NHS Digital Data Release Register - reformatted

NHS Bury CCG projects

DSfC - NHS Bury CCG & Bury Metropolitan Borough Council - Comm
Project 2
DSfC - NHS Bury CCG; RS, Comm; IV

825 data files in total were disseminated unsafely (information about files used safely is missing for TRE/"system access" projects).

🚩 NHS Bury CCG was sent multiple files from the same dataset, in the same month, both with optouts respected and with optouts ignored. NHS Bury CCG may not have compared the two files, but the identifiers are consistent between datasets, and outside of a good TRE NHS Digital can not know what recipients actually do.

DSfC - NHS Bury CCG & Bury Metropolitan Borough Council - Comm — NIC-418444-H4X4L

Opt outs honoured: No - data flow is not identifiable (Excuses: Does not include the flow of confidential data)

Legal basis: Health and Social Care Act 2012 - s261 - 'Other dissemination of information'

Purposes: No (Clinical Commissioning Group (CCG), Sub ICB Location)

Sensitive: Sensitive

When:DSA runs 2020-12 – 2023-12 2021.01 — 2021.05.

Access method: One-Off, Frequent Adhoc Flow

Data-controller type: BURY METROPOLITAN BOROUGH COUNCIL, NHS BURY CCG, BURY METROPOLITAN BOROUGH COUNCIL, NHS GREATER MANCHESTER ICB - 00V

Sublicensing allowed: No

Datasets:

Acute-Local Provider Flows
Ambulance-Local Provider Flows
Children and Young People Health
Civil Registration - Births
Civil Registration - Deaths
Community Services Data Set
Community-Local Provider Flows
Demand for Service-Local Provider Flows
Diagnostic Imaging Dataset
Diagnostic Services-Local Provider Flows
Emergency Care-Local Provider Flows
e-Referral Service for Commissioning
Experience, Quality and Outcomes-Local Provider Flows
Improving Access to Psychological Therapies Data Set
Maternity Services Data Set
Mental Health and Learning Disabilities Data Set
Mental Health Minimum Data Set
Mental Health Services Data Set
Mental Health-Local Provider Flows
National Cancer Waiting Times Monitoring DataSet (CWT)
National Diabetes Audit
Other Not Elsewhere Classified (NEC)-Local Provider Flows
Patient Reported Outcome Measures
Personal Demographic Service
Population Data-Local Provider Flows
Primary Care Services-Local Provider Flows
Public Health and Screening Services-Local Provider Flows
Summary Hospital-level Mortality Indicator
SUS for Commissioners
National Cancer Waiting Times Monitoring DataSet (NCWTMDS)
Improving Access to Psychological Therapies Data Set_v1.5
Adult Social Care
Medicines dispensed in Primary Care (NHSBSA data)
Civil Registrations of Death
Community Services Data Set (CSDS)
Diagnostic Imaging Data Set (DID)
Improving Access to Psychological Therapies (IAPT) v1.5
Mental Health and Learning Disabilities Data Set (MHLDDS)
Mental Health Minimum Data Set (MHMDS)
Mental Health Services Data Set (MHSDS)
Patient Reported Outcome Measures (PROMs)
Summary Hospital-level Mortality Indicator (SHMI)

Type of data: Anonymised - ICO Code Compliant

Objectives:

The One Commissioning Organisation (OCO) brings together NHS Bury CCG and Bury Metropolitan Borough Council and provides integrated health and social care commissioning across the borough. The OCO has a single commissioning strategy, integrated governance, decision making and is primarily focused on commissioning for outcomes.

A key enabler for the OCO is to be able to share data, intelligence and analysis. Being able to link data from across the health and care systems (including Adult Social Care data) will provide a much better understanding of the care that the local population is receiving and the interactions that individuals have with different parts of the system. Having access to comprehensive health data will support the programmes and services being designed and delivered across Bury ensuring they are joined up, efficient and delivering a high standard of quality of care, allowing the delivery of person centered care which improves population health outcomes.

Sharing health and care pseudonymised data will allow both the CCG and local authority to plan, commission and monitor services together to improve the support and treatment provided to people through an integrated health and care system.

The CCGs commission services from a range of providers covering a wide array of services. Each of the data flow categories requested supports the commissioned activity of one or more providers.

The following pseudonymised datasets are required to provide intelligence to support commissioning of health and care services:
- Secondary Uses Service (SUS+)
- Local Provider Flows
o Acute
o Ambulance
o Community
o Demand for Service
o Diagnostic Service
o Emergency Care
o Experience, Quality and Outcomes
o Mental Health
o Other Not Elsewhere Classified
o Population Data
o Primary Care Services
o Public Health Screening
- Mental Health Minimum Data Set (MHMDS)
- Mental Health Learning Disability Data Set (MHLDDS)
- Mental Health Services Data Set (MHSDS)
- Maternity Services Data Set (MSDS)
- Improving Access to Psychological Therapy (IAPT)
- Child and Young People Health Service (CYPHS)
- Community Services Data Set (CSDS)
- Diagnostic Imaging Data Set (DIDS)
- National Cancer Waiting Times Monitoring Data Set (CWT)
- Civil Registries Data (CRD) (Births)
- Civil Registries Data (CRD) (Deaths)
- National Diabetes Audit (NDA)
- Patient Reported Outcome Measures (PROMs)
- e-Referral Service (eRS)
- Personal Demographics Service (PDS)
- Summary Hospital-level Mortality Indicator (SHMI)

The pseudonymised data is required to for the following purposes:
• Population health management
• Understanding the inter dependency of care services
• Targeting care more effectively
• Using value as the redesign principle
• to analytically understand patient journeys for pathway and service re-design.
• Data Quality and Validation - allowing data quality checks on the submitted data
• Thoroughly investigating the needs of the population, to ensure the right services are available for individuals
when and where they need them
• Understanding cohorts of residents who are at risk of becoming users of some of the more expensive
services, to better understand and manage those needs
• Monitoring population health and care interactions to understand where people may slip through the net, or
where the provision of care may be being duplicated
• Modelling activity across all data sets to understand how services interact with each other, and to understand
how changes in one service may affect flows through another
• Health Needs Assessment identification of underlying disease prevalence within the local population
• Understanding the whole system offer for the borough across health and social care to support and drive
integration.
• Understand and develop a borough wide asset based approach to prevention, early intervention and holistic
• Long term support based on accurate demand/need modelling.

