Our Emergency Department Digital Integration (EDDI) transparency notice explains why the service collects data, what we do with it, how long we keep it for and where it's stored.
Our purposes for processing personal data
The Emergency Department Digital Integration (EDDI) product will enable NHS 111 providers to give patients a time slot to attend an emergency department/urgent treatment centre/same-day emergency care service.
The system will allow the emergency department/urgent treatment centre/same-day emergency care service to control their capacity and monitor the number of patients arriving at a certain time.
The EDDI product is a web-based platform that can be accessed via any modern web browser.
Patient information, including the clinical triage, will be sent via NHS 111 ITK CDA referral messages to the EDDI from 111 telephone and online systems.
NHS Digital is a controller for the collection and dissemination of the data to provide the EDDI product. The legal basis for processing personal data to operate this system is:
GDPR Article 6(1)(c) - the processing is necessary for a legal obligation because we have been directed to process personal data for COVID-19 purposes.
The legal basis for processing personal data related to health (special category data) is:
GDPR Article 9(2)(g) – substantial public interest and DPA 2018 - Schedule 1, Part 2, para 6 (Statutory and government purposes)
GDPR Article 9(2)(h) – health or social care purposes and DPA 2018 – Schedule 1, Part 1, (2) (2) (f) – Health or social care purposes
Types of personal data we process
We collect personal demographic data and clinical information from the 111 call or website referral and this will be made available to authorised staff to view within EDDI, or to be downloaded to allow its addition to their clinical system.
NHS Digital is responsible for the provision of EDDI and will collect and analyse personal data and clinical content for the purposes of ensuring the system meets the needs of the service.
How we obtain your personal data
We obtain your data from 111 providers (by telephone and/or 111 online) when you chose to be referred to an emergency department/urgent treatment centre/same-day emergency care service (ED/UTC/SDEC).
Who we share your personal data with
NHS Digital will transfer your contact details and symptoms to the emergency department/urgent treatment centre/same-day emergency care service where you have been given a booking slot.
The ED/UTC/SDEC service are also a controller and may download that information to their clinical systems to deliver your care and for their own records.
NHS Digital will also share anonymous aggregated data on how the service is used with the receiving healthcare provider (ED/UTC/SDEC), NHS X and NHS England/Improvement to enable them to monitor service utilisation.
How long we keep your personal data for
We will share your information with the relevant emergency department/urgent treatment centre/same-day emergency care service, and we will keep details of this for audit purposes for 8 years from that date.
This is the time period recommended for keeping standard care records under the Records Management Code of Practice for Health and Social Care 2016.
Where we store the data
NHS Digital only stores and processes your personal data within the UK.
Your rights over your personal data
Under data protection law, you have a number of rights including the right to:
be informed about how your data is being processed