General Practice Extraction Service (GPES)

Size: px
Start display at page:

Download "General Practice Extraction Service (GPES)"

Transcription

1 General Practice Extraction Service (GPES) Customer: Health and Social Care Information Centre (HSCIC) Requirement: Patient Objections Management (POM) Customer Requirement Reference Number: NIC V5Z0L Date: February 2014 Version 1.0 GPES reference: NIC V5Z0L Page 1 of 23

2 Contents 1. Executive summary Customer overview Strategic business case Information requirements HSCIC information transformation plan Data management Data delivery Data quality Certification Appendix A Acronyms Appendix B Definitions Appendix C Read codes Appendix D Recording objection codes Appendix E GPES data extraction and delivery GPES reference: NIC V5Z0L Page 2 of 23

3 1. Executive summary 1.1 Overview The NHS Constitution 1 states You have the right to request that your confidential information is not used beyond your own care and treatment and to have your objections considered. In December 2013, NHS England issued Directions to the Health and Social Care Information Centre (HSCIC) (under the Health and Social Care Act 2012) that included a Direction in relation to the management of patient objections: The HSCIC is directed by the Board pursuant to paragraph 3 of these Directions to put measures in place as part of the establishment and operation of the information systems which are the subject of these Directions to ensure that where any primary care data are coded to indicate a patient's objection to disclosure of their identifiable primary care data to the HSCIC or any third party, to the extent that the HSCIC is acting in pursuance of these Directions in relation to that patient the HSCIC will only collect non-identifiable primary care data and those data items necessary to enable the HSCIC to record the fact of the patient's objection and that the data items necessary to record the fact of the patient's objection shall be collected and stored separately from other information to be collected in order to prevent any possibility of identification or re-identification of the patient within the HSCIC. 2 The HSCIC is committed to supporting a patient s wishes in respect of sharing confidential information. The HSCIC Guide to confidentiality in health and social care 3 states that: Patients can object to information about them leaving a general practice in identifiable form for purposes other than direct care, then confidential information about them will not be shared. This is referred to throughout this documentation as a type 1 objection. Patients can object to information about them leaving the HSCIC in identifiable form, then confidential information about them will not be sent to anyone by the HSCIC. This is referred to throughout this documentation as a type 2 objection. This data extraction is to enable the HSCIC to identify patients who have recorded an objection, or the withdrawal of an objection in order to respect patients wishes 1 Department of Health, The NHS Constitution: the NHS belongs to us all. [Online] Available at: [Accessed 27 November 2013] 2 NHS England, The Health and Social Care Information Centre (Establishment of Information Systems for NHS Services: Collection and Analysis of Primary Care Data) Directions [Online] Available at: [Accessed 30 January 2014] 3 HSCIC, A Guide to Confidentiality in Health and Social Care [Online] Available at: [Accessed 25 November 2013] GPES reference: NIC V5Z0L Page 3 of 23

4 and monitor the levels of patient objections. Patients have the right to object to any extraction of patient identifiable data from their general practice record unless there is (a) a statutory duty to share information, (b) a court order or (c) an overriding public interest in disclosure. 1.2 Customer organisation and sponsor This requirement is for, and is sponsored by, the care.data Programme Director of the HSCIC. 1.3 What data are needed This requirement looks to extract patient level data about objection codes and a number of aggregate counts. This requirement will extract data about these objections, and the withdrawal of these objections. 1.4 Why the data are needed The data are needed for two purposes: 1. To respect the wishes of patients who have recorded a type 2 objection or the withdrawal of a type 2 objection. 2. To monitor the levels of patient objections. Where a type 2 objection is recorded then the HSCIC will use the NHS Number extracted to identify if there is a matching NHS Number within the data they hold. Where there is a matching NHS Number then the data to be released will be deidentified. This will ensure that no patient identifiable data that the HSCIC holds about that patient will be released for purposes other than direct care. If there is no match on the NHS Number, then it will not be possible to de-identify those data. Data are also needed to identify the number and trend of objections, and to ensure that the HSCIC applies the most recent type 2 objection code regarding the release of a patient s identifiable data from the HSCIC. 1.5 How often the data are needed There will be two extractions of data per month. 1.6 Data output files The HSCIC will receive one Customer Request Output (CRO) for each data extract. 1.7 Information Governance (IG) assessment The HSCIC Information Governance Assessment has assessed this requirement to be identifying (please refer to HSCIC IG Assessment NIC V5Z0L contained in this Independent Advisory Group (IAG) pack). GPES reference: NIC V5Z0L Page 4 of 23

5 2. Customer overview 2.1 Customer organisation The HSCIC was set up as an Executive Non Departmental Public Body (ENDPB) in April The Health and Social Care Act sets out the HSCIC s responsibilities, which include: Collecting, analysing and presenting national health and social care data. Setting up and managing national IT systems for transferring, collecting and analysing information. The HSCIC can be directed to do this by the Secretary of State or NHS England. Publishing a set of rules (called a Code of Practice) to set out how the personal confidential information of patients should be handled and managed by health and care staff and organisations. Building up a library of 'indicators' that can be used to measure the quality of health and care services provided to the public. Acting to reduce how much paperwork doctors, nurses and care workers have to complete by ensuring that only essential data are collected, and that the HSCIC avoids collecting the same information twice. Helping health and care organisations improve the quality of the data they collect and send to the HSCIC by setting standards and guidelines to help them assess how well they are doing. Creating a register of all the information that the HSCIC collects and produces, and publishing that information in a range of different formats so that it will be useful to as many people as possible, while safeguarding the personal confidential data of individuals. The HSCIC s statutory functions and duties are set out in Part 9, Chapter 2 of the Health and Social Care Act sections 252 to and in Schedule Requirement Framework Requirement frameworks exist for services in primary care eg Quality Outcomes Framework (QOF) and Enhanced Services. There is no applicable framework for this customer requirement. 4 HSCIC, Who we are and what we do: Our role [Online] Available at: [Accessed 25 November 2013] 5 Legisation.gov.uk, Health and Social Care Act 2012 [Online] Available at: [Accessed 25 November 2013] GPES reference: NIC V5Z0L Page 5 of 23

6 3. Strategic business case 3.1 What data are needed The purpose of this requirement is to respect patient wishes regarding objections to sharing their patient identifiable data. There are two types of objection codes that a patient can record on their general practice record. Type 1 objection code - a patient can object to information containing identifiable data about them from leaving their general practice for purposes other than direct care. Type 2 objection code - a patient can object to any information containing identifiable data about them from leaving the HSCIC for purposes other than direct care. See Appendix C for the Read codes for patient objections. Type 1 objection To prevent patient identifiable data leaving the general practice for secondary uses the patient must have the code Dissent from secondary use of general practitioner patient identifiable data recorded in their general practice record. If a patient changes their mind about objecting to their patient identifiable data leaving their general practice for purposes other than direct care then they can reverse the decision by recording the code Dissent withdrawn from secondary use of general practitioner patient identifiable data in their general practice record. Type 2 objection The type 2 objection code applies to information received by the HSCIC from all places patients receive NHS care, such as hospitals. If a patient objects, information that identifies the patient will only leave the HSCIC for purposes other than direct care in limited circumstances, where a researcher can demonstrate to the HSCIC that a patient has consented to their data flowing for a particular purpose or where the law requires its release such as public health emergencies. Where a patient has never had a type 2 objection or withdrawn objection code recorded in their general practice record, then this requirement will not extract any data for that patient. 3.2 Why the data are needed The data are required to support a number of activities, shown on the next page. GPES reference: NIC V5Z0L Page 6 of 23

