NHS Jobs Terms and Conditions

By proceeding to access this Service you agree to be bound by these Terms and Conditions.

You must abide by this policy at all times. Failure to adhere to this policy will be deemed a breach of service and may lead to your NHS Jobs access being suspended or permanently withdrawn.

This Terms and Conditions document, and any disputes or claims arising out of or in connection with it, are governed by and construed in accordance with the laws of England and Wales.

1 Introduction

This Employer Acceptable Use Policy presents the main elements of the Access Agreement which are relevant to employer users who are not super users.

If you are a super user then you should ensure that you are fully aware of the full Access Agreement in order to ensure your organisation's compliance. 1.1 The NHS Jobs Team manages NHS Jobs on behalf of NHS Business Services Authority (NHSBSA).

1.2 This policy outlines the principles that govern use of the NHS Jobs Service.

2 Definitions

3 Use of NHS Jobs

3.1 Organisations based in England, which meet the criteria set out in section 3.4, are permitted to use the NHS Jobs service without charge, as the service is centrally funded.

3.2 Crown dependencies and devolved authorities are permitted to use the NHS Jobs service, subject to a relevant commercial agreement, providing they meet the criteria in clauses 3.4

3.3 If you are not a Crown Dependency, you are permitted to use the NHS Jobs service if you are providing or supporting the provision of a health care service within the United Kingdom which is commissioned or funded by NHS England, Department of Health and Social Care, Welsh Assembly Government, Local Authority or any other body forming part of the NHS in the United Kingdom.

3.4 The following organisations are examples of those that are permitted to use the NHS Jobs service (please note, the following list is not exhaustive):

3.4.1 GP practice

3.4.2 NHS Trust

3.4.3 Clinical Commissioning Group (CCG)

3.4.4 Commissioning Support Unit (CSU)

3.4.5 Local Council

3.4.6 Department of Health and Social Care

3.4.7 Executive agency of the Department of Health and Social Care i.e an Arm’s Length Body

3.4.8 Health Board

3.4.9 NHS Sustainability and Transformation Partnership (STP)

3.4.10 The following organisations may only use the NHS Jobs service for roles related to a valid NHS contract for support or provision of health or social care services in the United Kingdom:

3.4.10.1 Social care provider

3.4.10.2 Charity or social enterprise

3.4.10.3 Private company

3.4.10.4 Dental Practice

3.4.10.5 Hospice

3.4.10.6 Law Enforcement & Military

3.4.10.7 Pharmacy

3.4.10.8 Cancer services

3.4.10.9 Health Authority

3.4.10.10 Higher education Institute

3.4.10.11 An organisation subcontracted by a local council

3.4.10.12 A non-NHS Sustainability and Transformation Partnership

3.5 Additional requests to use the NHS Jobs service will be considered, by the NHS Jobs Team, and access will be granted, where appropriate. The following will be taken into account when considering requests (please note, the list is not exhaustive):

3.5.1 Impact to NHS health and social care services

3.5.2 Applicant and recruiting organisation experience

3.5.3 Cost to the public

3.5.4 Eliminating potential for financial gain

3.5.5 Potential loss of data or reporting capability

3.6 You are responsible for ensuring that you comply with all relevant legislation and must not publish any material that is in violation of any law or regulation that is enforceable in the United Kingdom.

3.7 You must not place illegal, inappropriate or offensive material on NHS Jobs. This includes material for internal use as well as material intended for external publication.

3.8 You must not use NHS Jobs in any way that is unlawful, illegal or detrimental to the NHS Jobs service, organisations using NHS Jobs, NHSBSA, Job seekers or Department of Health and Social Care.

3.9 You are responsible for the accuracy of any information you present through NHS Jobs.

3.10 You must not publish material that infringes or breaches any third party's intellectual property rights (which shall include, but not be limited to copyright, trademarks, design rights, trade secrets, patents, moral rights, paternity rights and performance rights) - this includes the use, distribution and/or copying of any material without the express consent of the owner.

3.11 You must not place any material on NHS Jobs containing viruses or other malicious software or any tools designed to compromise the security of users, websites and/or systems.

