NHS Digital Data Release Register - reformatted
Wolverhampton City Council
Project 1 — DARS-NIC-41597-J6M1R
Opt outs honoured: No - not applicable for this dataset, No - deaths data flowing to Local Authorities does not require the application of patient opt outs, No - data flow is not identifiable, No - Birth data is not considered as personal confidential information - however when handling applications for the data we treat these data as identifiable, even though patient opt outs do not apply (Does not include the flow of confidential data)
Sensitive: Non Sensitive, and Sensitive
When: 2017/09 — 2019/11.
Repeats: Ongoing, One-Off
Legal basis: Section 42(4) of the Statistics and Registration Service Act (2007) as amended by section 287 of the Health and Social Care Act (2012), Health and Social Care Act 2012 - s261(5)(d)
Categories: Identifiable, Anonymised - ICO code compliant
- Primary Care Mortality Database
- Vital Statistics Service
- ONS Births
- Primary Care Mortality Data
- Civil Registration - Births
Public Health statitical monitoring to identify rates, trends and key demographics to inform the Annual Public Health Report and the planning of public health services and commissioning.
The ONS births and deaths data is of significant value to the Local Authority in enabling analysts to respond to local public health needs. Evaluations of births and deaths in their local area allows local authorities to perform the following: a) Measuring the health, mortality or care needs of the population, for specific geographical area or population group; b) Planning, evaluating or monitoring health and social care policies, services or interventions; and, c) Protecting or improving the public health, including such subjects as the incidence of disease, the characteristics (e.g. age, gender, occupation) of persons with disease, the risk factors pertaining to sections of the population, investigating specific areas of local concern relating to the health of the local population, or the effectiveness of medical treatments. The births and deaths data both contain identifiable data which is required when linking into other datasets to enhance and verify the statistics produced, or to investigate specific areas of local concern relating to the health of the local population, e.g. deaths data is used to produce suicide audits by linking into hospital / GP / social care data and births data can be linked into child care / social care systems when infant deaths are investigated usually as part of local “Safeguarding Children” projects. Such local investigations will reflect local need and thus vary in relation to the specific local authority, but the detail below provides specific examples of such local investigations which provide evidence on why identifiable data is needed in order to carry out the purposes stated within a), b) and c) above. Each Local Authority will only be permitted to process the data in the way outlined in this application. Processing outside the terms of this application will require a separate application as an amendment to this agreement In relation to mortality data : Suicide Audit – As part of on-going (or the introduction of) suicide audit processes identifiable information will be required to support this work. Such audits require specific identifiable fields, including postcode of usual residence and postcode of place of death (further refined using the place of death text) to analyse and investigate of deaths in public places to support work on accident prevention strategies and the identification of hotspots and locational characteristics for accidental harm and suicide. For example, exact postcode us used to calculate distance from home address to identify suicide hotspots which are a distance from place of resident as a further means of classifying risk. NHS number, date of death and date of registration fields are used when conducting local audits at the coroner’s office, to match their records with the death record in order to supplement information which is subsequently aggregated within the final internal report. To expand on what is noted above, postcode of residence and place of death (further refined using the place of death text) is used for hotspot mapping and in particular is used to inform suicide prevention work through target hotspot areas of location types within the county and undertake specific preventative work. Pseudonymised data would be insufficient as lower super output areas or partial postcode) cover too large an area to identify exact locations and features or calculate distance from home, especially in more dispersed rural areas, where locations may be many miles apart. This granularity of data is required since the local authorities are where appropriate taking specific locally based action rather than just authority wide activity. The suicide audit process involves collecting information from services such as police, healthcare providers and GP practices of the factors involved in the suicide and NHS number, date of death and other identifiable data will be essential for doing this. As with the hotspot work this is about understanding risk, detecting local issues to inform evidence-based interventions addressing known local factors. Accidental/Preventable Deaths – Postcode of usual residence and postcode of place of death (further refined using the place of death text) are used for the analysis and investigation of deaths in public places to support work the identification of hotspots and locational characteristics for accident – with identification of types of areas (e.g. parks, railway lines, pavements) as well as particular locations. This level of analysis enables preventative work to be targeted to high risk areas (both in terms of residence as well as occurrence). As a specific