Skip to main content

Transparency statement for EDDI patients

Our Emergency Department Digital Integration (EDDI) transparency notice explains why the service collects data, what we do with it, how long we keep it for and where it's stored.

Our purposes for processing personal data

The Emergency Department Digital Integration (EDDI) product will enable NHS 111 providers to give patients a time slot to attend an emergency department. 

The system will allow the emergency department to control their capacity and monitor the number of patients arriving at a certain time.

The EDDI product is a web-based platform that can be accessed via any modern web browser.

Patient information, including the clinical triage, will be sent via NHS 111 ITK CDA referral messages to the EDDI from 111 telephone and online systems.

Find out more about how it works.

Legal basis for processing personal data

NHS Digital is a controller for the collection and dissemination of the data to provide the EDDI product.  The legal basis for processing personal data to operate this system is:

  • GDPR Article 6(1)(c) - the processing is necessary for a legal obligation because we have been directed to process personal data for COVID-19 purposes.  

The legal basis for processing personal data related to health (special category data) is:

  • GDPR Article 9(2)(g) – substantial public interest and DPA 2018 - Schedule 1, Part 2, para 6 (Statutory and government purposes)
  • GDPR Article 9(2)(h) – health or social care purposes and DPA 2018 – Schedule 1, Part 1, (2) (2) (f) – Health or social care purposes

Types of personal data we process

We collect personal demographic data and clinical information from the 111 call or website referral and this will be made available to authorised emergency department staff to view within EDDI, or to be downloaded to allow its addition to their clinical system.

NHS Digital is responsible for the provision of EDDI and will collect and analyse personal data and clinical content for the purposes of ensuring the system meets the needs of the service.

How we obtain your personal data

We obtain your data from 111 providers (by telephone and/or 111 online) when you chose to be referred to an emergency department/urgent treatment centre (ED/UTC).

Who we share your personal data with

NHS Digital will transfer your contact details and symptoms to the emergency department/urgent treatment centre where you have been given a booking slot.

The ED/UTC are also a controller and may download that information to their clinical systems to deliver your care and for their own records.

NHS Digital will also share anonymous aggregated data on how the service is used with NHS X and NHS England/Improvement to enable them to monitor service utilisation. 

How long we keep your personal data for

We will share your information with the relevant emergency department/urgent treatment centre and we will keep details of this for audit purposes for 8 years from that date.

This is the time perioded recommended for keeping standard care records under the Records Management Code of Practice for Health and Social Care 2016. 

Where we store the data

NHS Digital only stores and processes your personal data within the UK.

Your rights over your personal data

Under data protection law, you have a number of rights including the right to:

  • be informed about how your data is being processed
  • access what data is held about you
  • have inaccurate data rectified
  • restrict the processing

You also have the right to complain to the Information Commissioners Office if you are unhappy with how your personal data is processed.

Changes to this notice

We may make changes to this transparency notice. If we do, the Last updated date on this page will also change.

Any changes to this notice will apply immediately from the date of any change.

Last edited: 12 February 2021 11:34 am