7 1. Extracting data about objections to patient identifiable data leaving general practice for purposes other than direct care is required to establish if a trend of objections for each general practice exists. This is recommended by the Caldicott Information Governance Review Extracting data about patients objecting to their patient identifiable data leaving the HSCIC for purposes other than direct care is required to respect the wishes of patients and to enable the HSCIC to comply with the Directions issued by NHS England in relation to managing patient objections Aggregated data are required to count the number of patients at each general practice who have currently recorded a type 1 objection or a type 1 withdrawn objection. Then using a count of patients at each general practice, the proportion of patients currently objecting or withdrawing their objection at each general practice can be calculated. 4. Aggregated data are required to count the number of patients at each general practice who have currently recorded a type 2 objection or a type 2 withdrawn objection. Then using a count of patients at each general practice, the proportion of patients currently objecting at each general practice can be calculated. 3.3 How the data will be used by the customer Type 1 objections Where a patient records a type 1 objection, then the HSCIC will create a report containing an aggregate count of the number of patients at each general practice who have currently recorded a type 1 objection or a type 1 withdrawn objection. Type 2 objections Where a patient records a type 2 objection, then the HSCIC will prevent identifiable data about that patient being released for purposes other than direct care. Any teams within the HSCIC that may release data in an identifiable form will be responsible for ensuring they exclude the release of any identifiable data of patients who have objected, except in limited circumstances where the law requires its release or where a researcher can demonstrate to the HSCIC that a patient has consented to their data flowing for a particular purpose. The HSCIC will use the NHS Number extracted to identify if there is a matching NHS Number within the data they hold. Where there is a matching NHS Number then the data to be released will be de-identified. If there is no match on the NHS Number, 6 Department of Health, The Information Governance Review - Information: To Share or not to share? [Online] Available at: _accv2.pdf [Accessed 28 January 2014] 7 NHS England, The Health and Social Care Information Centre (Establishment of Information Systems for NHS Services: Collection and Analysis of Primary Care Data) Directions [Online] Available at: [Accessed 30 January 2014] GPES reference: NIC V5Z0L Page 7 of 23

8 then it will not be possible to de-identify those data. See Appendix D Recording Objection Codes. 3.4 Why GPES is the most appropriate service to extract this data There are three key reasons why GPES is the most appropriate service to deliver this requirement: 1. The requirement seeks to extract data from general practice systems, which GPES is specifically tailored to deliver. 2. GPES will provide a standardised framework for the extraction of primary care data. With the aid of general practice system suppliers, GPES will only extract data general practices use for operational and clinical purposes. Other than opting in to the data extraction, the data collection and extraction burden on general practices will be negligible. 3. This requirement is currently the only one of its type known to GPES, so there is no risk that GPES is duplicating any existing/live datasets. GPES reference: NIC V5Z0L Page 8 of 23

9 4. Information requirements 4.1 Patient level or aggregated data This requirement relates to the delivery of patient level and aggregate data. 4.2 Indicator set This requirement will extract data for patients that have recorded objections to sharing their data and are defined as registered, deceased, left the general practice or not registered for general medical services but are registered for another service, such as contraception or child health. Aggregate counts As part of this requirement a number of aggregate counts will be returned: The total number of patients at each general practice. The number of patients at each general practice who have currently recorded a type 1 objection. The number of patients at each general practice who have currently recorded a type 1 withdrawn objection. The number of patients at each general practice who have currently recorded a type 2 objection. The number of patients at each general practice who have currently recorded a type 2 withdrawn objection. Patient level data Where a patient objects to their patient identifiable data leaving the HSCIC then the patient must have the following code Dissent from disclosure of personal confidential data by Health and Social Care Information Centre recorded in their general practice record. If a patient changes their mind about objecting to their patient identifiable data leaving the HSCIC then they can reverse the decision by recording the code Dissent withdrawn from disclosure of personal confidential data by Health and Social Care Information Centre in their general practice record. Where a patient has objected or has withdrawn their objection to their patient identifiable data leaving the HSCIC, the following data items are required: GPES Data Item NHS Number General Practice ID Purpose This will be used by the HSCIC to identify if there is a matching NHS Number within any identifiable data they plan to disclose. This will be used to monitor which general practices are recording patient objection codes. GPES reference: NIC V5Z0L Page 9 of 23

10 Code The HSCIC requires the following objection codes: Dissent from disclosure of personal confidential data by Health and Social Care Information Centre; or Dissent withdrawn from disclosure of personal confidential data by Health and Social Care Information Centre. Recorded Date The date the objection code and/or withdrawal of objection code was recorded on a patient s general practice record. This requirement will extract a full history of type 2 objection codes so the HSCIC can ensure that the latest code is always applied and that patient wishes are respected. 4.3 Number of counts per indicator Not applicable for this requirement. 4.4 Key clinical domain Not applicable for this requirement. 4.5 General practice cohort This requirement will extract data from every general practice in England that participates in the Patient Objections Management customer requirement. 4.6 Small numbers Not applicable for this requirement. 4.7 Terminology systems This requirement will only extract data from general practice systems that use the Read version 2 (READ2) or the Clinical Terms Version 3 (CTV3) terminology systems. GPES reference: NIC V5Z0L Page 10 of 23

11 5. HSCIC information transformation plan 5.1 Data transformation process with the Data Provider Output (DPO) For this requirement, the HSCIC will not undertake any transformation on the Data Provider Output (DPO). GPES will use the General Practice Extraction Tool - Query (GPET-Q) system to collate the general practices DPOs into Customer Request Output (CRO) file and then send the resulting CRO file to the HSCIC Data Management Environment (DME). GPES reference: NIC V5Z0L Page 11 of 23

12 6. Data management 6.1 Data access and storage The data for this requirement will be stored in the HSCIC DME. Further details are available in Appendix E. The data stored in DME will be encrypted and have access controls restricting who has access to the data. Viewing access to the objection codes will be restricted to situations where it is necessary to investigate problems or to respond to general practice enquiries. 6.2 Data retention The data will be retained by the HSCIC for no longer than is necessary as required under the Data Protection Act Data sharing agreement The customer will abide by the terms of the agreement, and its information governance procedures and protocols. GPES reference: NIC V5Z0L Page 12 of 23

13 7. Data delivery 7.1 Number and format of Customer Request Output (CRO) file(s) There will be one CRO file which will contain data regarding objections from data leaving general practices for purposes other than direct care, and data regarding objections of data being released by the HSCIC for purposes other than direct care. 7.2 CRO file content and structure The table below provides an example of how the data will be returned in the CRO file: General practice code A0001 Reporting period start date 06/04/2014 Reporting period end date 19/04/2014 The total number of patients at a general practice 450 The number of patients at a general practice who have 25 currently recorded a type 1 objection The number of patients at a general practice who have 10 currently recorded a type 1 withdrawn objection The number of patients at a general practice who have 30 currently recorded a type 2 objection The number of patients at each general practice who have 15 currently recorded a type 2 withdrawn objection Practice Read code Date recorded NHS Number A0001 9Nu A0001 9Nu A0001 9Nu A0001 9Nu Data recipient and method of delivery Data will be transferred to HSCIC DME servers. The recipient will be the HSCIC. 7.4 Scheduled extraction date, delivery date and frequency There will be two extractions of data per month that will be run around the end of the first and third week of each month. Once the extract has been run, it will take around two to four weeks before the HSCIC can action the objection. The reporting period start date will remain the same for each extraction and will always be set as , which will examine patients full histories. The reporting period end date is a variable date and will generally be around the end of the first and third week of each month. This is an ongoing requirement and will continue to run until such time as it is deemed no longer necessary. GPES reference: NIC V5Z0L Page 13 of 23

