General overarching fair processing statement:
“This practice may supply personal health data to comply with its legal obligations from time to time, as directed by the Secretary of State for Health, or other recognised Statutory Authority.”
For more information on Fair Data Processing within the NHS, please click here.
General Practice Transparency Notice for GPES Data for Pandemic Planning and Research (COVID-19)
This practice is supporting vital coronavirus (COVID-19) planning and research by sharing your data with NHS Digital.
Please click here for full details of this collection.
About GPES Data for Pandemic Planning & Research (COVID-19) data collection
The General Practice Extraction Service (GPES) will extract the required data on a fortnightly basis until the expiry of the COVID-19 Direction.
The GPES data extraction will identify all patients currently registered with a General Practice or with a date of death on or after 1 November 2019 whose record contain coded information relevant to pandemic planning and research.
For each patient, NHS Digital will require the following personal data.
- NHS Number
- surname and forename
- date of birth
- date of death
Data will be extracted for the associated SNOMED code(s) and date(s) for GP record entries including:
- diagnoses and findings
- medications and other prescribed items
- investigations, tests and results
- treatments and outcomes
- vaccinations and immunisations.
There is a dedicated section about Data Provision Notices and Directions on NHS Digital website.
Fair Processing Notice specific to NHS Health Check Data Extraction
This information is for patients who have received an invitation to an NHS Health Check.
Starting in June 2018, NHS Digital, acting on behalf of Public Health England (PHE), will be collecting information about the numbers of people who are invited to an NHS Health Check and either attend or do not attend. This information will be extracted in June 2018 using the General Practice Extraction Service run by NHS Digital.
How will this information be shared?
The data collected will be analysed by PHE and reports of the main findings will be available on the NHS Health Check webpage.
What type of data will be extracted?
We will be using patient records, to collect information about people who have been invited for and attended an NHS Health Check, and people who have been invited for but not attended an NHS Health Check since 2009.
Before it comes to PHE, all patient information will be pseudonymised in line with the Information Commissioner’s Office (ICO) Anonymisation Code of Practice.
This means that the identifying fields within the data such as, date of birth, NHS number and postcode details will be replaced with an artificial identifier. In this case a unique number. Therefore, PHE will not receive personal data.
PHE will be using information from records for patients aged 40-74 years (the age group that the NHS Health Check is aimed at), and people aged 18-39 years who have been invited for and/or attended an NHS Health Check. This will provide information about cases where people may have been invited and/or attended an NHS Health Check before reaching the eligible age of 40.
PHE is collecting data for four patient groups:
Group 1: registered patients aged 40-74 invited to an NHS Health Check only.
Group 2: registered patients aged 40-74 years who either commenced, completed (by a GP or third party), declined or did not attend an NHS Health Check.
Group 3: registered patients aged 40-74 years for whom an NHS Health Check was inappropriate.
Group 4: registered patients aged 18-39 years who have either been invited for an NHS Health Check and/or completed an NHS Health Check.
Each patient will be included in one of these four groups according to the information in their medical record.
A unique number will be created for each patient, which PHE can use to identify them instead of their personal details. This means any data used by PHE will be pseudonymised.
NHS Digital will collect the following information for each patient:
- NHS number (this information will not be passed on to PHE)
- date of birth (this information will not be passed on to PHE, though age at time of the extract will)
- postcode (this information will not be passed on to PHE)
- patient active status
- general practice code
- date patient registered with the general practice
- date of death (if applicable) (this information will not be passed on to PHE)
- first language (and whether an interpreter was needed)
- country of birth
- Carer status
- diagnoses for disabilities: such as learning disability, serious mental illness, blindness, severe deafness
NHS Digital will extract information that relates to the health conditions that the NHS Health Check programme seeks to prevent or diagnose:
- smoking status
- family history of coronary heart disease
- body mass index (BMI) score
- cholesterol level
- blood pressure
- physical activity levels
- risk of cardiovascular disease
- alcohol use
- tests for cardiovascular disease risk factors
- cardiovascular disease diagnoses
- information on the advice or other information provided to the patient such as advice around diet
- information on any medication prescribed for cardiovascular disease
Who is collecting the data and how is it collected?
The General Practice Extraction Service (GPES) at NHS Digital will extract the data from general practice (GP) patient records. NHS Digital will pseudonymise the information before passing it on to PHE.
Why is this information being collected?
PHE wants to use the information collected in order to monitor access to the NHS Health Check programme for different populations, as well as the number of people in different communities who are attending an NHS Health Check when they are invited. It will also help
to measure how well the programme is being run across England and whether it is having an impact on the health of local people.
To date, this information has not been collected on a national scale.
The data will also be analysed to inform our partners and other professionals involved in the programme, including the Department of Health, commissioners and professional groups who provide NHS Health Checks, such as pharmacists.
If any statistics or reports using this data are published, PHE will observe Government standards that ensure that individuals cannot be identified from published data.
How will the data be used?
- to provide information on how the NHS Health Check programme is performing
- to show how the programme is performing in different areas of England
- to highlight opportunities for improvement in how we deliver the NHS Health Check programme
- in the future, PHE hopes to use this data to track how the NHS Health Check programme has made a difference to the long-term health of patients
What happens to the data when it is sent to PHE?
