General Practice Data for Planning and Research (GPDPR)

The data held in the GP medical records of patients is used every day to support health and care planning and research in England, helping to find better treatments and improve patient outcomes for everyone. NHS Digital has developed a new way to collect this data, called the General Practice Data for Planning and Research data collection.

The new data collection reduces burden on GP practices, allowing doctors and other staff to focus on patient care.

NHS Digital has engaged with the British Medical Association (BMA), Royal College of GPs (RCGP) and the National Data Guardian (NDG) to ensure relevant safeguards are in place for patients and GP practices. 

NHS Digital is the national custodian for health and care data in England and has responsibility for standardising, collecting, analysing, publishing and sharing data and information from across the health and social care system, including general practice.

NHS Digital collected patient data from general practices using a service called the General Practice Extraction Service (GPES), which has operated for over 10 years and now needs to be replaced.

NHS Digital has engaged with doctors, patients, data and governance experts to design a new approach to collect data from general practice that:

• reduces burden on GP practices
• explains clearly how data is used 
• supports processes that manage and enable lawful access to patient data to improve health and social care

Patient data collected from general practice is needed to support a wide variety of research and analysis to help run and improve health and care services. Whilst the data collected in other care settings such as hospitals is valuable in understanding and improving specific services, it is the patient data in general practice that helps us to understand whether the health and care system as a whole is working for patients.

In addition to replacing what GPES already does, the General Practice Data for Planning and Research service will also help to support the planning and commissioning of health and care services, the development of health and care policy, public health monitoring and interventions (including coronavirus (COVID-19) and enable many different areas of research, for example:

There is a lot about coronavirus that we do not know, including the long-term health impacts. Patient data from GP medical records will be very important in the coming months and years, as scientists analyse and understand the impact of the virus on human health.

For example, to understand how people of different ethnicities access healthcare and how the outcomes of particular groups compare to the rest of the population. This will help the NHS to assess healthcare inequalities and make any necessary changes to its services.

For example, patient data is being used by the University of Oxford RECOVERY trial, which has found ways to improve the treatment for people with coronavirus.

Researchers have previously used patient data from GP medical records to show that there was no association between the measles, mumps and rubella vaccine and the development of autism; to confirm the safety of the meningococcal group B vaccine; and to investigate whether certain medications increase the risk of cancer.

Data may be shared from the GP medical records about:

• any living patient registered at a GP practice in England when the collection started - this includes children and adults
• any patient who died after the collection starts and was previously registered at a GP practice in England

NHS Digital will not collect patients’ names or addresses. Any other data that could directly identify patients (such as NHS Number, date of birth, full postcode) is replaced with unique codes which are produced by de-identification software before the data is shared with NHS Digital.

This process is called pseudonymisation and means that patients will not be identified directly in the data. NHS Digital will be able to use the software to convert the unique codes back to data that could directly identify patients in certain circumstances, and where there is a valid legal reason.

We will collect structured and coded data from patient medical records.

If you don’t want your identifiable patient data to be shared for purposes except for your own care, you can opt-out by registering a Type 1 Opt-out or a National Data Opt-out, or both. These opt-outs are different and they are explained in more detail below. Your individual care will not be affected if you opt-out using either option.

If you register a Type 1 Opt-out after this collection has started, no more of your data will be shared with us.

If you do not want NHS Digital to share your identifiable patient data with anyone else for purposes beyond your own care, then you can also register a National Data Opt-out.

National Data Opt-out (opting out of NHS Digital sharing your data)

We will collect data from GP medical records about patients who have registered a National Data Opt-out. The National Data Opt-out applies to identifiable patient data about your health, which is called confidential patient information.

NHS Digital won’t share any confidential patient information about you - this includes GP data, or other data we hold, such as hospital data - with other organisations, unless there is an exemption to this.

To find out more information and how to register a National Data Opt-Out, please read our GP Data for Planning and Research Transparency Notice.

NHS Digital has a strict and well-established process for providing access to data for external organisations. You can read about this in how NHS Digital makes decisions about data access.

NHS Digital collects, analyses, publishes and shares health and care data safely, securely and appropriately as part of our statutory functions.

Data which is shared by NHS Digital is subject to robust rules relating to privacy, security and confidentiality. Organisations using this data must have a clear legal basis to do so for health and care purposes and only the minimum amount of data needed to meet the specific purpose will be made available.

Data will only be made available in response to appropriate requests from organisations which are approved following independent scrutiny by our Independent Group Advising on the Release of Data.

More information about how and why NHS Digital will share data from GP practices is available in our General Practice Data for Planning and Research Transparency Notice. We also publish information about the data that we share in our data release register.

More information for patients and the public about how NHS Digital is processing GP data to support health and care, including our legal basis and your choices can be found in NHS Digital's GP Data for Planning and Research Transparency Notice. 

Update your patient privacy information

GP practices have a legal duty to be transparent and to provide patients with information under the UK General Data Protection Regulation (GDPR) about the data they are sharing with others.

To help GP practices provide information about the General Practice Data for Planning and Research data collection, NHS Digital has produced a GP Practice Privacy Notice which GPs can add as a link to their current privacy notice by publishing the following statement and link on your website:

GP practices may also wish to include information about this collection in regular communications to inform patients about the new data collections including newsletters, Facebook groups and waiting room screens. We have created a helpful animation for patients that explains what data is being collected and why which you can also link to. You can also access a downloadable poster.

Registering Type 1 Opt-outs

You will need to register Type 1 Opt-outs (or a withdrawal of the Type 1 Opt-out) in your system. The codes you need to use to register or withdraw the Type 1 Opt-out are:

Other GP data flows

NHS Digital will work with other organisations to enable transition from existing data flows to the new NHS Digital General Practice for Planning and Research Service in order to reduce the number of GP data flows currently in existence.

In the meantime, GP practices should continue to support existing data flows and can accept new requests to participate in existing data collections where they consider it safe, legal and beneficial to the health and care of patients.