The Data Protection Act 1998 requires organisations to process personal data fairly and lawfully. The methods by which these processes are governed and explained to patients are known as ‘fair processing’.
University College London Hospitals (UCLH) is working on a project with Wilmington Healthcare to use England Hospital Episode Statistics (HES) data to identify episodes which have been coded with combinations of ICD-10 codes that suggest clinical features compatible with a diagnosis of Niemann-Pick Type C (NPC)[i]. HES data from NHS Digital will be used to identify individual patients and to contact the physicians looking after them in order to suggest the potential diagnosis of NPC and propose suitable diagnostic testing.
This project is funded by Actelion Pharmaceuticals Ltd. University College London Hospitals (UCLH) will act as the data controller, with Wilmington Healthcare providing analytical support as the Data Processor.
What data will be shared?
As part of this project, the Local Patient Identifier (from the HES dataset) will be supplied to UCLH from NHS Digital (with Wilmington Healthcare providing analytical support). Although this data is identifiable neither Wilmington Healthcare nor UCLH will be able to identify individual patients. Wilmington Healthcare will be passing the local patient ID to the clinician (identified and validated using their General Medical Council number) that has the legitimate relationship with the patient, and they will be able to access their data locally. Therefore, patient identification is only taking place by the treating clinician, at the NHS trust responsible for the patient’s care.
The legal basis for the flow of identifiable data between NHS Digital, UCLH, Wilmington Healthcare and the NHS trust for the treating clinician is the National Health Service Act 2006 – section 251 [ii]– ‘Control of patient information’ and the Health and Social Care Act 2012 section 261(7).
How will data be shared?
Processing Activities for the project
The above steps are the only data processing steps required for this project.
Data security and permissions
UCLH is acting as the data controller for the duration of this project. At the conclusion of the project, the data will be securely destroyed in line with NHS Digital’s Destruction and Disposal of Sensitive Data Good Practice Guidelines (which can be found here)
Any patient wishing to opt out of data sharing/linkage as part of this project can do so by writing to Wilmington Healthcare. You will need to supply your Local Patient Identifier in order for the opt-out request to be processed.
For further information please contact firstname.lastname@example.org or call 01268 495600.
[i] Niemann-Pick C is a rare neuro-visceral lipid storage disorder which causes progressive neurological disease. The best recognised form of the disease starts in childhood and usually results in death in the late second or third decade from aspiration pneumonia. However, there are also many patients who have ‘attenuated’ forms of the disease which present later in life with some atypical clinical features and slow progression.
[ii] Section 251 of the NHS Act 2006 allows the common law duty of confidentiality to be set aside in specific circumstances where anonymised information is not sufficient and where patient consent is not practicable.
Fill in this form and we aim to respond to your enquiry as soon as we can.