3.12 Any advertisements on the Service must relate to live roles which are based in the United Kingdom, or Crown Dependencies, and have not been filled prior to advertisement.

3.13 You may not place adverts on NHS Jobs which discourage candidates to apply via an application route directed by NHS Jobs. For example, it is not permissible to include text within the advertisement which instructs job seekers to apply via another website. It is permissible to make paper applications available for candidates that are unable to submit an online application.

3.13.1 Requests to deter from an application method, directed by the NHS Jobs service may be granted, where appropriate. The following will be taken into account when considering requests (please note, the list is not exhaustive):

3.13.1.1 Impact to NHS health and social care services

3.13.2 Applicant and recruiting organisation experience

3.13.3 Cost to the public

3.13.4 Eliminating potential for financial gain

3.13.5 Potential loss of data or reporting capability

3.14 You must ensure that your use of the service promotes fair and open competition and that equal opportunities for all job seekers is practiced at all times.

3.15 You must not sell access to NHS Jobs to any other organisation or user.

3.16 The NHS Jobs Team do not check or approve advertisements placed on NHS Jobs but reserves the right to remove, without notice, any identified advertisement which breaches legislative requirements, generates complaints from job seekers, appears misleading or inappropriate or in breach of the terms of this policy.

3.17 If you complete the latter part of your recruitment journey via an online system (other than NHS Jobs) you must return a subset of vacancy and applicant data to us, in an agreed format, during the second week of each month. The return of data could be via your 3rd party applicant tracking system, should you use one. The data returned to us will enable national workforce insight and reporting and Applicant ID will be used to link applicant data across organisations, not to identify individuals. If you complete the latter part of your recruitment journey offline then you are not required to collate and return this information to us. The required data set is listed in Appendix 1

4 Management of user access

4.1 You must designate a minimum of one Super User for your organisation and alternate Super Users who can act as backup should the primary Super User be unavailable.

4.2 The number of Super Users is limited to 3 per organisation. If you are an Executive agency, Health Board or Trust, a maximum of 7 Super Users will be allowed.

4.3 Your Super Users are responsible for:

4.3.1 Managing and maintaining user access within your Organisation, including setting up user accounts and access rights;

4.3.2 ensuring that user accounts are employees of your Organisation or of a shared service that are managing recruitment on your behalf;

4.3.3 ensuring that user accounts are set up using your organisation’s email domain address or the domain address of a shared service, managing recruitment on your behalf. For security reasons personal email addresses are not permitted;

4.3.4 ensuring that the user accounts are reviewed and, where necessary, deleted on an annual basis;

4.3.5 ensuring that users within your Organisations are adequately trained;

4.3.6 providing first line support to your Organisation’s users and acting as a single point of contact when escalation to the NHS Jobs help desk Is required.

4.3.7 organising and co-ordinating Super User and housekeeping activities within your Organisation.

4.3.8 cascade any messages sent by the NHS Jobs Service.

4.4 The NHS Jobs help desk will support Super Users with queries. Super Users offer first line support to users within your Organisation and should only escalate to the helpdesk when required.

4.5 You must ensure that users are aware of how to contact the Super Users for first line support.

5 Enforcement of the policy

5.1 The NHS Jobs Team reserve the right to investigate any suspected violation of this policy and you are obliged to assist in any investigation undertaken.

5.2 If the NHS Jobs Team determines, at its sole discretion, that you or any Third Party Organisation have failed to adhere to this policy, the action taken by the NHS Jobs team include, but are not restricted to:

5.3

5.3.1 Contacting you to request compliance with this policy;

5.3.2 Removal of any material, including but not limited to open job adverts, which breach this policy (with or without notice);

5.3.3 Restriction or suspension of your access to parts of the Service (with or without notice);

5.3.4 Suspension or termination of your account (with or without notice);

5.4 If you gain access to the service by providing false data during the sign-up process your account will immediately be suspended

6 Restricted Access Vacancies

6.1 Candidates who are provided with accounts allowing them to view restricted vacancies must have been officially informed of the reasons for this prior to being granted such access.

