Empowering everyone to live well, through joined-up, proactive, data driven health and care
There are many reasons why we become unwell. A prescription from a GP can be the answer to a problem, but sometimes there are other factors at play – it might be a matter of where someone lives, the work they are doing or their educational experience, their lifestyle and health behaviours, or their experience of the health and care system.
We want everyone in Herefordshire and Worcestershire to have equal opportunities to live and enjoy the best, healthiest life they can. To work towards this, our local health and care organisations – including the NHS and our Local Authorities - have been working together to change the way we understand and respond to our population’s needs, and to change how we manage our resources to better support people. This is called ‘Population Health Management’.
Population Health Management
People are living longer, but many face more years with health problems. It’s also common to have two or more long-term health conditions. Our health is shaped by so much more than medical issues – it’s influenced by where we live, the work we do, the education we receive, the relationships we build, and the opportunities we have to thrive.
What is population health management?
Population health management is a way to understand the health and care needs of different groups of people. It helps us work together to provide the right support at the right time, reducing health problems before they happen and improving care for those who need it most. It focuses on making life better for communities while reducing unfair differences in health outcomes.
How it’s done
Population health management begins by bringing together information from local health and care services so that we can better understand the needs of our communities. This helps us spot patterns, identify risks, and create more effective services and support. This could mean anything from better medical care to support with housing or employment, which also affect health.
Population health management focuses on:
• Understanding groups: Breaking down the population into groups based on their needs.
• Prioritising support: Identifying those most at risk and focusing on them first.
• Targeted actions: Using insights to design personalised care and interventions to prevent illness and support ongoing health needs.
This approach ensures that care is proactive, tailored to the people who need it most, and helps reduce health inequalities, providing fairer, better healthcare for everyone.
Risk stratification
Risk stratification is a process of identifying people who may be at higher risk of health issues, allowing healthcare providers to focus on those who need extra support or preventive care.
Preventing people from becoming ill or developing more serious health issues is critical. It saves lives by catching potential health issues early, often before they become serious. Proactive measures are not only more effective but can also reduce the need for costly treatment after a condition has developed.
Analysing data to predict which patients may face health complications or deteriorating health allows healthcare professionals to prioritise support for the most vulnerable populations. For example, if data shows certain patients are at higher risk for chronic conditions, they can receive more frequent check-ups, lifestyle guidance, and personalised care plans.
This approach helps prevent hospitalisations and emergencies, improving patient outcomes and reducing strain on healthcare services. Risk stratification helps the NHS and care providers prioritise those at highest risk, ensuring resources are used effectively to support a healthier population and a more sustainable healthcare system.
How it works
Risk stratification uses advanced algorithms and data analysis to evaluate patient data and identify those at higher risk for conditions such as diabetes, heart disease, and respiratory issues.
To conduct risk stratification, national datasets are linked with GP data using the NHS Number and an algorithm is applied to produce risk scores. Risk stratification provides focus for future demands by enabling commissioners to prepare plans for both individual and groups of vulnerable patients who may require elevated levels of care.
Risk stratification helps GPs focus interventions on patients who may need extra support. Using a tool called Magentus, which uses advanced predictive data analysis, GPs and NHS Herefordshire and Worcestershire ICB can identify groups of patients at higher right and plan targeted interventions in primary care.
Patient data is initially de-identified to protect privacy, but it can be re-identified by the patient’s GP practice if needed for direct care. NHS Herefordshire and Worcestershire ICB ensures this process complies with all legal and ethical standards, safeguarding patient confidentiality while allowing for informed clinical decision-making.
What we aim to achieve
The primary goal of effective risk stratification is to create a more focused and proactive approach to patient care, particularly for people who are identified as high-risk. These people receive tailored interventions aimed at preventing serious health events and issues, such as hospital admissions or complications arising from chronic conditions.
