Department of Health
Review of health and care data security and consent
The Care Quality Commission and National Data Guardian's recommendations for data security and a consent/opt-out model for data sharing given yesterday.
Yesterday 2 independent reviews were published which make recommendations about data security in the health and care system in England and a new consent/opt-out model for data sharing.
In September 2015, I commissioned the Care Quality Commission (CQC) to undertake a review of data security in the NHS and, in parallel, commissioned Dame Fiona Caldicott, the National Data Guardian for Health and Care (NDG), to undertake an independent review of data security and consent, with the purpose of:
- developing new data security standards
- devising a method of testing compliance with the new standards
- proposing a new consent/opt-out model for data sharing in health and social care
A digital NHS
Healthcare, like all areas of modern life, is rapidly going digital. New technology and innovative approaches to health and care have already made significant progress, resulting in more people surviving the devastating effects of life-threatening and debilitating illnesses. If we are to achieve our ambition to deliver the safest, most efficient healthcare possible for NHS patients, we must make the most of this digital information revolution, moving away from reliance on paper record keeping towards a 21st century, fully digital NHS, in which GP, pharmacy and hospital records, as well as diagnosis and condition monitoring, are all based on digital platforms.
As the health and social care system becomes increasingly paperless and digital it also becomes ever more important that there are adequate and robust protections in place to protect the data and information held within it. All health and care organisations that handle sensitive information should be working towards giving patients the highest levels of trust and confidence and reducing the risk of external threats and potential breaches. It is vital that we do all that we can to ensure that health and care staff have access to the safeguards, knowledge and capability to handle such information securely.
The technological revolution in health and care has benefited individuals, their families, friends and the country at large. But it would not have happened without a significant change in the availability and quality of digital health and care data and greater innovation in how that information is used. To achieve our ambition of a fully digital NHS, it is vital that the public trusts health and care staff to keep their personal data safe and secure.
Trust and data sharing
Dame Fiona’s review found that, broadly, the public does trust the NHS with confidential data. However, we cannot be complacent. That’s why we want to do more to realise the benefits that come from sharing information safely and consistently across the health and care system where there is a legitimate reason for doing so. For example, by giving patients more access to, and control over, the use of their personal confidential information, by improving the way that the NHS uses information to check the quality of care, or by researchers being able to use data to improve treatment and care.
Dame Fiona Caldicott has proposed 10 security standards to be applied in every health and care organisation that handles personal confidential information. These include measures which will protect systems against data breaches, ensuring that NHS leadership takes ownership and responsibility for data security and ensuring that organisations are as prepared as they can be to meet the challenges of the digital age. Dame Fiona has also emphasised the vital importance of data sharing and is proposing a new consent/opt-out model, which will give people a less complex choice about how their personal confidential information is used.
Consulting on data security
I am grateful to Dame Fiona and the CQC for their work on this important agenda. I am today publishing a consultation on 2 main aspects of Dame Fiona’s independent review, namely the new data security standards and proposed consent/opt-out model. It is vital that a full consultation and dialogue with the public and professionals takes place before any implementation of the recommendations can take place.
I am also publishing today the government response to the consultation carried out late last year into the role of the National Data Guardian for Health and Care. The response sets out the government’s key decisions in relation to the proposed functions for the role, and we remain committed to placing the role on a statutory footing at the next available opportunity.
In her review, Dame Fiona emphasises the importance of protecting anonymised data to give the public the assurances they need that they will not be re-identified. I can confirm today that the government is supportive of the introduction of stronger criminal sanctions against those who use anonymised data to re-identify individuals.
On data security, both reviews highlight the importance of removing outdated IT systems. We are working with suppliers, including Microsoft, to help health and care organisations update their systems to make sure they are safe to use and store data. NHS Digital (previously HSCIC) will launch an initiative to support this work later this year.
The National Data Guardian Review also recommends that the government consider the future of the care.data programme, as the consent and opt-out model proposed by the review goes further than the approach that was planned for care.data and its pathfinder areas.
In light of Dame Fiona’s recommendations, NHS England has taken the decision to close the care.data programme. However, the government and the health and care system remain absolutely committed to realising the benefits of sharing information, as an essential part of improving outcomes for patients. Therefore this work will now be taken forward by the National Information Board, in close collaboration with the primary care community, in order to retain public confidence and to drive better care for patients.
Latest News from
Department of Health
Restrictions for more areas in north west, West Yorkshire and midlands to tackle rising infection rates18/09/2020 16:43:00
Lancashire, Merseyside, Warrington and Halton escalated to areas of intervention, with new restrictions in Wolverhampton, Oadby and Wigston, and parts of Bradford, Kirklees and Calderdale.
New funding to help hospitals introduce digital prescribing18/09/2020 15:38:00
More patients and healthcare staff will benefit from single electronic patient records as 7 hospital trusts receive a share of £8.7 million to introduce digital records and e-prescribing.
Venues required to enforce rule of 6, NHS QR code posters and contact logs18/09/2020 14:22:00
Hospitality and leisure venues in England are from today legally required to enforce the rule of 6 or face a fine of up to £4,000.
New Lighthouse Labs to boost NHS Test and Trace capacity18/09/2020 13:10:00
Two new Lighthouse Labs in Newcastle and Bracknell will join the largest network of diagnostic testing facilities created in British history to help scale up testing capacity ahead of winter.
Ministerial meeting to discuss key drugs issues18/09/2020 11:12:00
Crime and Policing Minister Kit Malthouse and Public Health Minister Jo Churchill yesterday (Thursday 17 September) hosted a meeting to discuss key issues around illicit drugs.
More than £500 million for social care to reduce coronavirus transmission over winter18/09/2020 10:10:10
Care providers will be given an extra £546 million to bolster infection control and help protect residents and staff throughout winter.
Oral statement on coronavirus and the government's plans for winter17/09/2020 14:20:00
Oral statement by the Secretary of State for Health and Social Care on coronavirus and the government's plans to put us in the strongest possible position for this winter.
Stronger measures introduced in parts of the North East to tackle rising infection rates17/09/2020 13:38:00
New restrictions will be introduced in parts of the north-east of England to curb rising infection rates.