7 Data Retention

7.1 Data is retained, on NHS Jobs, for a period of between 400 to 460 days depending on the closed date for the recruitment. This will allow you to revisit vacancy and application data should the vacancy need re-advertising or applications require reviewing e.g. successful applicant declines offer or pre-employment checks.

7.2 It is your responsibility to ensure that any data required after 400 days is held locally, off the Service, and that applicants are aware of your data retention policies.

7.3 You must ensure that you make jobseekers aware, within each advert, how long data is retained for (no more than 460 days). This can be carried out with each advert displaying the NHS Jobs Privacy Notice either as an attachment or link.

7.4 You must make jobseekers aware that pseudonymised information associated with their application will be shared with NHSBSA for the purpose of workforce insight and reporting which may be shared with interested parties such as NHS England and Improvement, NHS Employers and the Department of Health and Social Care.

7.5 An audit log will be retained for 24 months to allow NHS Jobs processes to be independently checked.

8 Data Protection

8.1 (“Data Protection Legislation”) is defined as the Data Protection Act 2018 (DPA), the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), the Regulation of Investigatory Powers Act 2000, the Telecommunications (Lawful Business Practice) (Interception of Communications) Regulations 2000 (SI 2000/2699), the Electronic Communications Data Protection Directive 2002/58/EC, the Privacy and Electronic Communications (EC Directive) Regulations 2003 and all applicable laws and regulations relating to processing of personal data and privacy, including where applicable the guidance and codes of practice issued by the Information Commissioner.

8.2 NHSBSA is the Controller of any information, entered into NHS Jobs, prior to an application being submitted to the recruiting organisation i.e. candidate profile and saved searches etc. As the recruiting organisation, you are the Controller of the applicant data once you start to process it whether in NHS Jobs or another system of your choosing.  The roles and responsibilities of NHSBSA and your organisation are listed in Appendix 2

8.3 You are responsible for informing applicants of how you are processing their data in line with the roles and responsibilities set out in Appendix 2

9 Freedom of Information (FOI)

9.1 NHSBSA is responsible for answering FOI Requests about vacancy information and aggregated recruitment outcomes that do not identify a specific organisation, unless a commercial agreement states otherwise.

9.2 You are responsible for all requests related to your recruitment process, application progression and outcomes for your organisation. Where this information is held on NHS Jobs, it is held by NHSBSA, on your behalf, for the purposes of freedom of information legislation.

10 Intellectual Property and Permitted Use

10.1 NHSBSA is the owner or licensee of all intellectual property rights in NHS Jobs and the material published on it. Those works are protected by copyright laws and treaties worldwide. All such rights are reserved.

10.2 You may print and download extracts from NHS Jobs for personal non-commercial use on the following basis:

• no documents or related graphics are modified in any way;
• no graphics are used separately from accompanying text; and
• no copyright and trademark notices are removed.

And you agree not to:

• use NHS Jobs for commercial purposes without obtaining prior written policy from NHSBSA; or
• copy, reproduce, distribute, republish, download, display, post or transmit in any form or by any means any of the content on NHS Jobs except as permitted above.

10.3 External recruitment platforms may take a feed of live vacancies, displayed on NHS Jobs, and advertise them on their own platforms.

11 Liability

11.1 Subject to 11.3, the NHSBSA shall not be liable to you for any loss (including but not limited to direct loss, indirect loss, consequential loss, loss of use, loss of profits, loss of business, loss of contracts, loss of revenues or loss of anticipated savings), arising from your use of the Service and/or the actions or omissions of NHSBSA in relation to the provision of the Service.

11.2 You shall indemnify NHSBSA against any claims, liability, costs, loss, expenses or proceedings whatsoever arising out of or in connection with advertisements published or other acts or omissions of yourselves, including but not limited to any breach of these terms and conditions by you or on your behalf.

11.3 Neither party seeks to exclude or limit its liability to the other party in respect of:

11.3.1 Death or personal injury resulting from negligence;

11.3.2 Fraud or fraudulent misrepresentation; or

11.3.3 Any other circumstances where liability may not be excluded or limited under any applicable law.

12 Notification of Changes

12.1 The NHSBSA may change this policy to include changes in the law or in the acceptable use of NHS Jobs and reserves the right to make such changes without notice and whenever required.

