to understand these terms when reading this policy.
- -You can find out more about these terms on the Information Commissioner's Office website.
-In this privacy policy, 'we' or 'us' means NHS England and Department of Health and Social Care (DHSC). 'You' - or 'your' means you, a member of the public who is using the NHS check if you need a lung scan.
-The NHS check if you need a lung scan has been designed in line with the NHS lung cancer screening programme standards.
-Under data protection law, NHS England and DHSC are joint controllers for the personal data put into the NHS - check if you need a lung scan. The DHSC have commissioned NHS England to deliver the NHS check if you need a - lung scan.
-NHSE controller:
- NHS England's Data Protection Officer at england.dpo@nhs.net
DHSC controller:
- Lee Cramp, DHSC data protection officer at data_protection@dhsc.gov.uk
NHSE handles operational delivery, SARs, security. They are the main point of contact.
-DHSC acts as commissioning authority for NHSE.
-Individuals can exercise rights via NHSE contact point.
-NHS England is controller of NHS login.
- -Edenred are a processor for the personal data that is entered into the NHS check if you need a lung scan. For - more - information, see the Edenred privacy policy.
-The NHS check if you need a lung scan invites adults aged 55 to 74 years who have ever smoked to take part in - lung cancer screening.
-The check - mainly done by a phone appointment called the lung health check, asks a person questions about - their medical history and lifestyle to work out their chances of developing lung cancer in the next 5 years.
-We will compare your answers from the online questionnaire and phone appointment to assess the clinical safety - and effectiveness of the service.
-The NHS check if you need a lung scan involves:
-You can access NHS check if you need a lung scan using your NHS login details. You will be informed that NHS - login will share limited identity information required to access the service.
-We will use your NHS number to compare your responses to NHS check if you need a lung scan to your responses in - your phone appointment. Once you have completed your phone appointment we will also use your NHS login email to - offer you a £10 voucher from Edenred vouchers.
-Your NHS login email address will be shared with Edenred once you have completed your phone appointment. - Edenred will use your email to send you a £10 voucher as a thank you for testing the online service.
-We will not use your NHS login information for any other purposes. You can only share your NHS login - information if you have proved your identity to NHS login.
-For more information, see the NHS login privacy notice and terms and conditions.
-| Category of information | -Description | -
|---|---|
|
- NHS login account information - |
-
- The personal data provided by NHS login to access the NHS check if you need a lung scan, such as - name, NHS number, and email. - |
-
|
- Audit data - |
-
- Information filled in the NHS check if you need a lung scan about your use of the system such as time - of use, actions you took and related technical log events. Your NHS number is also stored against - these records. -The logs enable analysis for: -
|
-
|
- Performance data - |
-
- How long the system takes to complete tasks, number of errors, success or failure at task completion. - - |
-
|
- NHS check if you need a lung scan demographic data - |
-
- The personal information you provide to use the NHS check if you need a lung scan such as your: -
|
-
|
- NHS check if you need a lung scan health and lifestyle questionnaire data - |
-
- - The personal data you provide to calculate the results of the check such as: -
|
-
|
- Application metadata - |
-
- The personal data created from the NHS check if you need a lung scan based on the demographic - information you provide. Metadata includes date and time of submission, NHS number. - |
-
NHSE uses the information you have provided in NHS check if you need a lung scan to compare your responses to - similar questions in your lung health check phone appointment. This comparison will help us assess the clinical - safety of the NHS check if you need a lung scan pilot. We remove all personal details, such as your name and - email address when we do this.
-We use technical and audit data to:
-We may also collect optional user feedback through surveys. This feedback is:
-NHSE relies on its powers under the National Health Service Act 2006 to undertake its role which is primarily: -
-UK GDPR Article 6(1)(e) ‘…processing is necessary for the performance of a task carried out in the exercise of - official authority vested in the controller'.
-Underpinned by statutory powers set out above.
-Processing of special categories of personal data:
-UK GDPR Article 9(2)(h)
-‘processing is necessary …for the provision of health or social care or treatment or the management of health - or social care systems and services on the basis of domestic law or pursuant to contract with a health - professional and subject to the conditions and safeguards referred to in paragraph 3.’
-Underpinned by DPA2018 Sch1:
-Health or social care purposes
-2(1) This condition is met if the processing is necessary for health or social care purposes.
-(2) In this paragraph “health or social care purposes” means the purposes of—
-….
- -(f) the management of health care systems or services or social care systems or services.
- -Directions issued pursuant to the Health and Social Care Act 2012, Section 254(1):
-Implied consent is given by participants choosing to use the NHS check if you need a lung scan. NHS England's - processing of personal data is not in itself directly for direct care but for the operation and maintenance of - the system to support direct care.
- -Any personal data collected and processed for these activities will be done pursuant to UK GDPR Article 6(1)(a) - '….the data subject has given consent to the processing of his or her personal data for one or more specific - purposes' and UK GDPR Article 9(2)(a) '…the data subject has given explicit consent to the processing of those - personal data for one or more specified purposes'.
- -Article 6(1)(e) of the UKGDPR which permits processing that is necessary for the performance of a task in the - public interest or in the exercise of the Controller’s official authority.