The pseudonymised data is required to ensure that analysis of health care provision can be completed to support the needs of the health profile of the population within the borough based on the full analysis of multiple pseudonymised datasets.

Processing for commissioning will be conducted by NHS Bury CCG, Bury Metropolitan Borough Council and Arden and Greater East Midlands Commissioning Support Unit.

Expected Benefits:

COMMISSIONING
1. Supporting Quality Innovation Productivity and Prevention (QIPP) to review demand management, integrated care and pathways.
a. Analysis to support full business cases.
b. Develop business models.
c. Monitor In year projects.
2. Supporting Joint Strategic Needs Assessment (JSNA) for specific disease types.
3. Health economic modelling using:
a. Analysis on provider performance against 18 weeks wait targets.
b. Learning from and predicting likely patient pathways for certain conditions, in order to influence early interventions and other treatments for patients.
c. Analysis of outcome measures for differential treatments, accounting for the full patient pathway.
d. Analysis to understand emergency care and linking A&E and Emergency Urgent Care Flows (EUCC).
4. Commissioning cycle support for grouping and re-costing previous activity.
5. Enables monitoring of:
a. OCO outcome indicators.
b. Financial and Non-financial validation of activity.
c. Successful delivery of integrated care within the OCO.
d. Checking frequent or multiple attendances to improve early intervention and avoid admissions.
e. Case management.
f. Care service planning.
g. Commissioning and performance management.
h. List size verification by GP practices.
i. Understanding the care of patients in nursing homes.
6. Feedback to NHS service providers on data quality at an aggregate and individual record level – only on data initially provided by the service providers.
7. Improved planning by better understanding patient flows through the healthcare system, thus allowing commissioners to design appropriate pathways to improve patient flow and allowing commissioners to identify priorities and identify plans to address these.
8. Improved quality of services through reduced emergency readmissions, especially avoidable emergency admissions. This is achieved through mapping of frequent users of emergency services and early intervention of appropriate care.
9. Improved access to services by identifying which services may be in demand but have poor access, and from this identify areas where improvement is required.
10. Potentially reduced premature mortality by more targeted intervention in primary care, which supports the commissioner to meets its requirement to reduce premature mortality in line with the CCG Outcome Framework.
11. Better understanding of the health of and the variations in health outcomes within the population to help understand local population characteristics.
12. Better understanding of contract requirements, contract execution, and required services for management of existing contracts, and to assist with identification and planning of future contracts
13. Insights into patient outcomes, and identification of the possible efficacy of outcomes-based contracting opportunities.
14. Providing greater understanding of the underlying courses and look to commission improved supportive networks, this would be ongoing work which would be continually assessed.
15. Insight to understand the numerous factors that play a role in the outcome for both datasets. The linkage will allow the reporting both prior to, during and after the activity, to provide greater assurance on predictive outcomes and delivery of best practice.
16. Provision of indicators of health problems, and patterns of risk within the commissioning region.
17. Support of benchmarking for evaluating progress in future years

One programme ran by the CCG and Local Authority promotes a model of independent living and support delivered through adult social care and health. The aim of this programme is to support people to stay well and independent in their own homes and communities of choice as well as ensuring high quality support where needed.

The expected benefits from the programme are;

- People are supported to live independently in their own home.
- People’s health and social care needs are prevented from escalating.
- Integrated health and social care services.
- Improved and optimised care worker role with defined career progression opportunities.

Outputs:

Commissioning
1. Commissioner reporting:
a. Summary by provider view - plan & actuals year to date (YTD).
b. Summary by Patient Outcome Data (POD) view - plan & actuals YTD.
c. Summary by provider view - activity & finance variance by POD.
d. Planned care by provider view - activity & finance plan & actuals YTD.
e. Planned care by POD view - activity plan & actuals YTD.
f. Provider reporting.
g. Statutory returns.
h. Statutory returns - monthly activity return.
i. Statutory returns - quarterly activity return.
j. Delayed discharges.
k. Quality & performance referral to treatment reporting.
2. Readmissions analysis.
3. Production of aggregate reports for CCG Business Intelligence.
4. Production of project / programme level dashboards.
5. Monitoring of acute / community / mental health quality matrix.
6. Clinical coding reviews / audits.
7. Budget reporting down to individual GP Practice level.
8. GP Practice level dashboard reports.
9. Comparators of CCG performance with similar CCGs as set out by a specific range of care quality and performance measures detailed activity and cost reports
10. Data Quality and Validation measures allowing data quality checks on the submitted data
11. Contract Management and Modelling
12. Patient/client Stratification, such as:
• Patients at highest risk of admission
• High cost activity uses(top 15%)
• Frail and elderly
• Patients that are currently in hospital
• Patients with most referrals to secondary care
• Patients with most emergency activity
• Patients with most expensive prescriptions
• Patients recently moving from one care setting to another
i. Discharged from hospital
ii. Discharged from community
13. Validation for payment approval, ability to validate that claims are not being made after an individual has died, like Oxygen services.
14. Validation of programs implemented to improve patient pathway e.g. High users unable to validate if the process to help patients find the best support are working or did the patient die.
15. Clinical - understand reasons why patients are dying, what additional support services can be put in to support. 16. Understanding where patient are dying e.g. are patients dying at hospitals due to hospices closing due to Local authorities withdrawing support, or is there a problem at a particular trust.
17. Removal of patients from Risk Stratification reports.
18. Re births provide a one stop shop of information, Births are recorded in multiple sources covering hospital and home births, a chance to overlook activity
19. Whole system usage. The OCO will provide analysis on whole system usage which may include such things as: numbers of admission/readmission's; discharge pathways; behavioural health and social care characteristics; whole system timescales and service/organisation interactions; high utilisers; considered target populations; readmission patterns, reablement uptake and impact; bed utilisation and market impact
20. Projects and Programmes.The OCO undertakes many projects and programmes. Using data provided, the OCO will produce project and programme level dashboards.