Appendix 1 – Required data set

Data Field	Record Level	Reasoning
Vacancy Reference Number	Vacancy	Unique Identifier
Third Party ID	Vacancy	Unique Identifier
Client ID on jobs.nhs.uk	Vacancy	Employer Information
Employer name	Vacancy	Employer Information
Employer Type	Vacancy	Employer Information
VPD code	Vacancy	Employer Information
ODS code	Vacancy	Employer Information
Job Title	Vacancy	Vacancy Information
Post Code	Vacancy	Vacancy Information
Pay Scheme	Vacancy	Vacancy Information
Pay Band/scale	Vacancy	Vacancy Information
WTE	Vacancy	Vacancy Information
Job Type	Vacancy	Vacancy Information
Contract Type	Vacancy	Vacancy Information
Fixed Term Contract Length	Vacancy	Vacancy Information
Created Date	Vacancy	Time to Hire
Published Date	Vacancy	Time to Hire
Closed Date	Vacancy	Time to Hire
Working Pattern	Vacancy	Vacancy Information
Staff Group	Vacancy	Vacancy Information
Area of Work	Vacancy	Vacancy Information
Occupation Code	Vacancy	Vacancy Information
Div/Dept for Reporting	Vacancy	Vacancy Information
Specialty/Function	Vacancy	Vacancy Information
Department	Vacancy	Vacancy Information
Number of Views	Vacancy	Vacancy Statistics
Number of Applications Submitted	Vacancy	Vacancy Statistics
Number of Applications Shortlisted	Vacancy	Vacancy Statistics
Number of Applications Interviewed	Vacancy	Vacancy Statistics
Number of Applications Offered	Vacancy	Vacancy Statistics
Number of Applications Recruited	Vacancy	Vacancy Statistics
Allocated FTE	Vacancy	Vacancy Information
Date Shortlisting complete	Vacancy	Time to Hire
Date interview invitations sent	Vacancy	Time to Hire
Date of first interview	Vacancy	Time to Hire
Date of Last interview	Vacancy	Time to Hire
Date First application set to Offer (Conditional)	Vacancy	Time to Hire
Date First application PEC complete	Vacancy	Time to Hire
Date First application set to Recruited	Vacancy	Time to Hire
First applicant start date	Vacancy	Time to Hire
Applicant ID	Application	Applicant Behaviour
Application Reference number	Application	Unique Identifier
Applicant National Insurance number	Application	Applicant Behaviour
Current application status	Application	Application Progress
Applicant appointed?	Application	Application Progress
Application had offer?	Application	Application Progress
Application invited to interview?	Application	Application Progress
Application shortlisted?	Application	Application Progress
Where advert seen?	Application	Applicant Behaviour
Date application submitted	Application	Time to Hire
Date application shortlisted	Application	Time to Hire
Date application at Invited to interview	Application	Time to Hire
Date application at Offer (Conditional)	Application	Time to Hire
Date application at Offer accepted	Application	Time to Hire
Date application at PEC complete	Application	Time to Hire
Date application at Recruited	Application	Time to Hire
Applicant Start Date	Application	Time to Hire
UK/EC/EEA National	Application	Applicant Understanding
Immigration Status	Application	Applicant Understanding
NHS Professional returning to practice	Application	Applicant Understanding
Professional registration status	Application	Applicant Understanding
Professional Body and Membership	Application	Applicant Understanding
Subject to fitness to practise?	Application	Applicant Understanding
Removed from register?	Application	Applicant Understanding
Ever had restrictions on clinical practise?	Application	Applicant Understanding
Start date of continuous NHS service	Application	Applicant Understanding
Preferred employment type	Application	Applicant Understanding
Applicant Internal	Application	Applicant Understanding
Civil servant?	Application	Applicant Understanding
Public body or department	Application	Applicant Understanding
Date of Birth	Application	Equality and Diversity
Gender	Application	Equality and Diversity
Marital Status	Application	Equality and Diversity
Ethnic Origin	Application	Equality and Diversity
Sexual Orientation	Application	Equality and Diversity
Religious Belief	Application	Equality and Diversity
Disability?	Application	Equality and Diversity
Disability type	Application	Equality and Diversity
Two-Ticks?	Application	Equality and Diversity
Currently bound over or unspent convictions?	Application	Demographics/Understanding
Ever bound over or have spent convictions?	Application	Demographics/Understanding

