The PDS access request process covers:
- the legal basis for organisations accessing PDS data
- PDS access methods
- secure network connections
- access request process
The PDS access request process covers:
NHS Digital can only release data to other organisations, either public or private, where there is a legal basis to do so. This legal basis is determined by the purpose for which the data is required. If the purpose is for the delivery of care to patients by care providers, for example, then there is a clear legal basis.
For any purpose other than direct care, the legal basis must be established by reference to the Health and Social Care Act 2012.
The legal basis is primarily concerned with requests for tracing access to the PDS that is for direct care in organisations that already have a service relationship with an individual, and hold identifying information about them that they wish to validate or update. Requests for other purposes, with different legal bases, will require detailed scrutiny.
The PDS is the national electronic database of NHS patient demographic data, such as name, address, date of birth and NHS number. It supports quick and accurate identification of a patient, contact and communication with a patient, and linkage of data and records across care settings and information systems.
The main purpose of the PDS is to support direct care, although data may also be supplied for secondary uses.
The PDS access methods are:
The original way to integrate healthcare software with PDS. It requires a secure network connection and smartcards, and has a fairly long onboarding process.
For more details, see Personal Demographics Service - HL7 V3 API.
The PDS Spine Mini Service Provider is a simple PDS trace API with exact matches only being returned and updates not allowed. It requires a secure network connection but does not require smartcards. It has a simpler integration and onboarding process than the HL7 V3 API.
This API is the simplest way to integrate healthcare software with PDS. It follows the FHIR (Fast Healthcare Interoperability Resources) standard. It is available on the internet, although you do need a secure network connection to use it with smartcards.
It is a work in progress. For more details see Personal Demographics Service - FHIR API.
Provides online real time access and update capability through a web portal application. It requires a secure network connection and smartcards.
The Demographics Batch Service (DBS) is an offline service that provides a simple PDS batch trace capability with exact matches only being returned. It requires a secure network connection and installation of DBS software locally.
The DBS Bureau (DBSB) service is operated by the PDS National Back Office (NBO) facilitating use of DBS by non-Spine integrated NHS and non-NHS organisations. It requires a secure email capability for the exchange of data, such as NHSmail or GSI.
The NBO Tracing Service provides a range of different tracing services operating under specific legislation for NHS and non-NHS organisations. Requires secure email capability for the exchange of data.
The different types of secure network connection are:
Organisations applying for access to PDS data will need to provide:
Requesting organisations are reminded of the following obligations:
Requests may be referred to NHS Digital IG and/or legal teams, and the Independent Group Advising on the Release of Data (IGARD) for consideration, especially if the application is in any way novel, or appears to be for analytics purposes.
Once a request has been approved and communicated with the requesting organisation, it will be passed to the appropriate area within NHS Digital which will then manage the technical assurance and operational access requirements for the chosen access method(s).
To request a copy, send an email to email@example.com, with 'PDS Access Request - ORGANISATION NAME' in the subject line. Ideally, also give an overview of the purpose for accessing the PDS.