Patient / client Stratification:
The OCO will investigate trends in those patients/clients at highest risk. Risk may be defined in relation to the following:
- Admission
- Readmission
- Use of multiple services
- Referrals to secondary care
- High cost services / complex needs
- High cost prescriptions
- Frail and elderly
- Movement between services
- Escalation of services
- Loss of independence and/or isolation

Processing:

PROCESSING CONDITIONS:
Data must only be used for the purposes stipulated within this Data Sharing Agreement. Any additional disclosure / publication will require further approval from NHS Digital.

Data Processors must only act upon specific instructions from the Data Controller.

Data can only be stored at the addresses listed under storage addresses.

All access to data is managed under Role-Based Access Controls. Users can only access data authorised by their role and the tasks that they are required to undertake.

Patient level data will not be linked other than as specifically detailed within this Data Sharing Agreement. Data released will only be shared with those parties listed and will only be used for the purposes laid out in the application/agreement.

NHS Digital reminds all organisations party to this agreement of the need to comply with the Data Sharing Framework Contract requirements, including those regarding the use (and purposes of that use) by “Personnel” (as defined within the Data Sharing Framework Contract ie: employees, agents and contractors of the Data Recipient who may have access to that data)

ONWARD SHARING:
Patient level data will not be shared outside of the Controllers / Processors unless it is for the purpose of Direct Care, where it may be shared only with those health professionals who have a legitimate relationship with the patient and a legitimate reason to access the data.

Aggregated reports only with small number suppression can be shared externally as set out within NHS Digital guidance applicable to each data set.

SEGREGATION:
Where the Data Processor and/or the Data Controller hold both identifiable and pseudonymised data, the data will be held separately so data cannot be linked.

Where the Data Processor and/or the Data Controller hold identifiable data with opt outs applied and identifiable data with opt outs not applied, the data will be held separately so data cannot be linked.

All access to data is auditable by NHS Digital.

DATA MINIMISATION:
Data Minimisation in relation to the data sets listed within the application are listed below. This also includes the purpose on which they would be applied -

For the purpose of Commissioning:
• Patients who are normally registered and/or resident within the NHS Bury CCG or Bury Metropolitan Borough Council region (including historical activity where the patient was previously registered or resident in another commissioner).
and/or
• Patients treated by a provider where NHS Bury CCG is the host/co-ordinating commissioner and/or has the primary responsibility for the provider services in the local health economy – this is only for commissioning and relates to both national and local flows.
and/or
• Activity identified by the provider and recorded as such within national systems (such as SUS+) as for the attention of NHS Bury CCG - this is only for commissioning and relates to both national and local flows.

NHS Midlands and Lancashire Commissioning Support Unit and Greater Manchester Shared Services (hosted by Salford Royal NHS Foundation Trust ) supply IT infrastructure for Arden and GEM Commissioning Support Unit and are therefore listed as data processors. They supply support to the system, but do not access data. Therefore, any access to the data held under this agreement would be considered a breach of the agreement. This includes granting of access to the database[s] containing the data.

Ilkeston Community Hospital (Part of Derbyshire Community Health Services NHS Foundation Trust) and Wrightington, Wigan and Leigh NHS Foundation Trust do not access data held under this agreement as they only supply the building. Therefore, any access to the data held under this agreement would be considered a breach of the agreement. This includes granting of access to the database[s] containing the data.

COMMISSIONING
The Data Services for Commissioners Regional Office (DSCRO) obtains the following data sets:
1. SUS+
2. Local Provider Flows (received directly from providers)
a. Acute
b. Ambulance
c. Community
d. Demand for Service
e. Diagnostic Service
f. Emergency Care
g. Experience, Quality and Outcomes
h. Mental Health
i. Other Not Elsewhere Classified
j. Population Data
k. Primary Care Services
l. Public Health Screening
3. Mental Health Minimum Data Set (MHMDS)
4. Mental Health Learning Disability Data Set (MHLDDS)
5. Mental Health Services Data Set (MHSDS)
6. Maternity Services Data Set (MSDS)
7. Improving Access to Psychological Therapy (IAPT)
8. Child and Young People Health Service (CYPHS)
9. Community Services Data Set (CSDS)
10. Diagnostic Imaging Data Set (DIDS)
11. National Cancer Waiting Times Monitoring Data Set (CWT)
12. Civil Registries Data (CRD) (Births)
13. Civil Registries Data (CRD) (Deaths)
14. National Diabetes Audit (NDA)
15. Patient Reported Outcome Measures (PROMs)
16. e-Referral Service (eRS)
17. Personal Demographics Service (PDS)
18. Summary Hospital-level Mortality Indicator (SHMI)

Data quality management and pseudonymisation is completed within the DSCRO and is then disseminated as follows:

Data processor 1- Arden and Gem CSU

1. Pseudonymised SUS+, Local Provider data, Mental Health data (MHSDS, MHMDS, MHLDDS), Maternity data (MSDS), Improving Access to Psychological Therapies data (IAPT), Child and Young People’s Health data (CYPHS), Community Services Data Set (CSDS), Diagnostic Imaging data (DIDS), National Cancer Waiting Times Monitoring Data Set (CWT), Civil Registries Data (CRD) (Births and Deaths), National Diabetes Audit (NDA), Patient Reported Outcome Measures (PROMs), e-Referral Service (eRS), Personal Demographics Service (PDS) and Summary Hospital-level Mortality Indicator (SHMI) data only is securely transferred from the DSCRO to Arden and Gem CSU.
2. Arden and Gem CSU add derived fields by using existing data, link data and provide analysis to:
a. See patient journeys for pathways or service design, re-design and de-commissioning.
b. Check recorded activity against contracts or invoices and facilitate discussions with providers.
c. Undertake population health management
d. Undertake data quality and validation checks
e. Thoroughly investigate the needs of the population
f. Understand cohorts of residents who are at risk
g. Conduct Health Needs Assessments
3. Allowed linkage is between the data sets contained within point 1.
4. Arden and Gem CSU then pass the processed, pseudonymised and linked data to the CCG and the Council. The CCG and Council may also share the data between themselves
5. Data quality management of Adult Social Care data is completed by Bury Metropolitan Borough Council
6. The Adult Social Care data is pseudonymised at source using a pseudonymisation key provided by the DSCRO (different from the pseudo key used by the DSCRO).
7. This consistently pseudonymised data is securely passed to the CCG using a secure local connection
8. The DSCRO sends a mapping table to the CCG to overwrite the pseudonym in the social care data so it is linkable to the data in point 1
9. The CCG then shares the adult social care data with the local authority. The CCG must not share the data with the local authority unless the pseudonym has been overwritten as per point 8
10. The data controllers are required to keep the pseudonymised data they receive separate from any identifiable data and the pseudonymised data the local authority submits to the CCG, and make no attempt to reidentify the data. Failure to meet these terms will result in a breach of this agreement.
11. Aggregation of required data for CCG management use will be completed by Arden and Gem CSU or the CCG as instructed by the CCG and the Council.
12. Patient level data will not be shared outside of the Data Controllers / Processors, other than with their member GP Practices for each Practices own patients only and will only be shared within the Data Controllers / Processors on a need to know basis, as per the purposes stipulated within the Data Sharing Agreement. External aggregated reports only with small number suppression can be shared as set out within NHS Digital guidance applicable to each data set.

The Encryption key will only be shared by the DSCRO with named individuals in Bury Metropolitan Borough Council (Adult Social Care). This is to enable Adult Social Care data to be pseudonymised at source. The key cannot be used to re-identify data as it only allows for one-way pseudonymisation. Access to the pseudonymised data is provided only to Bury Metropolitan Borough Council and NHS Bury CCG and will only be used for the purposes specified. Re-identification can only occur for GPs who have a legitimate relationship with the patient and only for the purpose of direct care.

Project 2 — NIC-120758-L4C3B

Opt outs honoured: No - data flow is not identifiable

Legal basis: Health and Social Care Act 2012, Health and Social Care Act 2012 – s261(1) and s261(2)(b)(ii)

Purposes: ()

Sensitive: Sensitive

When:2018.03 — 2019.04.

Access method: Ongoing, Frequent Adhoc Flow

Data-controller type:

Sublicensing allowed:

AGD/predecessor discussions: igard_minutes_2_november_2017.pdf, IGARD_Minutes_06.07.17.pdf

Datasets:

Emergency Care-Local Provider Flows
Diagnostic Services-Local Provider Flows
Community-Local Provider Flows
Ambulance-Local Provider Flows
Acute-Local Provider Flows

Type of data:

Objectives:

Commissioning
To use pseudonymised data which will be shared between multiple CCGs which will be listed within the Data Sharing Agreement, to provide intelligence to support commissioning of health services. The pseudonymised data is required to ensure that analysis of health care provision can be completed to support the needs of the health profile of the population within the CCG area based on the full analysis of multiple pseudonymised datasets.
The CCGs commission services from a range of providers covering a wide array of services. Each of the data flow categories requested supports the commissioned activity of one or more providers.
The following pseudonymised datasets are required to provide intelligence to support commissioning of health services:
- Local Provider Flows
o Acute
o Ambulance
o Community
o Diagnostic Service
o Emergency Care
The pseudonymised data is required to ensure that analysis of health care provision can be completed to support the needs of the health profile of the population within the CCG area based on the full analysis of multiple pseudonymised datasets.

The following CCGs are able to share record level data between the CCGs to enable collaborative reporting by their respective CCG analysts and Data Processor Analysts (Arden and GEM CSU):
- NHS Bury CCG
- NHS Heywood, Middleton and Rochdale CCG
- NHS Manchester CCG
- NHS Oldham CCG
The CCGs work together on a collaborative basis across to support each other in delivering their commissioning agendas. For example, they wish to carry out contract monitoring, e.g. SUS SLAM reconciliation, for all the four CCGs listed above where they are lead commissioner; or where a CCG provides a contract monitoring service for another CCG. The CCGs request approval (through this DARS amendment) to share the following datasets on a collaborative basis across the four CCGs , to be used for collaborative reporting in any combination of CCGs in the group, or at individual CCG level reporting as required; both by a CCG’s in house BI/Contract Analysts and by their Data Processor Analysts, Arden and GEM CSU:
• Local Provider Flows (for commissioning)

The CCGs may access the pseudonymised data of each CCG for the purpose of commissioning only. The data listed in Annex A of the DSA is the data that the CCGs will be allowed to access.

Expected Benefits:

Commissioning
1. Supporting Quality Innovation Productivity and Prevention (QIPP) to review demand management, integrated care and pathways.
a. Analysis to support full business cases.
b. Develop business models.
c. Monitor In year projects.
2. Supporting Joint Strategic Needs Assessment (JSNA) for specific disease types.
3. Health economic modelling using:
a. Analysis on provider performance against 18 weeks wait targets.
b. Learning from and predicting likely patient pathways for certain conditions, in order to influence early interventions and other treatments for patients.
c. Analysis of outcome measures for differential treatments, accounting for the full patient pathway.
d. Analysis to understand emergency care and linking A&E and Emergency Urgent Care Flows (EUCC).
4. Commissioning cycle support for grouping and re-costing previous activity.
5. Enables monitoring of:
a. CCG outcome indicators.
b. Non-financial validation of activity.
c. Successful delivery of integrated care within the CCG.
d. Checking frequent or multiple attendances to improve early intervention and avoid admissions.
e. Case management.
f. Care service planning.
g. Commissioning and performance management.
h. List size verification by GP practices.
i. Understanding the care of patients in nursing homes.
6. Feedback to NHS service providers on data quality at an aggregate and individual record level – only on data initially provided by the service providers.

