COVID-19 privacy statement

During these unprecedented times, HCA Healthcare’s main priority is the health and safety of our patients, colleagues and the wider community as well as supporting the NHS in responding to the COVID-19 pandemic. We are supporting the NHS in responding to the COVID-19 pandemic and this will remain our focus for the foreseeable future.

As a result of these unique circumstances, HCA may need to share personal data with the NHS and other regulatory and government bodies for the purpose of supporting the response to the COVID-19 pandemic. Each of our hospitals is working in collaboration with their local NHS trusts to ensure we can provide the right help, exactly where and when it is needed and this may involve personal data being shared with us by the local Trusts. This will be done in accordance with data protection laws and will include any amendments to legislation made by the Secretary of State. We will also consider any guidance provided by the Information Commissioner’s Office.

When the NHS and its healthcare professionals provide your healthcare services at a HCA hospital, the privacy notice of the relevant NHS Trust may also apply.

Data Subject’s Rights

Due to the current circumstances, if you submit a Subject Access Request (SAR) or other Data Subjects Rights request, please be aware that you may experience a delay in us responding to your request. That’s because we will be diverting resources to help with other challenges and ensuring the ongoing healthcare and treatment of our patients.

At this current time, we are unable to collect any correspondence sent via post. If you need to get in touch regarding a SAR or other information request, please contact us via email at

Download policy


Sharing of your Personal Data during the COVID-19 pandemic

During the COVID-19 pandemic your personal data may also be shared and otherwise processed for the following purposes:

  • Understanding Covid-19 trends and risks to public health and controlling and preventing the spread of COVID-19
  • Identifying and understanding information about patients or potential patients with or at risk of COVID-19 including patient exposure to COVID-19
  • Management of patients with or at risk of COVID-19 including: locating, contacting, screening, flagging and monitoring such patients and collecting information about and providing services in relation to testing, diagnosis, self-isolation, fitness to work, treatment, medical and social interventions and recovery from COVID-19
  • Understanding capacity and availability information about patient access to health services and adult social care services
  • Monitoring and managing the response to COVID-19 by health and social care bodies and the Government including providing information ( including workforce details) to the public about COVID-19
  • Delivering services to patients, clinicians, the health services and adult social care services workforce and the public about and in connection with COVID-19
  • Research and planning in relation to COVID-19.

We will regularly review this privacy statement and its applicability throughout the COVID-19 outbreak. We may also notify you in other ways from time to time about the processing of your personal information.

Last Updated: January 2022