This proactive approach not only improves individual patient outcomes but also leads to a more efficient allocation of NHS resources. By focusing on prevention rather than reactive treatment, NHS Herefordshire and Worcestershire can ensure that care is delivered to those who need it most, ultimately contributing to the overall health of the population and the sustainability of NHS services. Additionally, insights from risk stratification enable continuous improvements in care delivery, helping to address and reduce health inequalities across the community.
Sub-licensing
Sub-licensing is the process by which NHS Herefordshire and Worcestershire ICB securely shares de-identified information with partner organisations in Herefordshire and Worcestershire ICS. This includes data from national health datasets, local service data (such as ambulance and 111 services), and GP records.
Access to linked data from NHS and social care providers is essential for a full understanding of patient needs and service gaps, especially since health inequalities can vary widely between communities. This enables our partners to work together more effectively to improve services across Herefordshire and Worcestershire.
By sharing de-identified data, NHS Herefordshire and Worcestershire allows partners to use the same information for service planning, improving care coordination, and addressing public health issues in a more joined-up way. Sub-licensing also ensures that smaller organisations, like local councils or voluntary groups, have access to important insights without directly handling sensitive patient data.
Ultimately, this process leads to a more joined-up and efficient health and social care system that can better allocate resources and improve patient outcomes.
How the process works
Sub-licensing will be managed through formal data-sharing agreements with partner organisations, which adhere to strict legal and ethical guidelines to protect individual privacy and confidentiality.
• Data sharing agreements: Partner organisations requesting data under sub-licensing must meet certain conditions. This includes maintaining current registration with the Information Commissioner’s Office, completing an annual Data Security and Protection Toolkit to required standards, and providing fair processing and transparency information to their service users regarding data use.
• Pseudonymisation: To safeguard personal information, all data is pseudonymised, meaning any identifiers (like names or addresses) are replaced with anonymous codes.
• Oversight and compliance: NHS Herefordshire and Worcestershire ICB will oversee the data-sharing process to ensure compliance with the NHS England Data Sharing Framework, the Data Protection Act 2018, and all relevant data protection regulations. This includes establishing clear protocols for data access and use.
• Application process: Partner organisations seeking access to patient-level de-identified datasets must apply to NHS Herefordshire and Worcestershire ICB. The application should outline:
- The specific data needed
- Patient groups (or cohorts) to be included
- The purpose of the data use and the justification for why this data is necessary
• Approval by sub-licensing board: All applications are reviewed by a sub-licensing board, which includes our Caldicott Guarian. More information here: Caldicott Guardian.
• Ongoing monitoring: We will conduct regular audits and assessments to verify compliance with data-sharing guidelines and evaluate the effectiveness of these arrangements.
Expected outcomes
Sub-licensing in Herefordshire and Worcestershire is expected to bring significant benefits, including:
• More joined-up care: Improved collaboration among health and social care providers, resulting in better coordinated, and more timely care for patients.
• Better allocation of resources: Data insights enable more informed decisions on where resources are most needed, ensuring targeted support for communities.
• Data-driven service improvements: Access to linked data allows partners to plan services based on evidence, helping to address service gaps and enhance quality of care.
• Reduced health inequalities: Identifying and addressing health inequalities supports targeted interventions for underserved populations.
• Empowered community partners: Local councils and voluntary organisations can use insights to participate more actively in health initiatives, ensuring community needs are considered.
• Accountability and transparency: Regular audits and strict data-sharing guidelines foster trust and demonstrate responsible data use.
Improved patient outcomes: Overall, the combined efforts of collaboration, targeted resources, and evidence-based planning will lead to better health outcomes for patients across Herefordshire and Worcestershire.
About your health data
Health data is essential for the NHS to provide high-quality, responsive care that meets the needs of our communities. At NHS Herefordshire and Worcestershire ICB, we work collaboratively with local NHS providers, councils, social care providers and community groups, ensuring that data is used responsibly.
Every piece of health data we collect – whether it’s about a visit to a GP, treatments, or broader health trends – contributes to a clearer picture of the challenges and needs in our local area. This insight enables us to address healthcare inequalities, improve the quality of services, and plan for future needs, ensuring that resources are directed where they’re most needed.