14 7.5 CRO Summary Record Each one of the scheduled extractions is technically referred to as a Scheduled Query Instance (SQI). For each SQI, the recipients will receive a CRO Summary record, which will describe: The total number, and list of, general practices the SQI was scheduled at. The total number, and list of, general practices that have provided data within the CRO for the SQI. The total number, and list of, general practices that made a decision to decline participation for the SQI. The total number, and list of, general practices where no data or decision is available for the SQI. GPES reference: NIC V5Z0L Page 14 of 23

15 8. Data quality 8.1 General practice systems This requirement will only extract data from general practices clinical IT systems. Other systems maintained by general practices are out of scope. Under the GPES framework, only coded data are extracted. This reduces the need for general practice system suppliers or GPES to interpret free text data. In addition to the benefits that coded data provides, the GPES process also provides a data certification service. As part of data certification, GPES tests whether general practice system suppliers technical specifications are correctly defined, based on the Extraction Requirement that GPES distributes to general practices clinical systems suppliers. Although the points noted above reduce data quality risks, some will still be present. This is because the data extracts will only be as good as the data inputs. Due to data entry errors, GPES cannot control or govern the data collection process. Consequently, it needs to be noted that GPES cannot give assurances that the returned data fully meets the key data quality principles of: Accuracy that the data has been accurately captured, for instance, that a BMI score of 22.4 has not been inadvertently recorded in the general practice system as Completeness that every diagnosis, symptom, intervention and activity related to each patient is captured. There may be cases where patients do not access general practice services for each health related problem or that general practices only capture primary symptoms and diagnoses. It is therefore possible that the data in the CRO may be under reported. Timeliness that data related to all diagnoses, symptoms, interventions and activities, is captured in a timely manner (i.e. before the date of extraction). There may be cases where there is a time lag between an event occurring and the related data being recorded in the general practice system. 8.2 Expert HSCIC clinical opinion on the likely quality of the data output The Read codes for this requirement have been reviewed and agreed by a HSCIC National Clinical Lead. The Read codes that are to be extracted have been published as part of the care.data guidance and FAQs which NHS England, the BMA, HSCIC and the RCGP have worked collaboratively on. GPES reference: NIC V5Z0L Page 15 of 23

16 9. Certification 9.1 Feasibility testing Not applicable for this requirement. 9.2 Extraction requirement certification GPES offers three levels of certification standards against the Extraction Requirement - Gold, Silver and Bronze, with Gold being the most comprehensive. This requirement is to be certified against the Silver standard. See Appendix B Definitions for further details of certification levels The Extraction Requirement is circulated to general practice system suppliers and sets out the data that will need to flow to the HSCIC for this requirement. GPES reference: NIC V5Z0L Page 16 of 23

17 10. Appendix A Acronyms Purpose of appendix The purpose of this appendix is to set out the acronyms and abbreviations, with their corresponding terms, used in this document. Appendix content Acronym Definition CQRS Calculating Quality Reporting Service CRO Customer Requirement Output CTV3 Clinical Terms Version 3 DME Data Management Environment DPO Data Provider Output GMS General Medical Services GP General Practitioner GPES General Practice Extraction Service GPET-Q General Practice Extraction Tool - Query HSCIC Health and Social Care Information Centre IAG Independent Advisory Group IG Information Governance NHS National Health Service POM Patient Objections Management QOF Quality and Outcomes Framework READ2 Read Version 2 SQI Scheduled Query Instance XML Extensible Markup Language GPES reference: NIC V5Z0L Page 17 of 23

18 11. Appendix B Definitions Purpose of appendix The purpose of this appendix is to provide definitions for a selection of terms used in this document. The terms are included in this appendix because they are either technical in nature and, therefore, need a clear description or because they have a specific meaning within the context of this document. Appendix content Term Aggregated data / Aggregated count Certification Definition Data combined from several records containing totals rather than data attributable to an individual. The total is derived from patient level data that has been grouped (summarised). A process whereby a general practice system supplier s data extraction queries are tested against sample data to assess whether the query results match expected results. The certification process reduces the risk of data extraction errors. There are three different levels of Certification available within GPES: Gold: Certification of the Extraction and Post Extraction requirements against Test-pack data to produce predictable actual results against pre-determined expected results. The HSCIC/customer will provide Test-pack data for the certification processes and the HSCIC will support certification of customer systems that receive data from GPES. An example of this might be where a customer wants to make payments based on the extraction results and therefore this must support payment calculations to the penny, such as the Calculating Quality Reporting System (CQRS). Silver: Certification of the Extraction and Post Extraction requirements against Product Test data to produce realistic actual results. This can only be assessed against anecdotal estimation whilst reflecting the effectively anonymised data used in the certification. In other words, the extracted data is correct against the data set interrogated against but may not meet all test conditions. An example of this might be where a customer has other information, such as prevalence and therefore has a reasonable level of expectation of data to be returned. Bronze: Certification of the Extraction and Post Extraction requirements against Product Test data to produce realistic actual results, but no assessment is made against the accuracy of the data. An example of this is where a customer is investigating an area but has no real idea of what to expect, e.g. assessing poor GPES reference: NIC V5Z0L Page 18 of 23

19 Confidential Information Customer Request Output Data Provider Output Dataset Direction Extracted Data Extraction Requirement Feasibility Testing Personal Confidential Data Patient Identifiable quality of data. It might be, for example, a precursor to a more detailed Customer Requirement. See Patient Identifiable Data and Personal Identifiable Data. This is the technical name for the data file(s) that GPES delivers to the customer. The data in the Customer Request Output (CRO) is based on the requirement set out in this document. The Data Provider Output (DPO) is the data that general practice system suppliers extract from general practice clinical systems and submit to GPES. The DPO is based on the data extraction specification (referred to as the Extraction Requirement ) that GPES circulates to general practice system suppliers. A collection of data items standardised against a set of attributes. Each record within the dataset pertains to one instance of the dataset entity. A Direction is a form of delegated legislation, where an Act of Parliament (or other legislation) grants the power to a minister or other designated body to give legally binding orders with which the recipient must comply. The National Health Service England hereby gives the following Directions to the Health and Social Care Information Centre in exercise of the powers conferred by sections 254(1), (3) and (6), 260 (4)(a), 262(1), (3)(a), (5),(7)and 304(9), (10) and (13) of the Health and Social Care Act See Data Provider Output. This is the technical name for the specification that describes to general practice system suppliers the data that should be extracted from general practice systems and how that data should be sent to GPES, (or another appropriate destination). Feasibility testing assesses whether the proposed information requirements are likely to derive good quality data, once the requirement is live. The feasibility testing is undertaken during the development phase of the requirement and carried out on sample databases, which contain patient-level data from a sample of general practices. See Patient Identifiable Data and Confidential Information. Information that can identify one person. This could be one piece of data for example a person s name or a collection of information 8 NHS England, The Health and Social Care Information Centre (Establishment of Information Systems for NHS Services: Collection and Analysis of Primary Care Data) Directions [Online] Available at: [Accessed 30 January 2014] GPES reference: NIC V5Z0L Page 19 of 23

20 Data Scheduled Query Instance for example NHS Number, name, address and date of birth. A Scheduled Query Instance (SQI) is an instance of a data extract, as scheduled against general practice clinical systems. GPES reference: NIC V5Z0L Page 20 of 23

21 12. Appendix C Read codes Purpose of appendix The purpose of this appendix is to provide the objection Read codes that are to be used for this extraction requirement. Appendix content Description READ2 CTV3 Dissent from secondary use of general practitioner patient identifiable data Dissent withdrawn for secondary use of general practitioner patient identifiable data Dissent from disclosure of personal confidential data by Health and Social Care Information Centre Dissent withdrawn from disclosure of personal confidential data by Health and Social Care Information Centre 9Nu0. 9Nu1. 9Nu4. 9Nu5. XaZ89 XaZ8A XaaVL XaaVM GPES reference: NIC V5Z0L Page 21 of 23