Outputs:

Commissioning
1. Commissioner reporting:
a. Summary by provider view - plan & actuals year to date (YTD).
b. Summary by Patient Outcome Data (POD) view - plan & actuals YTD.
c. Summary by provider view - activity & finance variance by POD.
d. Planned care by provider view - activity & finance plan & actuals YTD.
e. Planned care by POD view - activity plan & actuals YTD.
f. Provider reporting.
g. Statutory returns.
h. Statutory returns - monthly activity return.
i. Statutory returns - quarterly activity return.
j. Delayed discharges.
k. Quality & performance referral to treatment reporting.
2. Readmissions analysis.
3. Production of aggregate reports for CCG Business Intelligence.
4. Production of project / programme level dashboards.
5. Monitoring of acute / community / mental health quality matrix.
6. Clinical coding reviews / audits.
7. Budget reporting down to individual GP Practice level.
8. GP Practice level dashboard reports include high flyers.

Processing:

Data must only be used as stipulated within this Data Sharing Agreement.

Data Processors must only act upon specific instructions from the Data Controller.

Data can only be stored at the addresses listed under storage addresses.

The Data Controller and any Data Processor will only have access to records of patients of residence and registration within the CCG.

Patient level data will not be shared outside of the CCG unless otherwise stipulated within this agreement or it is for the purpose of Direct Care, where it may be shared only with those health professionals who have a legitimate relationship with the patient and a legitimate reason to access the data.

No patient level data will be linked other than as specifically detailed within this agreement. Data will only be shared with those parties listed and will only be used for the purposes laid out in the application/agreement. The data to be released from NHS Digital will not be national data, but only that data relating to the specific locality of interest of the applicant.
NHS Digital reminds all organisations party to this agreement of the need to comply with the Data Sharing Framework Contract requirements, including those regarding the use (and purposes of that use) by “Personnel” (as defined within the Data Sharing Framework Contract ie: employees, agents and contractors of the Data Recipient who may have access to that data)

Segregation
Where the Data Processor and/or the Data Controller hold both identifiable and pseudonymised data, the data will be held separately so data cannot be linked.
All access to data is audited

Commissioning
The Data Services for Commissioners Regional Office (DSCRO) obtains the following data sets:
1. Local Provider Flows (received directly from providers)
o Acute
o Ambulance
o Community
o Diagnostic Service
o Emergency Care
Data quality management and pseudonymisation is completed within the DSCRO and is then disseminated as follows:
Data Processor 1 – Arden and Greater East Midlands Commissioning Support Unit
1) Pseudonymised Local Provider data only are securely transferred from the DSCRO to Arden and Greater East Midlands Commissioning Support Unit.
2) Arden and Greater East Midlands Commissioning Support Unit add derived fields, link data and provide analysis.
3) Allowed linkage is between the data sets contained within point 1.
4) Arden and Greater East Midlands Commissioning Support Unit then pass the processed, pseudonymised and linked data to each CCG. The CCG analyse the data to see patient journeys for pathways or service design, re-design and de-commissioning.
5) Aggregation of required data for CCG management use will be completed by Arden and Greater East Midlands Commissioning Support Unit or the CCG as instructed by the CCG.
6) Patient level data will not be shared outside of the CCG and will only be shared within the CCG on a need to know basis, as per the purposes stipulated within the Data Sharing Agreement. External aggregated reports only with small number suppression can be shared.

DSfC - NHS Bury CCG; RS, Comm; IV — NIC-47174-R9S4W

Opt outs honoured: N, Y, No - data flow is not identifiable, Yes - patient objections upheld (Excuses: Section 251, Section 251 NHS Act 2006, Mixture of confidential data flow(s) with support under section 251 NHS Act 2006 and non-confidential data flow(s))

Legal basis: Health and Social Care Act 2012, Section 251 approval is in place for the flow of identifiable data, Health and Social Care Act 2012 – s261(1) and s261(2)(b)(ii), National Health Service Act 2006 - s251 - 'Control of patient information'. , Health and Social Care Act 2012 s261(1) and s261(2)(b)(ii), Health and Social Care Act 2012 s261(7); National Health Service Act 2006 - s251 - 'Control of patient information'., Health and Social Care Act 2012 s261(2)(b)(ii)

Purposes: No (Clinical Commissioning Group (CCG), Sub ICB Location)

Sensitive: Sensitive

When:DSA runs 2018-07 – 2021-07 2017.06 — 2017.05.

Access method: Ongoing, Frequent adhoc flow, Frequent Adhoc Flow, One-Off

Data-controller type: NHS BURY CCG, NHS GREATER MANCHESTER ICB - 00V

Sublicensing allowed: No

AGD/predecessor discussions: igard-minutes-24th-january-2019---final.pdf, IGARD Minutes - 26 January 2023 final.pdf, IGARD Minutes - 26 August 2021 final.pdf, IGARD Minutes - 29 July 2021 - FINAL.pdf, igard-minutes---6-aug-2020-final.pdf, igard-minutes-14th-february-2019-final.pdf, igardminutes-21stjanuary2021final.pdf, igardminutes-14thjanuary2021final.pdf

Datasets:

Children and Young People's Health Services Data Set
Improving Access to Psychological Therapies Data Set
Local Provider Data - Acute
Local Provider Data - Ambulance
Local Provider Data - Community
Local Provider Data - Demand for Service
Local Provider Data - Diagnostic Services
Local Provider Data - Emergency Care
Local Provider Data - Experience Quality and Outcomes
Local Provider Data - Mental Health
Local Provider Data - Other not elsewhere classified
Local Provider Data - Population Data
Local Provider Data - Public Health & Screening services
Mental Health and Learning Disabilities Data Set
Mental Health Minimum Data Set
Mental Health Services Data Set
SUS Accident & Emergency data
SUS Admitted Patient Care data
SUS Outpatient data
Maternity Services Dataset
SUS data (Accident & Emergency, Admitted Patient Care & Outpatient)
SUS for Commissioners
Public Health and Screening Services-Local Provider Flows
Primary Care Services-Local Provider Flows
Population Data-Local Provider Flows
Other Not Elsewhere Classified (NEC)-Local Provider Flows
Mental Health-Local Provider Flows
Maternity Services Data Set
Experience, Quality and Outcomes-Local Provider Flows
Emergency Care-Local Provider Flows
Diagnostic Services-Local Provider Flows
Diagnostic Imaging Dataset
Demand for Service-Local Provider Flows
Community-Local Provider Flows
Children and Young People Health
Ambulance-Local Provider Flows
Acute-Local Provider Flows
Community Services Data Set
National Cancer Waiting Times Monitoring DataSet (CWT)
SUS (Accident & Emergency, Inpatient and Outpatient data)
Local Provider Data - Acute, Ambulance, Community, Demand for Service, Diagnostic Services, Emergency Care, Experience Quality and Outcomes, Mental Health, Other not elsewhere classified, Population Data, Primary Care
National Cancer Waiting Times Monitoring DataSet (NCWTMDS)
Improving Access to Psychological Therapies Data Set_v1.5
Community Services Data Set (CSDS)
Diagnostic Imaging Data Set (DID)
Improving Access to Psychological Therapies (IAPT) v1.5
Mental Health and Learning Disabilities Data Set (MHLDDS)
Mental Health Minimum Data Set (MHMDS)
Mental Health Services Data Set (MHSDS)

Type of data: Anonymised - ICO Code Compliant, Identifiable

Objectives:

Risk Stratification
To use SUS data identifiable at the level of NHS number according to S.251 CAG 7-04(a) (and Primary Care Data) for the purpose of Risk Stratification. Risk Stratification provides a forecast of future demand by identifying high risk patients. This enables commissioners to initiate proactive management plans for patients that are potentially high service users. Risk Stratification enables GPs to better target intervention in Primary Care

Pseudonymised – SUS and Local Flows
To use pseudonymised data to provide intelligence to support commissioning of health services. The pseudonymised data is required to ensure that analysis of health care provision can be completed to support the needs of the health profile of the population within the CCG area based on the full analysis of multiple pseudonymised datasets.
The CCGs commission services from a range of providers covering a wide array of services. Each of the data flow categories requested supports the commissioned activity of one or more providers.

Pseudonymised – Mental Health, Maternity, IAPT, CYPHS and DIDS
To use pseudonymised data for the following datasets to provide intelligence to support commissioning of health services :
- Mental Health Minimum Data Set (MHMDS)
- Mental Health Learning Disability Data Set (MHLDDS)
- Mental Health Services Data Set (MHSDS)
- Maternity Services Data Set (MSDS)
- Improving Access to Psychological Therapy (IAPT)
- Child and Young People Health Service (CYPHS)
- Diagnostic Imaging Data Set (DIDS)
The pseudonymised data is required to ensure that analysis of health care provision can be completed to support the needs of the health profile of the population within the CCG area based on the full analysis of multiple pseudonymised datasets.

No record level data will be linked other than as specifically detailed within this application/agreement. Data will only be shared with those parties listed and will only be used for the purposes laid out in the application/agreement. The data to be released from the HSCIC will not be national data, but only that data relating to the specific locality of interest of the applicant.

Yielded Benefits:

Expected Benefits:

Risk Stratification
Risk stratification promotes improved case management in primary care and will lead to the following benefits being realised:
1. Improved planning by better understanding patient flows through the healthcare system, thus allowing commissioners to design appropriate pathways to improve patient flow and allowing commissioners to identify priorities and identify plans to address these.
2. Improved quality of services through reduced emergency readmissions, especially avoidable emergency admissions. This is achieved through mapping of frequent users of emergency services and early intervention of appropriate care.
3. Improved access to services by identifying which services may be in demand but have poor access, and from this identify areas where improvement is required.
4. Potentially reduced premature mortality by more targeted intervention in primary care, which supports the commissioner to meets its requirement to reduce premature mortality in line with the CCG Outcome Framework.
5. Better understanding of the health of and the variations in health outcomes within the population to help understand local population characteristics.
All of the above lead to improved patient experience through more effective commissioning of services.

Pseudonymised – SUS and Local Flows
1. Supporting Quality Innovation Productivity and Prevention (QIPP) to review demand management, integrated care and pathways.
a. Analysis to support full business cases.
b. Develop business models.
c. Monitor In year projects.
2. Supporting Joint Strategic Needs Assessment (JSNA) for specific disease types.
3. Health economic modelling using:
a. Analysis on provider performance against 18 weeks wait targets.
b. Learning from and predicting likely patient pathways for certain conditions, in order to influence early interventions and other treatments for patients.
c. Analysis of outcome measures for differential treatments, accounting for the full patient pathway.
d. Analysis to understand emergency care and linking A&E and Emergency Urgent Care Flows (EUCC).
4. Commissioning cycle support for grouping and re-costing previous activity.
5. Enables monitoring of:
a. CCG outcome indicators.
b. Non-financial validation of activity.
c. Successful delivery of integrated care within the CCG.
d. Checking frequent or multiple attendances to improve early intervention and avoid admissions.
e. Case management.
f. Care service planning.
g. Commissioning and performance management.
h. List size verification by GP practices.
i. Understanding the care of patients in nursing homes.
6. Feedback to NHS service providers on data quality at an aggregate and individual record level – only on data initially provided by the service providers.

