What is it?

As NHS and social care organisations such as local authorities in Devon work ever closer together within our Integrated Care System (ICS) there is an increasing need to legitimately share and link data between its partner organisations within the ICS. The One Devon Dataset brings together this data from health and social care providers across Devon to help ensure effective Population Health Management.

Who is involved?

Participation is open to the many health and social care organisations in Devon such as:

GP practices
NHS trusts
local authorities

Benefits of the One Devon Dataset

Linking health and care data held across the system for people in Devon will support:

improvements to direct patient care
increased understanding of the existing use of health and social care services in Devon, including the connections between different services
a system-wide view of the population’s need for future health and social care services, looking across traditional organisational boundaries
the ability to improve clinical outcomes
the ability to identify service improvements opportunities, for instance where patients use multiple services or where there is significant overlap between services
public health intelligence work fulfilling statutory role of improving the health and wellbeing of people in Devon, including Joint Strategic Needs Assessment, Health Needs Assessments, Health Equity Audits and Health Impact Assessments
improved outcomes for patients/service users and carers

Roles and responsibilities

Controllers make decisions about processing activities. They exercise overall control of the personal data being processed and are ultimately in charge of and responsible for the processing.

Joint controllers decide the purposes and means of processing together – they have the same or shared purposes. Controllers will not be joint controllers if they are processing the same data for different purposes. Data processors act on behalf of the relevant controller and under their authority. In doing so, they serve the controller’s interests rather than their own.

Odd Use Request Board

The ODD Use Request Board meets to review any new requests for data sharing and prior to that sharing taking place. Its membership consists of clinicians, Caldicott Guardians and a Data Protection Officer across the Integrated Care System to ensure all aspects of the request are reviewed and validated.

All requests whether approved or declined are retained within the library.

Re-identification – only those organisations that have direct care responsibilities will receive re-identified data such as a GP surgery.

Data security and privacy

Health and social care organisations across Devon collect data regarding its patients and its care and services. Data protection legislation ensures we keep your data secure and confidential by having in place robust mechanisms with only organisations who have a legitimate reason having access to the data.

Legal basis

Article 6 (1)(e) processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, specifically processing for “the exercising of a function conferred on a person by an enactment or rule of law”
Article 9 (2)(h) processing is necessary for the purposes of preventive or occupational medicine, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services

The Health & Social Care (Safety & Quality) Act 2015 places a duty on organisations providing health and adult social care services to share data where it facilitates the provision of care to an individual in their best interests, unless the individual objects or it relates to an anonymous access service.

How long is the data held for?

All data will be held in accordance with the retention periods set out in NHSX Records Management Code of Practice 2021. Secure disposal to be to levels required by the NHS Data Security and Protection toolkit.

If you would like to find out more, contact your health or social care provider directly.

Your rights

Data protection legislation allows you to ask for a copy of the data an organisation holds about you. If you would like to see this information you should contact the organisation providing your care.

You can find out more about your rights from the Information Commissioner’s Office website. Your health or social care provider’s website should also have details on how your data is used.

Enquiries or complaints

Should you and an enquiry or wish to raise a complaint these should be directed to the organisation providing your health or social care.