22 13. Appendix D Recording Objection Codes Purpose of appendix The purpose of this section is to provide details of how a patient can record an objection code and what data will be extracted for each objection code. Appendix content Type 1 and type 2 objection codes Where a type 2 objection code is recorded in a GP System, teams within the HSCIC will be responsible for preventing identifiable data about that patient being released for purposes other than direct care. Health Datasets Health Datasets Matching Process Patient identifies they wish to record or withdraw an objection to their patient identifiable data leaving the general practice and/or the HSCIC. GP records objection code on clinical system Aggregated Counts The total number of patients at each general practice. The number of patients at each general practice who have currently recorded a type 1 objection. The number of patients at each general practice who have currently recorded a type 1 withdrawn objection. The number of patients at each general practice who have currently recorded a type 2 objection. The number of patients at each general practice who have currently recorded a type 2 withdrawn objection. Type 2 objection code NHS Number General Practice ID Type 2 objection code Date type 2 objection code recorded on GP system Data sent to DME Type 1 and 2 objection codes recorded on GP System. Data Extract GPES Where a type 1 objection code is recorded in a GP System, then no identifiable data will be extracted for purposes other than direct care. Where a type 2 objection code is recorded in a GP System, then a number of data items will be extracted including NHS Number to prevent disclosures of identifiable data for purposes other than direct care. GPES reference: NIC V5Z0L Page 22 of 23

23 14. Appendix E GPES data extraction and delivery Purpose of appendix The purpose of this section is to provide details of the data extraction and delivery of data regarding objection codes to support this extraction requirement. Appendix content Data access and storage The data extracted via GPES will be stored in the HSCIC s Data Management Environment (DME). Data processing GP Systems GP Systems GP System Patient identifies they wish to record or withdraw an objection to their patient identifiable data leaving the general practice and/or the HSCIC. The objection code is added to their general practice record. HSCIC DME Environment GPET-Q CRO File Landing Stage Data Quality Check POM Dataset Patient Objections Extract Type 1 objects to data in identifiable form leaving the practice for purposes other than direct care Type 2 objects to data leaving HSCIC in identifiable form Secure Data Management Environment (DME) System Level Security Policy Confirm all records have transferred with no data loss and agreed data quality rules applied Processing of data After the data has been extracted from general practices and processed it is then forwarded to a secure data store in DME held by the HSCIC. The data will be held for processing and a series of data quality checks to take place to ensure the data received is in the expected format and that there is no data corruption. GPES reference: NIC V5Z0L Page 23 of 23

BOARD PAPER - NHS ENGLAND. Title: Publication of Directions to Health and Social Care Information Centre for the collection of primary care data

BOARD PAPER - NHS ENGLAND. Title: Publication of Directions to Health and Social Care Information Centre for the collection of primary care data Paper NHSE130903 BOARD PAPER - NHS ENGLAND Title: Publication of Directions to Health and Social Care Information Centre for the collection of primary care data Clearance: Tim Kelsey, Director of Patients

More information

Information Governance and Risk Stratification: Advice and Options for CCGs and GPs

Information Governance and Risk Stratification: Advice and Options for CCGs and GPs Information Governance and Risk Stratification: Advice and Options for CCGs and GPs 1 NHS England INFORMATION READER BOX Directorate Medical Operations Patients and Information Nursing Policy Commissioning

More information

NATIONAL HEALTH SERVICE, ENGLAND

NATIONAL HEALTH SERVICE, ENGLAND D I R E C T I O N S NATIONAL HEALTH SERVICE, ENGLAND The Health and Social Care Information Centre (Establishment of Information Systems for NHS Services: Collection and Analysis of Primary Care Data)

More information

Health and Social Care Information Centre

Health and Social Care Information Centre Health and Social Care Information Centre Information Governance Assessment Customer: Clinical Audit Support Unit of the Health and Social Care Information Centre under contract to the Royal College of

More information

GPES Independent Advisory Group Minutes

GPES Independent Advisory Group Minutes Meeting date: Thursday 13 December 2012 Location: Ambassadors Bloomsbury, 12 Upper Woburn Place, London WC1H 0HX Members in attendance: Name Neil Serougi Angus Dawson Joanne Bailey Eve Sariyiannidou MacDonald

More information

Privacy Impact Assessment: care.data

Privacy Impact Assessment: care.data High quality care for all, now and for future generations Document Control Document Purpose Document Name Information Version 1.0 Publication Date 15/01/2014 Description Associated Documents Issued by

More information

How To Manage A Hospital Emergency

How To Manage A Hospital Emergency ENHANCED SERVICE SPECIFICATION RISK PROFILING AND CARE MANAGEMENT SCHEME Introduction 1. This enhanced service has been designed by the NHS Commissioning Board (NHS CB) to reward GP practices 1 for the

More information

De-identification of Data using Pseudonyms (Pseudonymisation) Policy

De-identification of Data using Pseudonyms (Pseudonymisation) Policy De-identification of Data using Pseudonyms (Pseudonymisation) Policy Version: 2.0 Page 1 of 7 Partners in Care This is a controlled document. It should not be altered in any way without the express permission

More information

IAPT Data Standard. Frequently Asked Questions

IAPT Data Standard. Frequently Asked Questions IAPT Data Standard Frequently Asked Questions Version 1.0 March 2012 IAPT FAQs 1.0-1 - Contents Section 1: About the IAPT Data Standard.. 3 Section 2: Who is responsible for doing what?. 5 Section 3: How

More information

The EDGE 2014 User Conference Information Governance Workshop

The EDGE 2014 User Conference Information Governance Workshop The EDGE 2014 User Conference Information Governance Workshop Monday 17 th March 2014 Debbie Terry Agenda What is Information Governance? New developments in legislation Your questions answered Caldicott

More information

Information Sharing Protocol

Information Sharing Protocol Information Sharing Protocol South Central PCTs, General Practices and Tribal Consulting Limited Commissioning Enablement Service (Analytics) Document Control Date Version Author Comment 08/02/10 0.1 A.

More information

Information Governance Policy

Information Governance Policy Information Governance Policy Version: 4 Bodies consulted: Caldicott Guardian, IM&T Directors Approved by: MT Date Approved: 27/10/2015 Lead Manager: Governance Manager Responsible Director: SIRO Date

More information

SCR Expert Advisory Committee

SCR Expert Advisory Committee SCR Expert Advisory Committee Terms of Reference Judith Brodie, Chair August 2015 1 Copyright 2015, Health and Social Care Information Centre. Contents Contents 2 1. Background and Strategic Justification

More information

YOUR MEDICAL RECORDS AN UPDATE PROVIDED BY THE OTFORD PATIENT PARTICIPATION GROUP (PPG)

YOUR MEDICAL RECORDS AN UPDATE PROVIDED BY THE OTFORD PATIENT PARTICIPATION GROUP (PPG) YOUR MEDICAL RECORDS AN UPDATE PROVIDED BY THE OTFORD PATIENT PARTICIPATION GROUP (PPG) Background to this Update There are a lot of articles in the press and on television and radio about care.data and

More information

AVOIDING UNPLANNED ADMISSIONS ENHANCED SERVICE: PROACTIVE CASE FINDING AND CARE REVIEW FOR VULNERABLE PEOPLE GUIDANCE AND AUDIT REQUIREMENTS

AVOIDING UNPLANNED ADMISSIONS ENHANCED SERVICE: PROACTIVE CASE FINDING AND CARE REVIEW FOR VULNERABLE PEOPLE GUIDANCE AND AUDIT REQUIREMENTS April 2014 AVOIDING UNPLANNED ADMISSIONS ENHANCED SERVICE: PROACTIVE CASE FINDING AND CARE REVIEW FOR VULNERABLE PEOPLE GUIDANCE AND AUDIT REQUIREMENTS A programme of action for general practice and clinical

