Purposes for invoice validation
Invoice validation ensures that after we provide you with care or treatment, we can be paid the correct amount.
NHS Shared Business Services (SBS) process invoices on behalf of Luton and Dunstable University Hospital NHS Foundation Trust (LDUHFT). In addition, SBS process invoices where the Trust is making payments to other NHS bodies.
SBS does not require, and should not receive any patient confidential information to provide their services. However, before payment can be received by the Trust, the respective Clinical Commissioning Group (CCG) needs conduct invoice validation. This is to ensure that the treatments and amount is correct.
In order to do this, personal confidential data is submitted by the Trust to an approved and controlled secure environment within the CCG. Only certain data can be submitted, and only when necessary for the validation process. The identifier used for invoice validation is your NHS number or the local provider ID (hospital number).
The CCG and the Trust has a duty to detect, report and investigate any incidents where a breach of confidentiality has been made.
Purposes for support services
Where processing is being carried out on behalf of the Trust, we will only use processors that provide us with sufficient guarantees that they understand their responsibilities under the Data Protect Act 2018 and General Data Protection Regulations. We will implement the appropriate technical and organisational measures that meet these requirements.
We will determine the purposes for and the manner in which personal data is processed. This means that the Trust exercises overall control over the ‘why’ and ‘how’ of a data processing activity.