Home Menu

Data Provision Notice (DPN) for GP Data for planning and research (GPDPR)

Data Provision Notice (DPN) for GP Data for planning and research (GPDPR)

NHS Digital has issued a DPN (data provision notice) as part of the development of GPDPR (GP data for planning and research). This is a planned replacement for the GPES (GP extraction service) to collect data for planning and research from general practices in England.

It is a legal obligation to comply with the DPN as a result of a new direction from the secretary of state for health and social care as part of the Health and Care Act 2012. Once fully established, this new collection will replace multiple other data collections from general practices.

 

NHS Digital has set out that, whilst general practice will still retain data controllership over patient records within their practice, once data has been extracted from patient records and shared with NHS Digital, NHS Digital will be the responsible and accountable data controller under the UK GDPR for data access and dissemination for planning and research.

 

Type 1 opt-outs will continue to be respected under GPDPR and a form for registering these can be found via the GP privacy notice which you will have received along with the DPN. The national data opt-out will not apply to the collection of this data by NHS Digital, as this is a collection which is required by law. However, it will be applied by NHS Digital on access or dissemination of data.

 

To comply with the DPN practices need to;

 

  • Update their Privacy notice
  • Register your practice participation on your GP clinical system. This only has to be done once.
  • Register type 1 opt outs in a timely fashion

 

General Practices will need to update their own Privacy information before this collection commences on 1 July 2021.

 

  • NHS Digital has produced an additional General Practice Privacy Notice for this collection on the NHS Digital website, which GPs can easily link to for this purpose.
    • This Privacy Notice provides important information to patients about their rights to opt out, including their right to exercise a Type 1 Opt-out to stop their identifiable data being shared with NHS Digital for purposes beyond their direct care.
    • To help GP practices provide information about the General Practice Data for Planning and Research data collection, NHS Digital has produced a GP Practice Privacy Notice which GPs can add as a link to their current privacy notice by publishing the following statement and link on your website:

"This practice is supporting vital health and care planning and research by sharing your data with NHS Digital. For more information about this see the GP Practice Privacy Notice for General Practice Data for Planning and Research."

  

  • Type 1 opt outs

 

    • Although NHS Digital is collecting data that is pseudonymised, it has agreed it will not collect data about patients who have registered a Type 1 Opt-out.
    • The Privacy Notice provides a link to a Type 1 Opt-out Form which patients can complete and send to their GP Practice by post or email.
    • When this is received, GP Practices must action this promptly by registering the Type 1 Opt-out on the patient’s record using the codes set out in the NHS Digital form by no later than the 30th June 2021. Patients may however exercise this right by using other forms available, or by simply asking at the GP Practice.
    • Opt – Out - Dissent code:

9Nu0 (827241000000103 |Dissent from secondary use of general practitioner patient identifiable data (finding)|)

    • Opt – In - Dissent withdrawal code:

9Nu1 (827261000000102 |Dissent withdrawn for secondary use of general practitioner patient identifiable data (finding)|)]

 

Useful key documents/links:

Related guidance...

Postponement to General Practice Data for Planning and Research (GPDPR)

Postponement to General Practice Data for Planning and Research (GPDPR) Type 1 opt-out form.pdf To provide more time to speak with...

NHS Digital - GP Workload Collection

This data collection will enable the NHS to better articulate general practice workload, understand appointment activity and utilisation...

Improving GP appointment data

Improving GP appointment data GP Contract Changes Improving GP appointment data NHSE/I has published information aimed at improving...

GDPR - General Data Protection Regulation 

The GDPR is a regulation that will come into force from 25th May 2018. Its intention is to strengthen data protection for individuals...

GP Practice and CCG Responsibilities for Data Protection Officers (DPO)

Since April 2018, CCGs have been required to provide IG advice and DPO support to practices. The new GP contract announced that this...

Amendments to GMS/PMS Contract Regulations - October 2020

Amendments to GMS/PMS Contract Regulations October 2020 Although there are a number of minor changes, those with the most relevance...

Two new enhanced services available from 1 July 2021

Two new enhanced services available from 1 July 2021 NHS England is offering practices the voluntary opportunity to participate in two...

Treatment of Dental Problems

Patients presenting with possible dental problems This guidance informs GPs of their obligations to patients either requesting...

Performance Matters- sharing medical records

Performance Matters- sharing medical records The LMC is regularly involved in representing and supporting doctors who have been...

CQC – New monitoring approach for GP practices

CQC – New monitoring approach for GP practices The Care Quality Commission (CQC) are moving on from their transitional monitoring...