More information

How To Share Your Health Records With The National Health Service

How To Share Your Health Records With The National Health Service HOW WE USE YOUR PERSONAL INFORMATION Information Leaflet Your Health. Our Priority. Page 2 of 9 Introduction This Leaflet explains why the NHS collects information about you and how it is used, your right

More information

ADVISORY GUIDELINES FOR THE HEALTHCARE SECTOR 11 SEPTEMBER 2014

ADVISORY GUIDELINES FOR THE HEALTHCARE SECTOR 11 SEPTEMBER 2014 ADVISORY GUIDELINES FOR THE HEALTHCARE SECTOR 11 SEPTEMBER 2014 1 PART I... 4 1 Introduction... 4 PART II: APPLICATION OF THE DATA PROTECTION PROVISIONS TO SCENARIOS FACED IN THE HEALTHCARE SECTOR... 5

More information

NHS Lanarkshire Information Governance Committee

NHS Lanarkshire Information Governance Committee INFORMATION GOVERNANCE COMMITTEE DRAFT TERMS OF REFERENCE Name Purpose NHS Lanarkshire Information Governance Committee To provide direction of and oversee the development of NHS Lanarkshire Information

More information

Governance. Information. Bulletin. Welcome to the nineteenth edition of the information governance bulletin

Governance. Information. Bulletin. Welcome to the nineteenth edition of the information governance bulletin Welcome to the nineteenth edition of the information governance bulletin Our regular bulletin about information governance and the work of the IG transition programme Publication Gateway Reference: 02465

More information

INFORMATION GOVERNANCE POLICY

INFORMATION GOVERNANCE POLICY INFORMATION GOVERNANCE POLICY Issued by: Senior Information Risk Owner Policy Classification: Policy No: POLIG001 Information Governance Issue No: 1 Date Issued: 18/11/2013 Page No: 1 of 16 Review Date:

More information

A Guide to Clinical Coding Audit Best Practice 2015-16

A Guide to Clinical Coding Audit Best Practice 2015-16 A Guide to Clinical Coding Audit Best Practice 2015-16 Authors: Clinical Classifications Service Contents 1 Introduction 3 1.1 Purpose of Document 3 1.2 Audience 3 1.3 Background 3 1.3.1 Information Governance

More information

Information Governance Framework and Strategy. November 2014

Information Governance Framework and Strategy. November 2014 November 2014 Authorship : Committee Approved : Chris Wallace Information Governance Manager CCG Senior Management Team and Joint Trade Union Partnership Forum Approved Date : November 2014 Review Date

More information

Information Governance Policy

Information Governance Policy Information Governance Policy Information Governance Policy Issue Date: June 2014 Document Number: POL_1008 Prepared by: Information Governance Senior Manager Insert heading depending on Insert line heading

More information

SCCI SUPPORTING. SCCI2036 Palliative Care Clinical Data Set. Implementation Strategy. Project: SCCI2036 Palliative Care Clinical Data Set

SCCI SUPPORTING. SCCI2036 Palliative Care Clinical Data Set. Implementation Strategy. Project: SCCI2036 Palliative Care Clinical Data Set Document filename: Project Manager SCCI2036 Implementation Strategy v0.3 Helen Bolton Project: SCCI2036 Palliative Care Clinical Data Set Owner Julia Verne Version 0.3 Author Malcolm Roxburgh Version issue

More information

Information Governance Policy

Information Governance Policy Information Governance Policy Policy Summary This policy outlines the organisation s approach to the management of Information Governance and information handling. It explains the accountability and reporting

More information

A Question of Balance

A Question of Balance A Question of Balance Independent Assurance of Information Governance Returns Audit Requirement Sheets Contents Scope 4 How to use the audit requirement sheets 4 Evidence 5 Sources of assurance 5 What

More information

Code of Audit Practice

Code of Audit Practice Code of Audit Practice APRIL 2015 Code of Audit Practice Published pursuant to Schedule 6 Para 2 of the Local Audit and Accountability This document is available on our website at: www.nao.org.uk/ consultation-code-audit-practice

More information

Information Governance Strategy. Version No 2.0

Information Governance Strategy. Version No 2.0 Plymouth Community Healthcare CIC Information Governance Strategy Version No 2.0 Notice to staff using a paper copy of this guidance. The policies and procedures page of PCH Intranet holds the most recent

More information

Information Governance Policy

Information Governance Policy Information Governance Policy UNIQUE REF NUMBER: AC/IG/013/V1.2 DOCUMENT STATUS: Approved by Audit Committee 19 June 2013 DATE ISSUED: June 2013 DATE TO BE REVIEWED: June 2014 1 P age AMENDMENT HISTORY

More information

Information Governance White Paper EDGE Programme

Information Governance White Paper EDGE Programme Information Governance White Paper EDGE Programme Forward Dear Subscriber The research landscape within the UK continues to evolve; from April 2014 we will see the formation of 15 Local Clinical Research

More information

POLICY FRAMEWORK AND STANDARDS INFORMATION SHARING BETWEEN GOVERNMENT AGENCIES

POLICY FRAMEWORK AND STANDARDS INFORMATION SHARING BETWEEN GOVERNMENT AGENCIES POLICY FRAMEWORK AND STANDARDS INFORMATION SHARING BETWEEN GOVERNMENT AGENCIES January 2003 CONTENTS Page 1. POLICY FRAMEWORK 1.1 Introduction 1 1.2 Policy Statement 1 1.3 Aims of the Policy 1 1.4 Principles

More information

SMS and Texting - A Guide to the Future

SMS and Texting - A Guide to the Future NHS Information Governance: Information Risk Management Guidance: Short Message Service (SMS) & Texting Department of Health Informatics Directorate April 2010 1 Amendment History Version Date Amendment

More information

Information Governance Policy (incorporating IM&T Security)

Information Governance Policy (incorporating IM&T Security) (incorporating IM&T Security) ONCE PRINTED OFF, THIS IS AN UNCONTROLLED DOCUMENT. PLEASE CHECK THE INTRANET FOR THE MOST UP TO DATE COPY Target Audience: All staff employed or working on behalf of the

More information

Information Governance Policy Version - Final Date for Review: 1 October 2017 Lead Director: Performance, Quality and Cooperate Affairs

Information Governance Policy Version - Final Date for Review: 1 October 2017 Lead Director: Performance, Quality and Cooperate Affairs Information Governance Policy Version - Final Date for Review: 1 October 2017 Lead Director: Performance, Quality and Cooperate Affairs NOTE: This is a CONTROLLED Document. Any documents appearing in paper

More information

Information Governance Policy

Information Governance Policy Information Governance Policy Version: Revised: Consultation: Ratified by: 1.0 Information Governance Committee Governance Committee Date ratified: 19 March 2008 Name of originator/author: David McGrath

More information

Gilead Transparency Reporting Methodological Note

Gilead Transparency Reporting Methodological Note Gilead Transparency Reporting Methodological Note Contents 1 Introduction... 2 2 Definition of Transfers of Value... 2 3 Definition and management of Cross-Border Spend... 3 4 Which Recipients of Transfers

More information

INFORMATION SHARING AGREEMENT. Multi-Disciplinary Team (MDT): Service Information Sharing

INFORMATION SHARING AGREEMENT. Multi-Disciplinary Team (MDT): Service Information Sharing INFORMATION SHARING AGREEMENT Multi-Disciplinary Team (MDT): Service Information Sharing SCOPE NAME OF LEAD Multi-Disciplinary Team (MDT) for high risk people: this agreement is for the patient and management

