Transparency statement for EDDI patients

The Emergency Department Digital Integration (EDDI) product will enable NHS 111 providers to give patients a time slot to attend an emergency department/urgent treatment centre/same-day emergency care service.

The system will allow the emergency department/urgent treatment centre/same-day emergency care service to control their capacity and monitor the number of patients arriving at a certain time.

The EDDI product is a web-based platform that can be accessed via any modern web browser.

Patient information, including the clinical triage, will be sent via NHS 111 ITK CDA referral messages to the EDDI from 111 telephone and online systems.

Find out more about how it works.

NHS Digital is a controller for the collection and dissemination of the data to provide the EDDI product.  The legal basis for processing personal data to operate this system is:

• GDPR Article 6(1)(c) - the processing is necessary for a legal obligation because we have been directed to process personal data for COVID-19 purposes.  

The legal basis for processing personal data related to health (special category data) is:

• GDPR Article 9(2)(g) – substantial public interest and DPA 2018 - Schedule 1, Part 2, para 6 (Statutory and government purposes)
• GDPR Article 9(2)(h) – health or social care purposes and DPA 2018 – Schedule 1, Part 1, (2) (2) (f) – Health or social care purposes

We collect personal demographic data and clinical information from the 111 call or website referral and this will be made available to authorised staff to view within EDDI, or to be downloaded to allow its addition to their clinical system.

NHS Digital is responsible for the provision of EDDI and will collect and analyse personal data and clinical content for the purposes of ensuring the system meets the needs of the service.

We obtain your data from 111 providers (by telephone and/or 111 online) when you chose to be referred to an emergency department/urgent treatment centre/same-day emergency care service (ED/UTC/SDEC).

NHS Digital will transfer your contact details and symptoms to the emergency department/urgent treatment centre/same-day emergency care service where you have been given a booking slot.

The ED/UTC/SDEC service are also a controller and may download that information to their clinical systems to deliver your care and for their own records.

NHS Digital will also share anonymous aggregated data on how the service is used with the receiving healthcare provider (ED/UTC/SDEC), NHS X and NHS England/Improvement to enable them to monitor service utilisation. 

We will share your information with the relevant emergency department/urgent treatment centre/same-day emergency care service, and we will keep details of this for audit purposes for 8 years from that date.

This is the time period recommended for keeping standard care records under the Records Management Code of Practice for Health and Social Care 2016. 

NHS Digital only stores and processes your personal data within the UK.

Under data protection law, you have a number of rights including the right to:

• be informed about how your data is being processed
• access what data is held about you
• have inaccurate data rectified
• restrict the processing

You also have the right to complain to the Information Commissioners Office if you are unhappy with how your personal data is processed.

We may make changes to this transparency notice. If we do, the Last updated date on this page will also change.

Any changes to this notice will apply immediately from the date of any change.