My work don't need my NHS number, do they?

[HarrySnotter]

I have had to email my work with a letter from the NHS. I blocked out my NHS number as I consider that to be confidential information. I've had an email back asking why I have 'hidden this information'. I don't understand why they need it.

Do you mean the ‘shield’ letter?

I’d guess it’d the fast way to identify you in the hub. But it’s just a guess. So I’d email back and ask why they need it

Can they see your name/address etc? Is there only one of you with the same name at the same address?In all seriousness though what are they going to be able to do with your NHS number.

Point out its personal information and can be used in identity fraud and ask why they need it (and what will happen to it once its filed).

Your hospital number can be used to access all your confidential medical information and apps. They're not entitled to any of that. In fact you don't have to tell them why you're going to an appointment. If your going off sick then it'll be on your sick certificate.

I've emailed back asking why they need it. I'm the only person at the address with that name. Yes, it's the shield letter @iVampire. I just don't know why they need it, they just said why have you hidden your NHS number.

The lady in the office can be a little 'tricky' sometimes. We'll see.

I'd also be asking how they are protecting this data and storing it? Its it compliant with data protection act etc. I too wouldn't give it to them! The less data the better IMO.

If you were to put your number up here, I could then go to work put that in to the system and have partial access to your records. I can't see test results due to my grading but I can see letters . Although anyone who has looked at it is recorded as having accessed it.

Well I had an email back saying that it 'looked like I was hiding some information'. . I replied that I am, my NHS number which they have no need for. I am now awaiting a reply.

Ha. Nicely done

You could say "to protect you from having to handle unnecessary PII (personally identifying information) that would have to be treated in ways that are compliant with GDPR?