More information

Research governance policy

Research governance policy Research governance policy Responsible Officer Author Ben Bennett, Business Planning & Resources Director Sarah Garner, Associate Director, Science Policy & Research Programme Date effective from July

More information

Gloucestershire Hospitals

Gloucestershire Hospitals Gloucestershire Hospitals NHS Foundation Trust TRUST POLICY DATA QUALITY FAST FIND: For information on the Trust s Data Quality standards, see Section 7. For information on the Trust s computer systems,

More information

NAVIGATING ETHICAL APPROVAL AND ACCESS IN SOCIAL CARE RESEARCH

NAVIGATING ETHICAL APPROVAL AND ACCESS IN SOCIAL CARE RESEARCH NAVIGATING ETHICAL APPROVAL AND ACCESS IN SOCIAL CARE RESEARCH January 2014 Preamble This document has been produced by the Scottish Government, the Association of Directors of Social Work (ADSW) and the

More information

Patient Reported Outcome Measures (PROMs) Standards

Patient Reported Outcome Measures (PROMs) Standards Patient Reported Outcome Measures (PROMs) Standards A. Information Governance Requirement This Information Governance Requirement Standard covers four Areas: 1. NHS Systems Requirements, 2. Data Sharing,

More information

Information Sharing Policy

Information Sharing Policy Information Sharing Policy REFERENCE NUMBER IG 010 / 0v3 February 2013 VERSION V1.0 APPROVING COMMITTEE & DATE Clinical Executive Committee 5.2.13 REVIEW DUE DATE February 2016 West Lancashire CCG is committed

More information

Information Governance Strategy :

Information Governance Strategy : Item 11 Strategy Strategy : Date Issued: Date To Be Reviewed: VOY xx Annually 1 Policy Title: Strategy Supersedes: All previous Strategies 18/12/13: Initial draft Description of Amendments 19/12/13: Update

More information

Study-wide considerations: identifies the areas of the criterion the lead reviewer should consider when conducting the review

Study-wide considerations: identifies the areas of the criterion the lead reviewer should consider when conducting the review UK STUDY-WIDE GOVERNANCE CRITERIA FOR R&D REVIEW INTRODUCTION The following document is intended to provide operational guidance to the person taking the UK lead in conducting the R&D Study-Wide review

More information

Protecting Health and Care Information. A consultation on proposals to introduce new Regulations

Protecting Health and Care Information. A consultation on proposals to introduce new Regulations Protecting Health and Care Information A consultation on proposals to introduce new Regulations June 2014 Title: Protecting Health and Care Information Author: Information Goverance / Information and Transparency

More information

BEFORE USING THIS GUIDANCE, MAKE SURE YOU HAVE THE MOST UP TO DATE VERSION GUIDANCE 2 POLICY AREA: INFORMATION GOVERNANCE

BEFORE USING THIS GUIDANCE, MAKE SURE YOU HAVE THE MOST UP TO DATE VERSION GUIDANCE 2 POLICY AREA: INFORMATION GOVERNANCE GUIDANCE 1 TITLE: INFORMATION GOVERNANCE FRAMEWORK 2 POLICY AREA: INFORMATION GOVERNANCE 3 ACCOUNTABLE DIRECTOR FOR POLICY AREA: DIRECTOR OF QUALITY AND GOVERNANCE 4 GUIDANCE DRAFTED BY: INTEGRATED GOVERNANCE

More information

INFORMATION GOVERNANCE AND SECURITY 1 POLICY DRAFTED BY: INFORMATION GOVERNANCE LEAD 2 ACCOUNTABLE DIRECTOR: SENIOR INFORMATION RISK OWNER

INFORMATION GOVERNANCE AND SECURITY 1 POLICY DRAFTED BY: INFORMATION GOVERNANCE LEAD 2 ACCOUNTABLE DIRECTOR: SENIOR INFORMATION RISK OWNER INFORMATION GOVERNANCE AND SECURITY 1 POLICY DRAFTED BY: INFORMATION GOVERNANCE LEAD 2 ACCOUNTABLE DIRECTOR: SENIOR INFORMATION RISK OWNER 3 APPLIES TO: ALL STAFF 4 COMMITTEE & DATE APPROVED: AUDIT COMMITTEE

More information

Barnet Partnership Information Sharing Protocol

Barnet Partnership Information Sharing Protocol Barnet Partnership Information Sharing Protocol Information Sharing Protocol V1_0C - FINAL Page 1 of 52 Version 1.0 (FINAL) Contents 1 Background... 4 1.1 The need to share information... 4 2 Scope...

More information

Principles and Guidelines on Confidentiality Aspects of Data Integration Undertaken for Statistical or Related Research Purposes

Principles and Guidelines on Confidentiality Aspects of Data Integration Undertaken for Statistical or Related Research Purposes Principles and Guidelines on Confidentiality Aspects of Data Integration Undertaken for Statistical or Related Research Purposes These Principles and Guidelines were endorsed by the Conference of European

More information

What you should know about Data Quality. A guide for health and social care staff

What you should know about Data Quality. A guide for health and social care staff What you should know about Data Quality A guide for health and social care staff Please note the scope of this document is to provide a broad overview of data quality issues around personal health information

More information

Remote Data Extraction Policy and Procedure

Remote Data Extraction Policy and Procedure Remote Data Extraction Policy and Procedure Prepared by PRIMIS June 2015 The University of Nottingham. All rights reserved. Contents 1. Introduction... 3 2. Purpose and scope... 3 3. Policy Statement...

More information

Guidance on information governance for health and social care services in Ireland

Guidance on information governance for health and social care services in Ireland Guidance on information governance for health and social care services in Ireland About the Health Information and Quality Authority The (HIQA) is the independent Authority established to drive continuous

More information

THE HEALTH AND SOCIAL CARE INFORMATION CENTRE DATA SHARING CONTRACT

THE HEALTH AND SOCIAL CARE INFORMATION CENTRE DATA SHARING CONTRACT THE HEALTH AND SOCIAL CARE INFORMATION CENTRE DATA SHARING CONTRACT CONTRACT TYPE CONTRACT REF HIGH RISK REF HIGH RISK N/A 1. PARTIES TO THE CONTRACT This Contract is made between: The Health & Social

More information

RECORDS MANAGEMENT POLICY

RECORDS MANAGEMENT POLICY RECORDS MANAGEMENT POLICY Version 8.0 Purpose: For use by: This document is compliant with /supports compliance with: To outline the lifecycle of a record and to provide guidance on retention and disposal

More information

Information Governance Strategy Includes Information risk & incident management methodology

Information Governance Strategy Includes Information risk & incident management methodology Version 2.0 LOGOLOGO Information Governance Strategy Includes Information risk & incident management methodology Approved by: Quality & Governance Committee Ratification date: May 2014 Review date: May

More information

Managing the boundaries of NHS and privately funded healthcare Policy on the separation of private and NHS treatments

Managing the boundaries of NHS and privately funded healthcare Policy on the separation of private and NHS treatments South Central Priorities Committees (Oxfordshire PCT) Policy Statement 67a: Managing the boundaries of NHS and privately-funded healthcare Clinical Executive decision: September 2009 Date of Issue: April

More information

Informatics: The future. An organisational summary

Informatics: The future. An organisational summary Informatics: The future An organisational summary DH INFORMATION READER BOX Policy HR/Workforce Management Planning/Performance Clinical Document Purpose Commissioner Development Provider Development Improvement

More information

Practice Note. 10 (Revised) October 2010 AUDIT OF FINANCIAL STATEMENTS OF PUBLIC SECTOR BODIES IN THE UNITED KINGDOM

