Strategic Ambitions Programme Abbreviated Privacy Notice

The Norwich University Hospitals Group (NWUHG), formed in May 2025, is launching a strategic programme to create a clinically-led, evidence-based blueprint for future acute clinical services and workforce planning.

Who are we?

The Norfolk and Waveney University Hospital Group Trusts are:

  • James Paget University Hospitals NHS Foundation Trust
  • Norfolk and Norwich University Hospitals NHS Foundation Trust
  • Queen Elizabeth Hospital King’s Lynn NHS Foundation Trust

The three Trusts will be acting as joint data controllers for the purposes of the programme.

Why is the programme being conducted?

  • Phase 1- A diagnostic and design exercise to inform the development of clinical services, estates and infrastructure, and our workforce.

What is the basis in law for the programme to be conducted?

  • Personal Data
    • Article 6(1)(c) – Processing is necessary for compliance with a legal obligation to which the controller is subject.
    • Article 6(1)(e) – Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
  • Special Category Data
    • Article 9(2)(h) – Processing is necessary for the provision of health or social care or treatment or the management of health or social care systems and services

Whose data will be used?

  • Patients and Staff

What data will be used?

  • Personal data and Special category data

 How long will we keep data after the activity concludes?

  • Six (6 months)

Who will be the recipient of the information?

  • The Norfolk and Waveney ICB Data Hub, who will pseudonymise (make it less identifiable) data before transferring to Strasys.
  • Strasys, the contracted supplier who will perform the analysis to inform the strategy

What are the data subject rights exercisable?

  • The rights to be informed, access to information and rectify (correct) information

 Who to contact if you have a complaint, or wish to exercise your data protection rights or require further assistance with how your information is being used:

Please contact you nearest or regular acute hospital listed below:

For further information, please see the full privacy notices for both patients and staff below:

Patient Privacy Notice – September 2025

Staff and Employee Privacy Notice – September 2025