Skip to main content

Digital

Data Services for Commissioners Regional Offices (DSCRO) - Faster Data Flows Acute Data Set: GDPR information

Summary

Why and how we process your data in the Data Services for Commissioners Regional Offices (DSCRO) - Faster Data Flows Acute Data Set and your rights.

Controller NHS Digital
How we use the information (processing activities)

To accelerate recovery of elective waiting lists and waiting times, and to deliver the best quality care and outcomes for patients, there is a need for timely, highly quality data that can be accessed and owned throughout the whole national to local delivery chain and across the whole patient pathway (Primary Care through to Discharge). 

There is a need to support elective recovery and individual care coordination which the ICBs are accountable for, whilst reducing the data collection burden on providers. 

This will be achieved through the implementation of daily data flows into a product that supports the ability to link data sets and provide tools back to providers and accountable organisations. 

The new daily collection will include identifiable patient level activity about admissions, inpatient care, discharges and outpatient appointments from acute trusts in England. Anonymous data will be shared back with trusts via a dashboard, allowing them to identify issues that could be adversely affecting the recovery programme such as bed blocking, increases to delayed transfers of care, delays with diagnosis and bottlenecks with outpatient care. 

Whilst similar data is already collected weekly and monthly from trusts, it is only disseminated back to commissioners on a monthly basis and there is often a two-month delay, meaning there is too much of a delay in between the data being collected and being shared with the commissioners to make it useful for operational decision making.

Deliverables:

  • implementing a new innovative daily collection of core data items
  • utilise functionality within the NHS Data Platform to collect data and provide outputs
  • reduce the reporting burden on providers by scaling down the current daily SITREPS
  • establish the foundations to build more efficient and effective data collections to support operations and planning across the system
  • provide tools/dashboards to support collaborative working for local care planning
Does this contain sensitive (special category) data such as health information? Yes
Who are recipients of this data?

NHS England
Is data transferred outside the UK? This data is not transferred out of the UK
Your rights
  • Tick Be informed
  • Tick Get access to it
  • Tick Rectify or change it
  • Cross Erase or remove it
  • Tick Restrict or stop processing it
  • Cross Move, copy or transfer it
  • Cross Object to it being processed or used
  • Cross Know if a decision was made by a computer rather than a person
How can you withdraw your consent?

Consent is not the basis for processing.
Is the data subject to decisions made solely by computers? (automated decision making) No
Where does this data come from? This data will come from acute care providers (trusts).
The legal basis for collecting this data

GDPR Article 6(1)(c) - legal obligation (the Direction issued under HSCA section 254 is a legal obligation on NHSD to collect such information from Acute Trusts as is necessary to meet the Data Services for Commissioners Directions 2015.

GDPR Article 9(2)(h) – healthcare purposes, plus Part 1 Sched 1 DPA18, para 2 health or social care purpose.

DPA 2018 Schedule 1 Part 2 para 6(2)(a) - NHSD may process what is necessary to enable it to comply with an enactment - such as the Direction issued under HSCA section 254.

Common Law Duty of Confidentiality satisfied - under HSCA section 254, The Secretary of State may Direct to collect data including confidential information, with which NHS Digital must comply.

The Direction provides a defence to a breach of confidentiality claim.