Practice Note. 10 (Revised) October 2010 AUDIT OF FINANCIAL STATEMENTS OF PUBLIC SECTOR BODIES IN THE UNITED KINGDOM October 2010 Practice Note 10 (Revised) AUDIT OF FINANCIAL STATEMENTS OF PUBLIC SECTOR BODIES IN THE UNITED KINGDOM The Auditing Practices Board (APB) is one of the operating bodies of the Financial Reporting

More information

First National Data Quality Review: Executive Summary Quality Information Committee

First National Data Quality Review: Executive Summary Quality Information Committee First National Data Quality Review: Executive Summary Quality Information Committee Executive Summary Introduction to the report This report has been produced by the Quality Information Committee (QIC)

More information

3. The aim of this enhanced service in 2013/14 is to establish patient online access to GP practice information systems as follows:

3. The aim of this enhanced service in 2013/14 is to establish patient online access to GP practice information systems as follows: ENHANCED SERVICE SPECIFICATION IMPROVING PATIENT ONLINE ACCESS Introduction 1. This enhanced service has been designed by the NHS Commissioning Board (NHS CB) to facilitate improvements in the electronic

More information

September 2015 TO THE BOARDS OF MANAGEMENT AND PRINCIPAL TEACHERS OF PRIMARY SCHOOLS

September 2015 TO THE BOARDS OF MANAGEMENT AND PRINCIPAL TEACHERS OF PRIMARY SCHOOLS September 2015 TO THE BOARDS OF MANAGEMENT AND PRINCIPAL TEACHERS OF PRIMARY SCHOOLS Fair Processing Notice to explain how the personal data of pupils in primary schools on the Primary Online Database

More information

WSIC Integrated Care Record FAQs

WSIC Integrated Care Record FAQs WSIC Integrated Care Record FAQs How your information is shared now Today, all the places where you receive care keep records about you. They can usually only share information from your records by letter,

More information

Information Governance Policy. 2 RESPONSIBLE PERSON: Steve Beeho, Head of Integrated Governance. All CCG-employed staff.

Information Governance Policy. 2 RESPONSIBLE PERSON: Steve Beeho, Head of Integrated Governance. All CCG-employed staff. Information Governance Policy 1 SUMMARY This policy is intended to ensure that staff are fully aware of their Information Governance (IG) responsibilities, so that they can effectively manage and best

More information

TRUST POLICY FOR DATA QUALITY

TRUST POLICY FOR DATA QUALITY TRUST POLICY FOR DATA QUALITY Reference Number: IG 2012 001 Version: 2.3 Status: Final Author: Vanessa Forman Job Title: Head of Information Version / Amendment History Version Date Author Reason 1 September

More information

Information Governance Strategy

Information Governance Strategy Information Governance Strategy ONCE PRINTED OFF, THIS IS AN UNCONTROLLED DOCUMENT. PLEASE CHECK THE INTRANET FOR THE MOST UP TO DATE COPY Target Audience: All staff employed or working on behalf of the

More information

Information Governance Standards in Relation to Third Party Suppliers and Contractors

Information Governance Standards in Relation to Third Party Suppliers and Contractors Information Governance Standards in Relation to Third Party Suppliers and Contractors Document Summary Ensure staff members are aware of the standards that should be in place when considering engaging

More information

Annex C Data Quality Statement on Statistics Release: Adults with learning disabilities known to Scottish local authorities 2012 (esay)

Annex C Data Quality Statement on Statistics Release: Adults with learning disabilities known to Scottish local authorities 2012 (esay) Annex C Data Quality Statement on Statistics Release: Adults with learning disabilities known to Scottish local authorities 2012 (esay) Data quality The six dimensions of data quality as defined by the

More information

INFORMATION SHARING 2 nd LEVEL PROTOCOL BETWEEN NHS Bristol CAREPLUS SYSTEM AND BCC CHILDREN S CENTRES

INFORMATION SHARING 2 nd LEVEL PROTOCOL BETWEEN NHS Bristol CAREPLUS SYSTEM AND BCC CHILDREN S CENTRES Bristol Bristol City Council INFORMATION SHARING 2 nd LEVEL PROTOCOL BETWEEN NHS Bristol CAREPLUS SYSTEM AND BCC CHILDREN S CENTRES This document may be made available to the public and persons outside

More information

North West London Whole Systems Integrated Care Information Sharing and Hosting Agreement

North West London Whole Systems Integrated Care Information Sharing and Hosting Agreement Dated 1 st October 2014 / amended 10 th February 2015 (1) NHS BRENT CLINICAL COMMISSIONING GROUP (Data Processor on behalf of Provider Partners as defined in this Agreement) - and - (2) SIGNATORY PARTNERS

More information

National Institute for Health Research Coordinated System for gaining NHS Permission (NIHR CSP)

National Institute for Health Research Coordinated System for gaining NHS Permission (NIHR CSP) National Institute for Health Research Coordinated System for gaining NHS Permission (NIHR CSP) Operating Manual Please check the CRN Website for the latest version. Version: 6.0 Status: Consultation in

More information

IAAS Recommendation Report

IAAS Recommendation Report Standardisation Committee for Care Information (SCCI) 30 April 2014 Agenda Item:09 For: (insert action/decision/info) IAAS Recommendation Report ISB 1513 Maternity Services Data Set (Amd 45/2012) IAAS

More information

Schedule 10 Provisions Governing the Relationship between NHS Work, Private Practice and Fee Paying Services

Schedule 10 Provisions Governing the Relationship between NHS Work, Private Practice and Fee Paying Services Schedule 10 Provisions Governing the Relationship between NHS Work, Private Practice and Fee Paying Services 1. This Schedule should be read in conjunction with the Code of Conduct for Private Practice,

More information

University of Limerick Data Protection Compliance Regulations June 2015

University of Limerick Data Protection Compliance Regulations June 2015 University of Limerick Data Protection Compliance Regulations June 2015 1. Purpose of Data Protection Compliance Regulations 1.1 The purpose of these Compliance Regulations is to assist University of Limerick

More information

National Quality Assurance Programme in Histopathology Information Governance Policy Version 2

National Quality Assurance Programme in Histopathology Information Governance Policy Version 2 National Quality Assurance Programme in Histopathology Information Governance Policy Version 2 Copyright Royal College of Physicians of Ireland 2013 Developed and approved by The Steering Group of the

More information

Data Protection Policy

Data Protection Policy Data Protection Policy Version: V1 Ratified by: Operational Management Executive Committee Date ratified: 26 September 2013 Name and Title of originator/author(s): Chris Brady, FOI, Data Protection and

More information

Corporate identity guidelines

Corporate identity guidelines NHS Hospital Data and Datasets: A Consultation Corporate identity guidelines IMPROVE PATIENT SAFETY AND HEALTH OUTCOMES CITIZEN DATA= CHOICE AND ACCOUNTABILITY Revised first edition v1.1 May 2013 - + +

More information

July 2013. Background

July 2013. Background Beyond 2011: S5 Administrative Data Sources Report: Department for Work and Pensions (DWP) and Her Majesty s Revenue and Customs (HMRC) Benefit and Revenue Information (CIS) and Lifetime Labour Market

More information

CHILDREN AND ADULTS SERVICE RESEARCH APPROVAL GROUP

CHILDREN AND ADULTS SERVICE RESEARCH APPROVAL GROUP DURHAM COUNTY COUNCIL CHILDREN AND ADULTS SERVICE RESEARCH APPROVAL GROUP INFORMATION PACK Children and Adults Service Version 4 October 2015 Children and Adults Service Research Approval Group Page 1

More information

INFORMATION RISK MANAGEMENT POLICY

INFORMATION RISK MANAGEMENT POLICY INFORMATION RISK MANAGEMENT POLICY DOCUMENT CONTROL: Version: 1 Ratified by: Steering Group / Risk Management Sub Group Date ratified: 21 November 2012 Name of originator/author: Manager Name of responsible