This page explains how and why we collect, use, and protect your health data.
Your privacy
Our privacy notice explains in detail what information we collect, how we use it, and who can access it. It includes information about the data collected directly from you or shared with us by other organisations. Our privacy notice is reviewed regularly to maintain transparency.
NHS Herefordshire and Worcestershire ICB is committed to protecting your privacy. We process all personal information in line with the Data Protection Act 2018, UK GDPR, the common law duty of confidentiality, and the Human Rights Act 1998.
Why we collect information
If you are receiving care from the NHS, we collect and use your health data (paper and electronic) to support your care and improve NHS services.
Data used for your care
We use your data directly to provide and support your individual care. This includes:
• Delivering effective treatment and monitoring the quality of care to ensure the best outcomes.
• Helping you make informed decisions about your health.
Secondary use of data
Beyond individual care, we also use health data to enhance services across the NHS and protect public health. This includes:
• Commissioning: Planning and designing the services needed in our area.
• Population health management: Analysing health and demographic data to address local health needs and inequalities.
• Risk stratification: Identifying people who may benefit from targeted care, ensuring resources reach those most at risk.
• Research: Supporting clinical research and developing new treatments in partnership with trusted organisations.
• Investigating and resolving complaints to uphold quality and service standards.
• Protecting public health and managing NHS resources responsibly.
By using your data responsibly, we can allocate resources effectively, improve patient care, and help the NHS plan for future needs.
The legal basis behind using your data
The Data Protection Act 2018 and the UK GDPR is the main piece of legislation governing the way organisation can use identifiable data about individuals. Under this legislation, there are a range of legal basis under which organisations can justify their processing of information.
For all the purposes for which NHS Herefordshire and Worcestershire ICB would use your data, the legal basis under GDPR are:
• Article 6(1)(e) – processing is necessary for the performance of a task carried out in the exercise of official authority vested in the controller.
• Article 9(2)(h) – processing is necessary for the purposes of the provision of health or social care or treatment or the management of health or social care systems and services.
While not in the form of written legislation, the common law duty of confidentiality is a legal obligation that arises from case law and tradition. It requires the protection of private information in circumstances where there’s an expectation of privacy.
This means that when someone shares private information with another person or organisation, that information must be kept confidential unless the person gives permission for it to be shared. This duty applies in situations where there’s an expectation of privacy, like between a doctor and their patient, or a lawyer and their client.
There are a few exceptions where confidential information might be shared without permission. These include if there’s a legal requirement (like a court order), if it’s necessary to protect someone’s safety, or if the public interest outweighs the duty of confidentiality. But in general, the person or organisation receiving the information must protect it and not misuse or disclose it without good reason.
How we protect your data and your identity
Your privacy and data security are our priority. When we collect and use data, we take strong measures to protect your identity:
• De-identification (pseudonymisation): For most uses, we receive de-identified information, meaning any names, addresses, or personal identifiers are removed or replaced with anonymous codes. This process, known as pseudonymisation, ensures that individuals cannot be directly identified from the data we hold.
• Secure storage and access: We work closely with our data processors to store information securely, with strict access controls that allow only authorised personnel to view it. All personal information is encrypted to prevent unauthorised access.
• Limited use of identifiable data: If we ever need to use information that identifies you, we ensure a lawful basis for doing so and use it only when essential to complete a task.
• Data sharing restrictions: We never sell your information or share it with third parties for marketing without your explicit consent. Additionally, we do not transfer your data outside the UK unless the destination has legislation that protects your privacy.
Who we share information with
There must be a legal basis to share personal information. NHS Herefordshire and Worcestershire has signed sharing agreements with different partner organisations in Herefordshire and Worcestershire Integrated Care System, to enable services to run.
Choosing not to share your information
You are in control of how your NHS data is used for secondary purposes. We will not use your data for purposes outlined above if you have chosen to opt out.
There are various routes of opting out, each with different scope and outcomes.