Pseudonymised – Mental Health, Maternity, IAPT, CYPHS and DIDS
1. Supporting Quality Innovation Productivity and Prevention (QIPP) to review demand management, Integrated care and pathways.
a. Analysis to support full business cases.
b. Develop business models.
c. Monitor In year projects.
2. Supporting Joint Strategic Needs Assessment (JSNA) for specific disease types.
3. Health economic modelling using:
a. Analysis on provider performance against 18 weeks wait targets.
b. Learning from and predicting likely patient pathways for certain conditions, in order to influence early interventions and other treatments for patients.
c. Analysis of outcome measures for differential treatments, accounting for the full patient pathway.
d. Analysis to understand emergency care and linking A&E and Emergency Urgent Care Flows (EUCC).
4. Commissioning cycle support for grouping and re-costing previous activity.
5. Enables monitoring of:
a. CCG outcome indicators.
b. Non-financial validation of activity.
c. Successful delivery of integrated care within the CCG.
d. Checking frequent or multiple attendances to improve early intervention and avoid admissions.
e. Case management.
f. Care service planning.
g. Commissioning and performance management.
h. List size verification by GP practices.
i. Understanding the care of patients in nursing homes.
6. Feedback to NHS service providers on data quality at an aggregate and individual record level – only on data initially provided by the service providers.

Outputs:

Risk Stratification
1. 1) As part of the risk stratification processing activity detailed above, GPs have access to the risk stratification tool which highlights patients for whom the GP is responsible and have been classed as at risk. The risk stratification presents pseudonymised data to the GPs. GPs are able to re-identify information only for their own patients for the purpose of direct care.
2. Output from the risk stratification tool will provide aggregate reporting of number and percentage of population found to be at risk.
3. Record level output will be available for commissioners pseudonymised at patient level and aggregated reports.
Pseudonymised – SUS and Local Flows
1. Commissioner reporting:
a. Summary by provider view - plan & actuals year to date (YTD).
b. Summary by Patient Outcome Data (POD) view - plan & actuals YTD.
c. Summary by provider view - activity & finance variance by POD.
d. Planned care by provider view - activity & finance plan & actuals YTD.
e. Planned care by POD view - activity plan & actuals YTD.
f. Provider reporting.
g. Statutory returns.
h. Statutory returns - monthly activity return.
i. Statutory returns - quarterly activity return.
j. Delayed discharges.
k. Quality & performance referral to treatment reporting.
2. Readmissions analysis.
3. Production of aggregate reports for CCG Business Intelligence.
4. Production of project / programme level dashboards.
5. Monitoring of acute / community / mental health quality matrix.
6. Clinical coding reviews / audits.
7. Budget reporting down to individual GP Practice level.
8. GP Practice level dashboard reports include high flyers.

Pseudonymised – Mental Health, Maternity, IAPT, CYPHS and DIDS
1. Commissioner reporting:
a. Summary by provider view - plan & actuals year to date (YTD).
b. Summary by Patient Outcome Data (POD) view - plan & actuals YTD.
c. Summary by provider view - activity & finance variance by POD.
d. Planned care by provider view - activity & finance plan & actuals YTD.
e. Planned care by POD view - activity plan & actuals YTD.
f. Provider reporting.
g. Statutory returns.
h. Statutory returns - monthly activity return.
i. Statutory returns - quarterly activity return.
j. Delayed discharges.
k. Quality & performance referral to treatment reporting.
2. Readmissions analysis.
3. Production of aggregate reports for CCG Business Intelligence.
4. Production of project / programme level dashboards.
5. Monitoring of mental health quality matrix.
6. Clinical coding reviews / audits.
7. Budget reporting down to individual GP Practice level.
8. GP Practice level dashboard reports include high flyers.

Processing:

Prior to the release of identifiable data by North West DSCRO, Type 2 objections will be applied and the relevant patient’s data redacted.

Risk Stratification
1. SUS Data is sent from the SUS Repository to North West Data Services for Commissioners Regional Office (DSCRO) to the data processor.
2. SUS data identifiable at the level of NHS number regarding hospital admissions, A&E attendances and outpatient attendances is delivered securely from North West DSCRO to the data processor.
3. Data quality management and standardisation of data is completed by North West DSCRO and the data identifiable at the level of NHS number is transferred securely to Arden & GEM CSU, who hold the SUS data within the secure Data Centre on N3.
4. Identifiable GP Data is securely sent from the GP system to Arden & GEM CSU.
5. SUS data is linked to GP data in the risk stratification tool by the data processor.
6. Arden & GEM CSU who hosts the risk stratification system that holds SUS data is limited to those administrative staff with authorised user accounts used for identification and authentication.
7. Once Arden & GEM CSU has completed the processing, the data is passed to the CCG in pseudonymised form at patient level and as aggregated reports.

Pseudonymised – SUS and Local Flows
Data Processor 2 – GMSS (via DP1):
1. North West Data Services for Commissioners Regional Office (DSCRO) receives a flow of SUS identifiable data for the CCG from the SUS Repository. North West DSCRO also receives identifiable local provider data for the CCG directly from Providers.
2. Data quality management and pseudonymisation of data is completed by North West DSCRO and the pseudonymised data is then passed securely to Arden & GEM CSU for the addition of derived fields, linkage of data sets and analysis.
3. Arden & GEM CSU then passes the pseudonymised data securely to the Greater Manchester Shared Services (GMSS).
4. GMSS analyse the data to see patient journeys for pathway or service design, re-design and de-commissioning.
5. GMSS then pass the processed pseudonymised data to the CCG
6. Patient level data will not be shared outside of the CCG and will only be shared within the CCG on a need to know basis, as per the purposes stipulated within the Data Sharing Agreement. External aggregated reports only with small number suppression in line with the HES analysis guide.
Data Processor 4 – AQuA (via DP1):
1. North West Data Services for Commissioners Regional Office (DSCRO) receives a flow of SUS identifiable data for the CCG from the SUS Repository. North West DSCRO also receives identifiable local provider data for the CCG directly from Providers.
2. Data quality management and pseudonymisation of data is completed by North West DSCRO and the pseudonymised data is then passed securely to Arden & GEM CSU for the addition of derived fields, linkage of data sets and analysis.
3. Arden & GEM CSU then passes the pseudonymised data securely to AQuA to provide support for a range of quality improvement programmes including the NW Advancing Quality Programme. AQuA identifies cohorts of patients within specific disease groups for further analysis to help drive quality improvements across the region.
4. AQuA produces aggregate reports only with small number suppression in line with the HES analysis guide. Only aggregate reports are sent to the CCG.

