Breast and Cosmetic Implant Registry

Back

The registry and your data

Only hospital or clinic staff with access to the Breast and Cosmetic Implant Registry (BCIR) can enter patient information. Any hospital or clinic treating someone with an implant can request access.

The data is collected at the time of the procedure and entered securely into the system.

What data is collected?

The data that your surgical team will send to NHS England (formerly NHS Digital) will include:

  • your Community Health Index (CHI) number
  • your family name
  • your first name
  • your current postcode
  • your date of birth
  • gender
  • your surgeon’s name
  • details of the surgical procedure
  • details of the implant used

How is my data used?

NHS England digital systems

The Breast and Cosmetic Implant Registry has a steering group who advise on the operation of the registry. This steering group is made up of representatives from:

  • patient groups
  • the Department of Health and Social Care
  • the Medicines and Healthcare Products Regulatory Agency (MHRA)
  • the Scottish Government
  • relevant professional bodies
  • other appropriate agencies

The steering group provides expert advice on:

  • clinical matters (keeping patients safe and providing good care)
  • content (what the registry says and contains)
  • governance (how the registry is kept accurate and safe)
  • outputs (what the registry provides to the people who access it)
  • reports

NHS England publish regular reports on the data to support BCIR services and their delivery. No identifiable information is included within the reports.

Read the reports about the Breast and Cosmetic Implant Registry – NHS England

How is my data kept safe?

There are senior doctors who make sure patient privacy and confidentiality are respected. They’re sometimes called Caldicott Guardians.

The BCIR also adheres to all data protection law and operates to ensure the data system and values are clear and open.

Public Benefit and Privacy Panel

The Public Benefit and Privacy Panel (PBPP) checks requests to share data. It maintains information governance rules of:

  • safe people
  • safe projects
  • safe data
  • safe places

NHS England made an application for NHS Scotland to join the registry and it was approved in February 2019. This was reapplied to and updated in October 2023.

Privacy Notice

Privacy and data security are very important to the Scottish Government and NHS Scotland health boards. We take our legal obligations seriously.

Strict measures have been put in place so that the BCIR follows privacy and data security laws.

Data Protection Impact Assessment

A Data Protection Impact Assessment for NHS Scotland’s engagement in the BCIR has been shared with NHS Scotland health boards. Each participating board has signed off on the Information Sharing Agreement.

Privacy notice

Privacy and data security are very important to the Scottish Government and NHS Scotland health boards. We take our legal obligations seriously.

Strict measures have been put in place so that the BCIR follows privacy and data security laws.

Read the BCIR privacy notice

Last updated:
07 October 2021

Also on NHS inform