Type 1 Opt-out
A Type 1 Opt-out will stop your data being shared by your GP practice. To do this you need to fill in an opt-out form and return it to your GP practice.
Only your GP practice can process your opt-out form. They will be able to tell you if, and when, you have been opted out.
If you choose a Type 1 Opt-out, your GP will not share your data for research and planning. However, NHS England will still be able to collect and share data from other healthcare providers, such as hospitals.
National Data Opt-out
The National Data Opt-out will stop NHS England, NHS Herefordshire and Worcestershire and other health and social care organisations from sharing your data for research and planning.
To do this you can either complete an online form, or contact via phone, email or post. All these options are available via the NHS.uk Manage Your Choice page. Click to access the page: Manage Your Choice
When your choice does not apply
If you choose to stop your confidential patient information being used for research and planning, your data might still be used in some situations:
• When required by law: If there’s a legal requirement to provide it, such as a court order.
• When you have given consent: If you have given your consent, such as for a medical research study.
• When there is an overriding public interest: In an emergency or in a situation when the safety of others is most important. For example, to help manage contagious diseases like COVID-19 and stop them spreading.
• When information that can identify you is removed: Information about your health care or treatment might still be used in research and planning if the information that can identify you is removed first.
• When there is a specific exclusion: Your confidential patient information can still be used in a small number of situations. For example, for official national statistics like a population census.
Data used for your care
If you choose to opt out of sharing your data for secondary purposes, your personal health information will still be used to make sure you get the treatment and care you need. For example, your data may be shared so that you can be referred to hospital or get a prescription.
Access to your information
You have the right to see or be given a copy of the personal data an organisation holds about you. This is known as a Subject Access Request. You can make a request to NHS Herefordshire and Worcestershire ICB.
Tell us your details, details of the records you would like and date ranges.
You have further rights under the UKGDPR. To find out more please see the privacy notice, or visit the Information Commissioners Office here: Information Commissioners Office website
Population Health Management
1. What is Population Health Management (PHM)?
Our health and care needs are changing, people are living longer in poorer health, with conditions like asthma, diabetes, heart disease and dementia, while our behaviours are increasing our risk of preventable disease.
We want to help healthcare professionals and public services:
- understand patient needs that might have been overlooked
- design better health services
- make better use of public resources
- prevent diseases
- predict future health issues
This is ‘Population Health Management’ (PHM).
Population Health Management uses patient information to identify local groups of people who have chronic illness or are at risk of ill-health, so that our health and care services can work together to improve the health outcomes of these groups.
2. How does PHM work?
Population health management brings together information from local health and care services so that we can understand the needs of our communities. This helps us to spot patterns, identify groups of people who may be at risk of becoming unwell, and design more effective services and support. This could include better medical care, or support with housing or employment, which can also affect health.
Population health management uses data to focus on:
- Understanding different groups: Sorting the population into groups based on their needs.
- Prioritising support: Identifying those who are most at risk of ill health and focusing on them first.
- Targeted actions: Using insights from the data analysis to design personalised care and interventions to prevent illness and provide ongoing support.
This approach ensures that care is proactive, tailored to the people who need it most, and health inequalities are reduced.
3. Who does this affect?
Anyone using the health and/or social care service in Herefordshire and Worcestershire will benefit from the PHM approach and be included in the analysis, unless they have opted out.
The main objective of PHM is to support the individual care of a specific population and enable new ways of working, with Primary Care Networks (PCNs) taking the lead in ensuring the wider health of their local population.
By taking this approach, we can manage the health needs of our local population and allocate resources designed to enable prevention of ill health, and best direct care where prevention is not possible.
4. What are the benefits of PHM?
The approach can help in multiple ways.
Some areas are using PHM to predict who is at risk of falls and emergency admissions to hospital. They have developed services to improve patients’ mobility and greatly reduce the risk of falls and proactively invite those at risk to attend those services.
