How the CCG uses your information

on . Posted in Fair processing notice

There may be times when we need to hold and use certain information about you, for example:

  • if we are involved in helping you to resolve a complaint with your GP or other NHS serviceprovider;
  • if we fund specialised treatment for you for a particular health condition that is not covered in our localcontracts;
  • if you are a member of our patient participation group, or have asked us to keep you up to date about our work and involved in our engagement and publicconsultations,

The information we hold about you personally will therefore be with your knowledge and consent.

There may be times when we need to hold and use certain information for purposes such as:

  • determining the general health needs of thepopulation
  • ensuring that our services meet future patientneeds
  • teaching and training healthcareprofessionals
  • investigating complaints, legal claims,etc.
  • conducting health research anddevelopment.
  • preparing statistics on NHSperformance
  • auditing NHS accounts andservice
  • paying your health careprovider

If you do have any concerns about us holding your personal information, then please tell us and we can explain the way this may affect our ability to help and discuss alternative arrangements available to you.

All information held by the CCG is governed by the CCG’s information lifecycle management policy and is held, retained and destroyed in line with the Records Management Code of Practice for Health and Social Care (see link under further information below).

Invoice validation

Invoice validation is an important process. It involves using your NHS number to check that we are the CCG that is responsible for paying for your treatment. We can also use your NHS number to check whether your care has been funded through specialist commissioning, which NHS England will pay for. The process makes sure that the organisations providing your care are paidcorrectly.

There is currently s251 support in place for the CCG to be able to receive personal data to enable this work to take place.

Risk stratification

Risk stratification is a process GPs use to help them to identify and support patients with long-term conditions and to help prevent un-planned hospital admissions or reduce the risk of certain diseases developing such as type 2 diabetes. This is called risk stratification for case-finding.

The CCG also uses risk stratified data to understand the health needs of the local population in order to plan and commission the right services. This is called risk stratification for commissioning.

Risk stratification tools use historic information about patients, such as age, gender, diagnoses and patterns of hospital attendance and admission collected by NHS Digital from NHS hospitals and community care services. This is linked to data collected in GP practices and analysed to produce a risk score.

There is currently s251 support in place for the CCG to be able to receive data with the NHS Number as an identifier from both NHS DIGITAL and your GP Practice to enable this work to take place. The Data is sent directly into a risk stratification tool from NHS Digital/GP Practices to enable the data to be linked and processed as described above. Once the data is within the tool CCG staff only have access to anonymised or aggregated data.

GPs are able to identify individual patients from the risk stratified data when it is necessary discuss the outcome and consider preventative care. Where the risk stratification process has

linked GP data to health data obtained from other sources i.e. NHS Digital or other health care provider, the GP will ask for your permission to access the details of that information

How we use information provided by NHS Digital

We use information collected by NHS Digital from healthcare providers such as hospitals, community services and GPs, which includes information about the patients who have received care and treatment from the services that we fund.

The data we receive does not include patients’ names or home addresses, but it may include information such as your NHS number, partial postcode (first 4 digits only), age, ethnicity and gender as well as coded information about your visits to clinics, Emergency Department, hospital admissions and other NHS services.

The Secretary of State for Health has given limited permission for us (and other NHS commissioners) to use certain confidential patient information when it is necessary for our work and whilst changes are made to our systems that ensure de-identified information is used for all purposes other than direct care. This approval is given under Regulations made under Section 251 of the NHS Act 2006 and is based on the advice of the Health Research.

Authority’s Confidentiality and Advisory Group.

In order to use this data, we have to meet strict conditions that we are legally required to follow, which includes making a written commitment to the NHS DIGITAL that we will not use information in any way that would reveal your identity. These terms and conditions can be found on the NHS DIGITAL website.

Within Essex, the 7 Clinical Commissioning Groups work collaboratively to assess the need for services, and to work together in procuring, negotiating and managing contracts with Hospitals, Mental Health Providers and Community Health Providers. This collaboration is known locally as a Host and Associate Agreement and requires the Host CCG to receive data, including your NHS Number or postcode, but never both, as well as coded information about your visits to clinics, Emergency Departments, hospital admissions and other NHS

services. The information that is shared between the CCGs is governed by the regulations under section 251 mentioned above.

For further information, please see the contact us section.