All confidential personal information such as NHS Number, date of birth and postcode will be removed, and a unique ID will be created. PHE will not receive any personal information.
In order to allow us to track how the NHS Health Check programme has impacted the long-term health of patients, at a later stage PHE might seek to link the information we are collecting with other information such as hospital records. It is anticipated that the linkage would be done by NHS Digital, using the unique ID to link records.
Who will the data be shared with?
We will be sharing our findings with local authorities and these will also be publicly available. These findings will be aggregated, which means that data will be grouped together. No individual patient information will be shared or made publicly available.
How will this affect the patients concerned?
There will be no impact on patients from sharing the data, as no one can be identified from the information shown in our reports.
What if I do not want my data to be collected?
If you do not wish your data to be collected, please contact your GP to register a Type 1 opt-out. This is an objection that prevents an individual’s personal confidential information from being shared outside of their general practice except when it is being used for the purposes of direct care, or in particular circumstances required by law, such as a public health emergency like an outbreak of a pandemic disease.
NHS Digital will uphold Type 1 opt-outs in collecting these data from general practices (that is: any patients who have registered a Type 1 opt-out prior to the point in time at which this data collection takes place will not be included in this data collection).
A Type 2 opt-out is an objection that prevents an individual’s personal confidential information from being shared outside of NHS Digital, except when it is being used for the purposes of direct care. Type 2 opt-outs do not apply to this data collection as no personal data will leave NHS Digital.
From 25 May 2018, type 2 opt-outs will be converted into the new national data opt-out.
You can read more about personal information choices online.
What is the NHS Health Check?
The NHS Health Check was launched in 2009. Since 2013, local authorities have been required to offer an NHS Health Check every five years to all adults aged 40-74 years. Adults aged 40-74 who have been diagnosed with vascular disease, prescribed statins or identified at high risk of cardiovascular disease are excluded from the programme, as they should already be receiving support to monitor and manage their condition.
The NHS Health Check is a free check-up of your overall health. It can tell you whether you're at higher risk of getting certain health problems, such as:
- heart disease
- kidney disease
If you are over 65, you will also be told the signs and symptoms of dementia to look out for.
As well as measuring your risk of developing these health problems, an NHS Health Check gives you advice on how to prevent them.
The risk level varies from person to person, but everyone is at risk of developing heart disease, stroke, type 2 diabetes, kidney disease and some types of dementia.
Your NHS Health Check can detect potential health problems before they do real damage.
PHE is responsible for national oversight of the NHS Health Check programme, and for supporting the organisations which run the programme locally to deliver high standards and reach as many eligible people as they can.
For further information, please see NHS Digital Website. This provides information on the Privacy Notice: NHS Health Check for adults aged 40-74 years
Practices are required to share your diabetes related data with the Diabetic Eye Screening Programme operated by Health Intelligence (commissioned by NHS England). This supports your invitation for eye screening (where you are eligible and referred by the Practice) and ongoing care by the screening programme. This data may be shared with any Hospital Eye Services you are under the care of to support further treatment and with other healthcare professionals involved in your care, for example your Diabetologist. For further information take a look at Health Intelligence’s Privacy Notice on the diabetic eye screening website : www.essexdesp.co.uk
Fair processing specific to National Diabetes Audit (NDA)
Practices are contractually required to allow collection of data relating to the NDA.
This GP practice is taking part in an important national project about people at risk of diabetes and diabetes care and treatment in the NHS.
The National Diabetes Audit is a major national clinical Audit which measures the effectiveness of diabetes healthcare against NICE Clinical Guidelines and NICE Quality Standards, in England and Wales. The NDA collects and analyses data for use by a range of stakeholders to drive changes and improvements in the quality of services and health outcomes for people with diabetes.
If you have diabetes, non-diabetic hyperglycaemia, impaired glucose tolerance or pre-diabetes, your GP practice will share information about your diabetes care and treatment with the NDA. The type of information, and how it is shared, is controlled by law and enforced by strict rules of confidentiality and security.
If you do not want your information to be used as part of National Audits or specifically the National Diabetes Audit, please inform your GP practice in writing. This will not affect your care.
For further information please click here for patient information leaflet.
Fair processing statement specific to fit note:
“Anonymised data on the use of fit notes is being provided to the HSCIC on behalf of Department of Health, and the Department for Work and Pensions. This will enable the Department for Work and Pensions to undertake research analysis to inform policy relating to employment and sickness absence, including evaluation of Fit for Work.”
If you do not want information that identifies you to be shared outside your GP practice, please inform us in writing to make a note of this in your medical record. This will prevent your confidential information from being used other than in special circumstances required by law, such as a public health emergency. This is a type 1 objection.
The Health and Social Care Information Centre (hscic) makes national collections of information from other places where you receive care, such as hospitals and community services. They only release this information in identifiable form where there is legal approval to do so.
You can opt out of this identifiable information leaving the Health and Social Care Information Centre for purposes beyond your direct care. This is a type 2 objection.
The only exceptions to this are very rare circumstances, such as a civil emergency or a public health emergency.
Please inform your GP practice in writing if you want to object and they will mark this in your medical record. The solution that the Health and Social Care Information Centre is developing to implement objections will be operational by January 2016.