Targeted support for communities with poorer outcomes - Reducing health inequalities means giving everyone the same opportunities to lead a healthy life, no matter where they live or who they are. Wider factors, such as poor housing, can have a significant impact on our health and life expectancy. PHM data analysis will enable the ICS to identify population groups experiencing poorer-than-average health access, experience and/or outcomes, and who would benefit from a tailored, inclusive healthcare approach.
Seeing the link between physical and mental health conditions - Many people living with Type 2 Diabetes also have other health conditions, such as depression, anxiety, and hypertension. These other conditions can make it more difficult for individuals to manage their diabetes. PHM data analysis enables health professionals in Herefordshire and Worcestershire ICS to identify the specific needs of individual patients/populations, to improve their quality and experience of care and their clinical outcomes.
Identifying and supporting people with poor housing and poor health - Housing is a key contributor to poor health. Adults and children who live in cold, damp housing may be more likely to develop respiratory problems in the future because their lungs are affected by the mould spores in their home. By jointly analysing health, social care and housing data and finding ‘at risk’ patients, enables social work professionals and wellbeing practitioners to connect with the right groups in the community to address the adverse influences on these people’s lives – offering support with completing housing application forms, helping them to find employment, offering nutritional advice and connecting them with social groups.
Managing unplanned admissions – PHM data analysis enables health professionals to proactively manage the health of their patients who are at high risk of experiencing unplanned hospital admissions. By intervening earlier and taking preventative action can avoid the development of long-term conditions and help to reduce unplanned hospital admissions.
Using data for purposes beyond individual care – Data which is anonymised (which means you can’t identify an individual) will help the ICS to plan and commission services for the people of Herefordshire and Worcestershire.
5. How will the PHM technical process work?
Data is collected about your care from the multiple organisations that have provided your care. This will include your GP practice, your hospital(s), ambulance, NHS 111 and out of hours services. It will also include mental health services, talking therapies, and adult social care. None of what you discuss in the privacy of your consultation is shared. Only coded, unidentifiable, non-sensitive data is shared.
The combined data is given a unique code (a pseudonym), and no identifiable information is shared. This is a two-stage process:
- A unique code is applied to your GP record by a company called Magentus. They are a company registered with NHS England to extract data from general practice systems
- To ensure that no one can identify who the personal data belongs to, a second stage is carried out by a very small team of staff employed by NHS England
This coded data is then shared with data analysts.
The coded data is used to select groups who may benefit from specific support, such as falls prevention or management of Diabetes etc. This information helps the teams who organise these services to plan and manage resources.
Specific groups are only ever re-identified by the same NHS England team to the clinician responsible for their care, at the request of the clinician.
6. Who will see my information and why?
Your personal health information will be given a unique code, so data analysts won’t be able to identify you as they will only see coded information.
If data analysts, working under the responsibility of clinical colleagues, see that your health information indicates that you might be at a higher risk of developing a disease, they will be able to inform your GP practice who will be able to request that your information is re-identified. This will mean that your GP can then contact you and discuss what preventative steps can be taken to minimise the chance of you developing the disease in the future.
7. What information will they be able to see?
Data analysts, who are working under the responsibility of health and social care professionals, will be able to see appropriate details contained in:
- coded information from your GP practice medical record
- coded information from secondary care, including hospitals
- coded information from your social care record
- coded information from mental health teams and community services
- coded information from the ambulance service, 999, NHS 111 and out of hours services
8. Is my information safe?
Yes - there are strict rules around how we use your information. We’ll make sure it’s managed and viewed appropriately and in line with all legal requirements, including UK data protection legislation (UK GDPR and DPA 2018). Official inspections, or audits, will check this is the case.
9. Which organisations are involved in the PHM programme?
- GP practices in Herefordshire and Worcestershire
- Herefordshire and Worcestershire Health and Care NHS Trust
- Wye Valley NHS Trust
- Worcestershire Acute Hospitals NHS Trust
- Worcestershire County Council – Social Care
- Herefordshire Council – Social Care
- NHS Midlands and Lancashire CSU (MLCSU)
- Herefordshire and Worcestershire ICB
- West Midlands Ambulance Service
- DHU Healthcare
- Malling Health
- Practice Plus Group
- Taurus Healthcare
10. What is the lawful bases for processing personal data which PHM relies on?
We take the sharing of confidential patient information extremely seriously.