Data Processor 5 – Academic Health Sciences Network (Utilisation Management Team) (SUS Only) (via DP1)::
1. North West Data Services for Commissioners Regional Office (DSCRO) receives a flow of SUS identifiable data for the CCG from the SUS Repository.
2. Data quality management and pseudonymisation of data is completed by North West DSCRO and the pseudonymised data is then passed securely to Arden & GEM CSU for the addition of derived fields, linkage of data and analysis.
3. Arden & GEM CSU then passes the pseudonymised data securely to the Academic Health Service (Utilisation Management Team) (AHSN UMT)
4. The AHSN UMT receive pseudonymised SUS data for Greater Manchester patients. They analyse the data to look at processes rather than patients, for example, A&E performance, process times, bed days as well as ‘deep dives’ to support clinical reviews for CCGs.
5. AHSN UMT produces aggregate reports only with small number suppression in line with the HES analysis guide. Only aggregate reports are sent to the CCG.
NHS Bury CCG, NHS Heywood, Middleton and Rochdale CCG, NHS North Manchester CCG and NHS Oldham CCG have a collaborative information sharing agreement in place to share pseudonymised SLAM and SLAM Backup data between these CCGs only. SLAM data is included under Local Flows and is available under the Health and Social Care Act 2012.
Pseudonymised – Mental Health and IAPT
Data Processor 1 – Arden & GEM CSU
1. North West Data Services for Commissioners Regional Office (DSCRO) receives a flow of data identifiable at the level of NHS number for Mental Health (MHSDS, MHMDS, MHLDDS) and MSDS. North West DSCRO also receive a flow of pseudonymised patient level data for each CCG for Improving Access to Psychological Therapies (IAPT), Child and Young People’s Health (CYPHS) and Diagnostic Imaging (DIDS) for commissioning purposes
1. Data quality management and pseudonymisation of data is completed by North West DSCRO and the pseudonymised data is then passed securely to Arden & GEM CSU for the addition of derived fields, linkage of data sets and analysis.
2. Arden & GEM CSU then pass the processed, pseudonymised and linked data to the CCG who analyse the data to see patient journeys for pathways or service design, re-design and de-commissioning.
3. The CCG analyses the data to see patient journeys for pathway or service design, re-design and de-commissioning
4. Aggregation of required data for CCG management use can be completed by the CSU or the CCG
5. Patient level data will not be shared outside of the CCG and will only be shared within the CCG on a need to know basis, as per the purposes stipulated within the Data Sharing Agreement. External aggregated reports only with small number suppression in line with the HES analysis guide.
Data Processor 2 – GMSS (via DP1):
Greater Manchester Shared Services (GMSS) have taken BI services in house and are now hosted by Oldham CCG. AGEM CSU flow data to a small team within GMSS. Access to the data is restricted to this team who access and manage the data. These BI services were previously provided by North West CSU.

GMSS deliver a range of services including;
• effective use of resources;
• data quality;
• information governance;
• market management;
• provider contract & performance management;

To enable GMSS to support these services a team within the GMSS have controlled access to SUS data at a pseudonymised level. Access to the data is controlled by AGEM CSU using users’ roles to ensure only appropriate users gain access to pseudonymised data. Data can then be used for reporting to support the range of services being offered to CCGs, and CCGs receive aggregate level reports from GMSS. GMSS staff are separate from Oldham CCG staff and accordingly have separate functions and roles.
1. North West Data Services for Commissioners Regional Office (DSCRO) receives a flow of data identifiable at the level of NHS number for Mental Health (MHSDS, MHMDS, MHLDDS) North West DSCRO also receive a flow of pseudonymised patient level data for each CCG for Improving Access to Psychological Therapies (IAPT) for commissioning purposes
2. The pseudonymised data is securely transferred from North West DSCRO to Arden & GEM CSU for the addition of derived fields, linkage of data sets and analysis.
3. Arden & GEM CSU then pass the processed, pseudonymised and linked data to the Greater Manchester Shared Services (GMSS)
4. GMSS analyse and conduct the BI function and then send the Pseudonymised data to the CCG.
5. Patient level data will not be shared outside of the CCG and will only be shared within the CCG on a need to know basis, as per the purposes stipulated within the Data Sharing Agreement. External aggregated reports only with small number suppression.
Data Processor 4 - Advancing Quality Alliance (AQuA) (via DP1):
1. North West Data Services for Commissioners Regional Office (DSCRO) receives a flow of data identifiable at the level of NHS number for Mental Health (MHSDS, MHMDS, MHLDDS).
2. Data quality management and pseudonymisation of data is completed by North West DSCRO and the pseudonymised data is then passed securely to Arden & GEM CSU for the addition of derived fields, linkage of data sets and analysis.
3. Arden & GEM CSU then passes the pseudonymised data securely to Advancing Quality Alliance (AQuA).
4. AQuA receives pseudonymised SUS data for Greater Manchester patients. They analyse the data to look at processes rather than patients, for example, A&E performance, process times, bed days as well as ‘deep dives’ to support clinical reviews for CCGs.
5. AQuA produces aggregate reports only with small number suppression in line with the HES analysis guide. Only aggregate reports are sent to the CCG.