-The processing is in line with the Secretary of State for Health and Social Care’s duties in relation to the - promotion and provision of the health service (including public health functions), as outlined in Part 1 of the - NHS Act 2006 (as amended by the Health and Social Care Act 2012).
-The Department of Health and Social Care rely on the same conditions under Article 9 of the UKGDPR as NHS - England, outlined above.
-| Category of information | -Description | -
|---|---|
|
- Audit data - |
-
- Audit events - duration of the pilot plus 1 year - |
-
|
- Performance data - |
-
-
|
-
|
- NHS check if you need a lung scan demographic data - |
-
- Duration of the pilot plus 1 year - |
-
|
- NHS check if you need a lung scan health and lifestyle questionnaire data - |
-
- Duration of the pilot plus 1 year - |
-
We process and store your data in the United Kingdom within Microsoft Azure.
-The right to be informed - this privacy policy explains how we use your personal data to - provide the NHS - check if you need a lung scan.
- -The right of access - to get a copy of your data submitted to the NHS check if you need a lung - scan, you - can request this by completing a Subject Access Request (SAR). If you would like a copy of your GP record, - please contact your GP surgery.
-The right of rectification - Individuals can ask for corrections to be made to their records. -
-The right to erasure - This right does not apply to data collected under 6(1e) Public Task. - Where - information is provided by the recipient for service management and user research under GDPR consent, the - requests for erasure can be exercised through the email address above.
-The right to the restriction of processing - You have the right to ask us to limit the way we - use your - data.
-The right to data portability - This right does not apply.
-The right to object - We will consider any objection, but may continue processing where we - have - compelling legitimate grounds or a statutory obligation.
-The right not to be subject to automated decision making - The NHS check if you need a lung - scan does - not make automated decisions that have legal or similarly significant effects.
- -If you have a general question about using the NHS check if you need a lung scan, you can contact us by email - at: {% include '_email_us.jinja' %} -
-You can contact your GP - surgery for more information about your GP health record data, and data about your care.
-If we are unable to resolve any queries or concerns about the use of your personal information in connection - with the NHS check if you need a lung scan, you can raise your concern with the Information Commissioner.
-You can contact the Information Commissioner’s Office:
-We ask that you try to resolve any issues with us first. However, you have a right to lodge a complaint with - the Information Commissioner's Office (ICO) at any time about our processing of your personal information. The - ICO is the UK regulator for data protection and upholds information rights.
-The terms of our privacy policy may change from time to time. Any updates to the privacy policy will be - published on the NHS website.
-NHS England is running a pilot of the Check if you need a lung scan digital service.
+ +We use your information to evaluate whether a digital questionnaire can safely and effectively support lung cancer screening alongside the existing telephone service.
+ +This includes information you provide in the questionnaire, limited details from NHS login, and (if you complete both routes) responses from the telephone screening so they can be compared.
+ +Taking part is voluntary. You can choose not to take part or withdraw at any time. This will not affect your NHS care.
+ +Your data is kept secure, access is restricted, and personal identifiers are removed once analysis is complete.
+ +Read the full privacy notice below to understand how your data is used, shared, stored, and what your rights are.
+ ++ NHS check if you need a lung scan is a pilot by NHS England and allows you to complete a lung health check online before you complete your phone appointment. + The pilot is designed to evaluate whether a digital questionnaire can operate as effectively as the existing telephone based lung cancer screening service. +
+ +The pilot is for service evaluation purposes only and does not form part of routine clinical care.
+Data Controller: NHS England
+ +NHS England is responsible for deciding how and why your personal data is used as part of this pilot.
+ +If you choose to take part, we may collect:
+This information is provided through NHS login to allow secure access.
+ +Information you provide in the questionnaire:
+When you complete the telephone screening, NHS England receives the telephone responses so they can be compared with the digital responses as part of the evaluation.
+ +On completion of both the digital service and phone screening appointment, your name and email address will be used to issue a participation voucher.
+ +We use your information to:
+We do not use your information to:
+Participation in the pilot is voluntary. Where you choose to take part, we rely on your consent to:
+You can withdraw from the pilot at any time without affecting your NHS care.
+ +Your information may be shared with:
+ +We do not sell your data or use it for marketing.
+ +How long we keep your information:
+ +The law allows the NHS to use information:
+You can find out more + here.
+ +You have rights over your personal information.
+ +These include the right to:
+If you want to access your screening results, contact your GP or local screening service.
+ +If you have a general question about using the NHS check if you need a lung scan, you can contact us by email at: {% include '_email_us.jinja' %}
Information:
-Version 3, 5 March 2026
+Version 4, 25 March 2026
This service will not provide you with any results or information in relation to the lung cancer screening, you will need to complete your lung cancer screening by phone to receive a result.
- -To find out more about who we are and our role, visit the NHS England website.
+ This service is currently in pilot so is only available in certain areas and if your GP surgery is participating in the pilot.If you do any of the above acts you may also be committing a criminal offence, and we will report any such activity to the relevant law enforcement authorities. We will co-operate with those authorities by disclosing your identity to them.
+