There are several legislative frameworks that allow us to collect and share information and the lawful basis is detailed below:
• Article 6(1) (e) - processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
• Article 9 (2) (h) - processing is necessary for the purposes of preventive or occupational medicine, for the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services.
• DPA 2018 Provision: The processing meets the following provisions set out in Part 1, Schedule 1 (2) of the 2018 Act:
• Health or social care purposes means the purposes of:
a) preventive or occupational medicine
b) medical diagnosis
c) the provision of health care or treatment
d) the provision of social care, or the management of healthcare systems or services or social care systems or services.
11. Should analysts have access to personal data concerning health?
Yes.
The obligation of professional secrecy under section 11(1) of the 2018 Data Protection Act, makes provision for analysts working under the responsibility of registered health or social work professionals to have access to health/social care data to:
• stratify and segment data concerning health into specific population cohorts of patients, and to enable health professionals to intervene earlier by identifying and providing targeted support to patients who are at high-risk of experiencing frailty, poorer health outcomes, and long-term health conditions, such as hypertension, atrial fibrillation, high cholesterol, diabetes, asthma and COPD.
12. Can data that was originally collected for direct/individual care purposes be used for purposes beyond direct care when pseudonymised?
Yes.
The principles of data protection only apply to any information concerning an identified or identifiable living individual. Where personal data is pseudonymised, the principles of data protection legislation do not apply to personal data (see recital 26 of UK GDPR) which is rendered anonymous. Pseudonymised data can therefore be used for purposes beyond direct care (e.g research and planning).
13. What is pseudonymisation of data?
Pseudonymising data protects patients’ privacy, while allowing useful data analysis.
Pseudonymisation is a process which involves using an algorithm to replace personal information in data with a pseudonym, so that individuals cannot be directly identified.
For PHM, the NHS number is replaced with another random number, but that number is unique to the individual so that it is possible to make sense of the care provided to that individual by multiple organisations. All other identifiers, such as name, address, date of birth, are removed from the data.
Pseudonyms do not contain any information which could identify the individual, such as characters from their date of birth. The pseudonymisation keys (which allow the re-identification of an individual) are held by the NHS England team and are not accessible to anyone else.
Pseudonymised data can be restored to its original state with the addition of information which allows individuals to be re-identified. In Herefordshire and Worcestershire, this re-identification process will only be done at the request of a GP by the NHS England team that carried out the pseudonymisation in the first place.
14. What steps are taken to ensure the quality of the data?
All partners have effective data quality management processes in place, so that data provided from source systems is accurate and ready for processing.
Each partner organisation will:
- Take all reasonable steps to ensure the quality and accuracy of data in its system(s) (with "accuracy" meaning that the data is correct, complete and up-to-date) which it is sharing, and have in place appropriate systems to update any information if it is subsequently discovered to be inaccurate.
15. What happens to anything in my record that might be sensitive?
There are some pieces of information that won’t be available to view, such as visits to sexual health clinics, any fertility treatment records, and gender reassignment records.
A Data Sharing Agreement (DSA) will be in place to make sure this kind of information is not included, in line with legal and statutory requirements and concerns around sensitivity.
16. Who runs Population Health Management in Herefordshire and Worcestershire?
The NHS and local councils in Herefordshire and Worcestershire own and are responsible for Population Health Management.
17. What is risk stratification?
Risk stratification helps GPs focus interventions on patients who may need extra support.
To conduct risk stratification, national datasets are linked with GP data using the NHS number and an algorithm is applied to produce risk scores. Risk stratification uses algorithms and data analysis to evaluate patient data and identify those at higher risk for conditions, such as diabetes, heart disease, and respiratory issues.
