More patient data ultimately means better care

Over the next four weeks, every household in England will receive a leaflet, Better Information Means Better Care. This explains how the NHS is upgrading its data systems and what people should do if they have any questions or concerns.

‘We know worryingly little about how all the different parts of the NHS are working together to provide safe, joined up care for patients’

If you believed everything you read in the newspapers about this upgrade, you would think that the NHS was either about to give away everyone’s confidential data free of charge or flog it to the highest bidder. Needless to say, we are doing no such thing: to do so would be unethical, illegal and unconstitutional. But what actually is the plan?

Upgrading our systems

As the Organisation for Economic Cooperation and Development reported recently, the NHS has some of the world’s best health information systems. Dating back to the 1980s, we have been collating information about every hospital admission nationwide. By pulling this information together and analysing it in deidentified formats, analysts can compare the safety of different NHS hospitals, monitor trends in different diseases and treatments, and use the data to plan new health services.

Currently we are missing this type of information for much care provided outside hospitals. We do not collect it nationally from all GP practices, for example, nor from ambulance trusts or community health services. As a result, we know worryingly little about how all the different parts of the NHS are working together to provide safe, joined up care for patients. As the chief inspector of hospitals put it, the NHS is currently “flying blind” in this regard.

So the purpose of the care.data project, which has secured support from the British Medical Association and the Royal College of GPs, is to address these shortcomings. Building on the successes of our existing hospital episode statistics system, we will bring together all of this missing information in order to obtain a more rounded and more complete picture of the care being delivered by the health service.

Protecting privacy

As we have been doing for decades with hospital data, information from GP practices and other care settings will only be extracted as a series of codes, not as words and sentences.

‘It would be irresponsible not to make the maximum use of “amber data” for the benefit of patients’

These codes will then be linked with a patient’s hospital codes using an automated system before being made available in three different data formats. Each format is protected by a different suite of privacy safeguards as specified by the Information Commissioner’s code of practice on anonymisation.

For simplicity, I refer to these formats as “green”, “amber” and “red” data, though their technical names are “anonymous or aggregated data”, “pseudonymised data” and “personal confidential data” respectively.

Green, amber, red

“Green data” is where we will publish the average values for large groups of patients or completely anonymous figures. For example, we might compare Ashford versus Bury in terms of the average time between presenting to a GP with bowel symptoms and having an operation for colon cancer.

Green data is published free of charge for all to see. Before publishing it we take extra care not to release information about rare conditions or any combinations of characteristics that might identify individuals from the data.

‘In a few exceptional circumstances “red data” will be available where legally required, for example in a public health emergency’

“Amber data” is where we remove each patient’s identifiers (their birthday, postcode and so on) and replace them with a meaningless pseudonym that bears no relationship to their actual identity. Amber data is essential for tracking how individuals interact with the different parts of the NHS and social care over time.

For example, using amber data we can see how the NHS cares for cohorts of patients who are admitted repeatedly to hospital but who seldom visit their GP. In theory, a determined analyst could attempt to reidentify individuals within amber data by linking them to other data sets. For this reason we never publish amber data. Instead, amber data is only made available under a legal contract to approved analysts for approved purposes. The contract stipulates how the data must be stored and protected, and how the data must be destroyed afterwards. Any attempt to reidentify an individual is strictly prohibited and there is a range of criminal and civil penalties for any infringements.

Over the years, many of the most innovative uses of amber hospital data have come from outside organisations, including universities, think tanks and data analytics companies. It would be irresponsible not to make the maximum use of amber data for the benefit of patients.

‘We want to make the most of the information that the NHS already collects’

In future, we want charities and small academic units to be able to use amber data for the benefit of patients. Likewise, we think it would be wrong to exclude private companies simply on ideological grounds; instead, the test should be how the company wants to use the data to improve NHS care. Plus, as Polly Toynbee put it, if “it aids economic growth too, that’s to the good”.

Finally, in a few exceptional circumstances the Health and Social Care Information Centre will make “red data” available where legally required to do so, for example in a public health emergency such as an epidemic.

In future, red data may also be made available to an organisation that has obtained the patient’s explicit consent or has been granted legal approval by the secretary of state for health or the Health Research Authority following independent advice from the Confidentiality Advisory Group. The group considers each application in great detail against the legal framework and recommends whether approval should be provided together with any conditions.

Applicants for red data would need to demonstrate that the research was in the public interest and for the benefit of the health service, it is not possible to use information that does not identify patients and it is not possible to ask patients for their permission.

Patients have a choice

We want to make the most of the information that the NHS already collects. By drawing it together from all parts of the health service, not just hospitals, we will better be able to understand the causes of ill health, learn how to treat patients more efficiently and find out what happens to patients after they leave hospital. 

However, we are giving people a choice. If a patient is happy for their information to be used for these purposes then they do not need to do anything: there are no forms to complete and there is nothing to sign. But if they have any concerns, they can talk to their GP or contact the dedicated patient information line 0300 456 3531.

Ultimately, this is an opportunity for all of us to help the NHS deliver high quality care for all by making the most of the information collected about us.

Dr Geraint Lewis is chief data officer at NHS England