Appendix 2 – Roles and responsibilities

1. The Parties agree that they have the following roles, as defined by Data Protection legislation, in providing and receiving the Services: -

Party	Role(s)
NHSBSA NHS Jobs	Controller (See Paragraph 8.2 of NHS Jobs Ts & Cs)
Your Organisation	Controller (See Paragraph 8.3 of NHS Jobs Ts & Cs)

2. The parties have the responsibilities detailed in the table below to comply with the GDPR Article 26 transparency requirement: -

Responsibility	Details
Determine the legal basis of processing (GDPR Article 6)	NHSBSA NHS Jobs: GDPR Article 6(1)(b) necessary for compliance with legal obligations and Data Protection Act (DPA) 2018 section 10 and the Applied GDPR Article 9(2)(g) as inserted by DPA 2018 Schedule 6 paragraph 12(c) “processing is necessary for reasons of substantial public interest and is authorised by domestic law.” NHSBSA is acting under instructions from the Department of Health and Social Care to process aggregate NHS Jobs management information. Recruiting Organisation: The NHSBSA understands that the recruiting organisation has the following legal basis: GDPR Article 6(1)(a) necessary in order to take steps at the request of the data subject prior to entering into a contract. GDPR Article 9(2)(a) and DPA 2018 Section 10(1)(a) necessary for UK employment and social security and social protection law.
Document the subject matter of the Processing (GDPR Article 30 (b))	NHSBSA will manage the contract and service delivery of NHS Jobs. The recruiting organisations will maintain recruitment records relating to their own recruitment drives and successful applicants.
Document the duration of the Processing (GDPR Article 30 (f))	NHSBSA will process aggregate data as detailed in the NHS Jobs Privacy Policy The recruiting organisation will determine their own duration and retention in line with their own policies and procedures.
Document the nature and purpose of the Processing (GDPR Article 30 (b))	The parties will administer and maintain vacancy and applicant records for managing recruitment, reporting, workforce insight and workforce planning purposes.
Document the type of Personal Data (GDPR Article 30 (c))	Family, lifestyle and social circumstances Financial details Employment and education details Equality and Diversity Declarations Physical or mental health details DBS check result where applicable
Document the categories of Data Subjects (GDPR Article 30 (c))	Employees and ex-employees Next of kin of Employee Connected Persons Referees Medical Practitioner details
Responding to Data Subject Rights Requests: Right of Access (GDPR Article 15) Right to Rectification (GDPR Article 16) Right to Erasure (GDPR Article 17)	NHSBSA will action these rights for the requests it receives based on the personal data it holds for NHS recruiting organisations that: no longer exist and have no organisation with responsibility for them. The recruiting organisation will action these rights for the requests it receives as Controller of the personal data within NHS Jobs or their systems.
Providing Privacy Notices to Data Subjects (GDPR Articles 13 - 14)	NHSBSA has provided a privacy notice which is also accessible through the NHS Jobs website. The recruiting organisation will make their applicants aware of the processing they undertake.
Handling Personal Data Breaches (GDPR Articles 33 - 34)	If the NHSBSA becomes aware of a breach in NHS Jobs then NHSBSA will advise the recruiting organisation The recruiting organisation will handle personal data breaches relating to the relevant applicant data they hold.
Data Subjects right to compensation and liability (GDPR Article 82)	The recruiting organisation will be liable for any compensation claims unless the cause is a result of the acts or omissions of the NHSBSA.
Contact point for Data Subjects (GDPR Article 38)	The Data Protection Officer of the recruiting organisation.

3. The Parties agree to update their completed tables as necessary during the Term to reflect any changes in the arrangement. The completed tables (as updated from time to time) shall form part of this Agreement. The essence of the arrangement shall be made available to the Data Subject. The Parties acknowledge that irrespective of the terms of the arrangement set out in this Schedule 3, the Data Subject may exercise his or her rights under the GDPR in respect of and against each of the parties.