Patient data is initially de-identified using pseudonymisation to protect privacy, but it can be re-identified by the patient’s GP practice if needed for direct care. Pseudonymising data involves replacing an NHS number, a name or an address with a unique number or code (a pseudonym), to protect the privacy of the individual patient.
You will not be personally identifiable to data analysts, nor will any staff have access to your personal or confidential data.
NHS Herefordshire and Worcestershire ensures this process complies with all legal and ethical standards, safeguarding patient confidentiality while allowing for informed clinical decision-making.
18. What if I don’t want my information to be shared in this way?
You have a choice about whether you want your confidential patient information to be used in this way. If you are happy with this use of information you do not need to do anything.
If you don’t want your data to be used in this way, you can opt-out by contacting your GP practice.
A Population Health Management pilot involving 12 GP practices across Herefordshire and Worcestershire is currently taking place. This privacy notice relates to the pilot practices.
What is Population Health Management?
Population Health Management (or PHM for short) is aimed at improving the health of an entire population. It is being implemented across the NHS and this Practice is taking part in Herefordshire and Worcestershire.
PHM is about improving the physical and mental health outcomes and wellbeing of people and making sure that access to services is fair, timely and equal. It helps to reduce the occurrence of ill-health and looks at all the wider factors that affect health and care.
The PHM approach requires health care organisations to work together with communities and partner agencies, for example, GP practices, community service providers, hospitals and other health and social care providers.
These organisations will share and combine information with each other, in order to get a view of health and services for the population in a particular area. This information sharing is subject to robust security arrangements.
How will my Personal Data be used?
Information about your health care, which includes personal data, will be combined to create a picture of your health care.
Anything that can identify you will be removed and will be replaced with a unique code, so that people working on that data will only see the code and cannot see any personal data.
This means that the people working with the data will only see the code and cannot see which patient the information relates to.
If we see that an individual might benefit from some additional care or support, we will send the information back to your GP or hospital provider and they will use the code to identify you and offer you relevant services.
Examples of how the information could be used for a number of healthcare related activities, include:
- improving the quality and standards of care provided
- research into the development of new treatments
- preventing illness and diseases
- monitoring safety
- planning services
Who will my Personal Data be shared with?
Your GP and other care providers will send the information they hold on their systems to the Midlands and Lancashire Commissioning Support Unit (MLCSU), who are part of NHS England.
NHS Midlands and Lancashire (midlandsandlancashirecsu.nhs.uk) has more information.
MLCSU will link all the information together. Your GP and other care providers will then review this information and make decisions about the whole population, or particular patients that might need additional support.
MLCSU is legally obliged to protect your information and maintain confidentiality in the same way that your GP or hospital provider is.
Is using my Personal Data in this way lawful?
Health and Social Care Providers are permitted by data protection law to use personal information where it is ‘necessary for medical purposes.’ This includes caring for you directly, as well as management of health services more generally.
Some of the work that happens at a national level with your pseudonymised personal information is enabled by other legislation. Sharing and using your information in this way helps to provide better health and care for you, your family and future generations.
Confidential patient information about your health and care is only used like this, where allowed by law, and, unless directly for your care, pseudonymised data is used so that you cannot be identified.
For more information, speak to our Data Protection Officer who will be happy to help with any queries you may have.
Can I object to my Personal Data being used as part of the Population Health Management project?
You have a right to object to your personal information being used in this way. If you do choose to ‘opt out’ please contact our Data Protection Officer at the practice in the first instance. If you are happy for your personal information to be used as part of this project, then you do not need to do anything further, although you do have the right to change your mind at any time.
You also have a number of other rights relating to how your personal information is used. See our main privacy policy for more information [insert link to practice website].
If you still have concerns, you can also contact the Information Commissioner’s Office directly.
Share your views on Population Health Management
Over the past few months, we have started sharing information about Population Health Management and how data is being used.
We want to understand the views of local people and provide an opportunity for feedback.
Please share your views about this new approach to improving healthcare by completing this short survey.