More information

Policy: D9 Data Quality Policy

Policy: D9 Data Quality Policy Policy: D9 Data Quality Policy Version: D9/02 Ratified by: Trust Management Team Date ratified: 16 th October 2013 Title of Author: Head of Knowledge Management Title of responsible Director Director of

More information

Code of Practice on Data Protection for the Insurance Sector

Code of Practice on Data Protection for the Insurance Sector Code of Practice on Data Protection for the Insurance Sector (Approved by the Data Protection Commissioner under Section 13 (2) of the Data Protection Acts, 1988 and 2003) Forward I am very happy to be

More information

Information Governance Strategy. Version No 2.1

Information Governance Strategy. Version No 2.1 Livewell Southwest Information Governance Strategy Version No 2.1 Notice to staff using a paper copy of this guidance. The policies and procedures page of LSW Intranet holds the most recent version of

More information

D-CRIS Information Governance Assurance

D-CRIS Information Governance Assurance D-CRIS Information Governance Assurance Date: 05 08 2013 Version: 1.0 Author: Murat Soncul Contents 1. Introduction... 3 2. CRIS Security Model... 3 3. SLaM Information Governance Framework... 4 4. Roles

More information

UNIVERSITY OF BIRMINGHAM AND UNIVERSITY OF YORK HEALTH ECONOMICS CONSORTIUM (NICE EXTERNAL CONTRACTOR)

UNIVERSITY OF BIRMINGHAM AND UNIVERSITY OF YORK HEALTH ECONOMICS CONSORTIUM (NICE EXTERNAL CONTRACTOR) UNIVERSITY OF BIRMINGHAM AND UNIVERSITY OF YORK HEALTH ECONOMICS CONSORTIUM (NICE EXTERNAL CONTRACTOR) Development feedback report on piloted indicator(s) QOF indicator area: Heart failure cardiac rehabilitation

More information

Research Governance Framework for Health and Social Care

Research Governance Framework for Health and Social Care Research Governance Framework for Health and Social Care Second edition, 2005 Research Governance Framework for Health and Social Care Foreword The Research Governance Framework outlines principles of

More information

LEEDS BECKETT UNIVERSITY. Information Security Policy. 1.0 Introduction

LEEDS BECKETT UNIVERSITY. Information Security Policy. 1.0 Introduction LEEDS BECKETT UNIVERSITY Information Security Policy 1.0 Introduction 1.1 Information in all of its forms is crucial to the effective functioning and good governance of our University. We are committed

More information

PRIVACY POLICY. Privacy Statement

PRIVACY POLICY. Privacy Statement PRIVACY POLICY Privacy Statement Blue Care is one of Australia's leading providers of retirement living, community health, help at home services and aged care homes, caring for more than 12,500 people

More information

Information Governance Policy

Information Governance Policy Information Governance Policy Reference: Information Governance Policy Date Approved: April 2013 Approving Body: Board of Trustees Implementation Date: April 2013 Version: 6 Supersedes: 5 Stakeholder groups

More information

Guidance for Access to Health Records Requests

Guidance for Access to Health Records Requests Guidance for Access to Health Records Requests February 2010 1 DH INFORMATION READER BOX Policy HR / Workforce Management Planning / Clinical Document Purpose Gateway Reference Title Estates Commissioning

More information

National System for Incident Reporting

National System for Incident Reporting National System for Incident Reporting Privacy Impact Assessment The contents of this publication may be reproduced in whole or in part, provided the intended use is for non-commercial purposes and full

More information

ABPI GUIDELINES FOR THE SECONDARY USE OF DATA FOR MEDICAL RESEARCH PURPOSES

ABPI GUIDELINES FOR THE SECONDARY USE OF DATA FOR MEDICAL RESEARCH PURPOSES ABPI GUIDELINES FOR THE SECONDARY USE OF DATA FOR MEDICAL RESEARCH PURPOSES The Association of the British Pharmaceutical Industry 12 Whitehall London SW1A 2DY Telephone: 0870 890 4333 Fax: 020 7747 1411

More information

Align Technology. Data Protection Binding Corporate Rules Controller Policy. 2014 Align Technology, Inc. All rights reserved.

Align Technology. Data Protection Binding Corporate Rules Controller Policy. 2014 Align Technology, Inc. All rights reserved. Align Technology Data Protection Binding Corporate Rules Controller Policy Contents INTRODUCTION 3 PART I: BACKGROUND AND ACTIONS 4 PART II: CONTROLLER OBLIGATIONS 6 PART III: APPENDICES 13 2 P a g e INTRODUCTION

More information

DATA PROTECTION POLICY

DATA PROTECTION POLICY DATA PROTECTION POLICY Version 1.3 April 2014 Contents 1 POLICY STATEMENT...2 2 PURPOSE....2 3 LEGAL CONTEXT AND DEFINITIONS...2 3.1 Data Protection Act 1998...2 3.2 Other related legislation.....4 3.3

More information

PATIENT ONLINE SUPPORT AND RESOURCES. Contact the Patient Online team:england.patient-online@nhs.net

PATIENT ONLINE SUPPORT AND RESOURCES. Contact the Patient Online team:england.patient-online@nhs.net PATIENT ONLINE SUPPORT AND RESOURCES Contact the Patient Online team:england.patient-online@nhs.net #Patientonline WHO IS THIS GUIDE FOR? This guide is intended for GPs, general practice staff, clinical

More information

Appendix 11 - Swiss Data Protection Act

Appendix 11 - Swiss Data Protection Act GLEIF- LOU Restricted Appendix 11 - Swiss Data Protection Act GLEIF Revision Version: 1.0 2015-09-23 Master Copy page 2 of 11 Applicable Provisions of the Swiss Data Protection Act (DPA) including the

More information

Access to Health Records

Access to Health Records Access to Health Records Crown Heights Medical Centre Procedure Access to Health Records ACCESS TO MEDICAL RECORDS (DATA PROTECTION) POLICY INTRODUCTION The Access to Health Records Act 1990 gave individuals

More information

Patient Online Services in Primary Care

Patient Online Services in Primary Care Patient Online Services in Primary Care Good Practice Guidance on Identity Verification NHS England INFORMATION READER BOX Directorate Medical Commissioning Operations Patients and Information Nursing

More information

STATUTORY INSTRUMENTS. S.I. No. 336 of 2011

STATUTORY INSTRUMENTS. S.I. No. 336 of 2011 STATUTORY INSTRUMENTS. S.I. No. 336 of 2011 EUROPEAN COMMUNITIES (ELECTRONIC COMMUNICATIONS NETWORKS AND SERVICES) (PRIVACY AND ELECTRONIC COMMUNICATIONS) REGULATIONS 2011 (Prn. A11/1165) 2 [336] S.I.

More information

NOTTINGHAM UNIVERSITY HOSPITALS NHS TRUST. PATIENT DATA QUALITY POLICY Documentation Control

NOTTINGHAM UNIVERSITY HOSPITALS NHS TRUST. PATIENT DATA QUALITY POLICY Documentation Control NOTTINGHAM UNIVERSITY HOSPITALS NHS TRUST PATIENT DATA QUALITY POLICY Documentation Control Reference GG/INF/019 Approving Body Directors Group Date Approved 16 Implementation Date 16 Summary of Changes

More information

INFORMATION GOVERNANCE POLICY

INFORMATION GOVERNANCE POLICY INFORMATION GOVERNANCE POLICY Information Governance Policy_v2.0_060913_LP Page 1 of 14 Information Reader Box Directorate Purpose Document Purpose Document Name Author Corporate Governance Guidance Policy

More information