example relating to one Local Authority, it carried out work that identified a number of suicides at a particular railway location, and hence facilitated suicide prevention training with staff members at their local Railway Station. In conjunction with postcode of usual residence and postcode of place of death, detailed analysis of cause of death allows the monitoring of patterns of preventable or amenable disease, particularly avoidable deaths including the major killers, i.e. circulatory, cancer and respiratory disease. Seasonal monitoring of deaths – Date of death is used both to establish seasonal patterns of mortality (such as excess winter deaths) and the correlation of this with data on weather conditions and local health and social care system pressures, and in the case of any deaths going to coroner to track the length of time between death and registration. In relation to local population health needs: Bespoke geography analysis – The postcode also enables analysis by non-coterminous geographies such as highly trafficked roads so the Local Authority can complete aggregate analysis of areas with particular risk factors – for example to see if people living on main roads have high risks of respiratory disease than people who live on cul-de-sacs. The postcode and place of death text also enables Local Authorities to identify locations of particular types such as care homes or other residential institutions, analysis of deaths by homes enables targeted prevention work (such as control of infection or falls prevention). Further, bespoke geographies created by postcodes support the assessment of environmental risks to health. For example, a Local Authority may be required to investigate a number of residential streets which have been built on potentially contaminated ground to see if there are any unusual disease patterns. One specific Local Authority needed to identify deaths where the person was resident in particular streets, in the case of a previous cancer cluster possibly relating to chemicals in soil. Postcodes are used to identify births along these roads to see if there are increased risks of low birth-weight or stillbirths. Deprivation and inequalities – Postcode is also used to sum data to aggregate geographies that are not based on LSOAs, to facilitate partnership working and to look at small area clusters such as pockets of deprivation, poor quality housing and inequalities in healthcare provision which are all found to be smaller than an LSOA level, identifying the conditions contributing to the greatest levels of premature and preventable deaths, and identifying areas for further investigation. Child deaths and stillbirths – Identifiable data is also required to provide any data needed to fulfil our duties for audit under the Child Overview Death Panel and other Safeguarding investigations – using NHS numbers to identify these cases and look for patterns, date of birth of mother/postcode of mother to investigate trends based on mother’s location or age. Audit of medical professionals – there is a requirement for NHS number to facilitate clinical audits by medical professionals into unusual patterns of death; this is part of the Local Authority’s statutory duty to protect the health of the population from risks to Public Health, from both medical conditions and also from clinical practice. Some recent specific examples include :- • An unusually high number of deaths from epilepsy were noted from the data, and these were audited against GP practice data having had access to identifiable data to identify records. • GP practices raised concerns about health in their practices, having noticed clusters of cases that they request the Local Authority to investigate. • Following the Shipman Enquiry recommendations, Local Authorities are required to investigate any concerns raised about clinical practitioners. This duty was given to PCTs in 2007, but information source is the PCMD and is part of the PH duty to provide analysis and evidence to CCGs. Seasonal monitoring of births – A Local Authorities have a requirement for the inclusion of date of birth of child as it is used to monitor seasonal patterns of births. Postcode of usual residence of mother and postcode of place of birth of child are also used to establish and monitor distance from home to place of birth and monitor catchment areas for different providers for future service planning covering areas based on postcodes rather than LSOA. This will not include any data sharing with providers or other third parties. Age of mother is required to investigate trends in both young mothers (to support teenage conception and Family Nurse Partnership programmes) and older mothers (to support service planning for higher risk pregnancies). This will not include any data sharing with providers or other third parties.
The projects are carried out in order to improve public health and will result in local adjustments to services to reduce mortality where possible and inform decisions and policies. This data assists Local authorities in tailoring local solutions to local problems, and using all the levers at their disposal to improve health and reduce inequalities and it helps to create a 21st century local public health system, based on localism, democratic accountability and evidence as directed in the Health and Social Care act 2012. Benefits of using births / deaths data The PCMD is of great benefit to health and social care, and the use of it has led to considerable benefits to public health. The PCMD is used to identify patterns and trends in mortality rates, life expectancy and premature death, highlighting differences between geographic areas, age, sex and other socio-economic characteristics. It is also used specifically to identify health inequalities and differences between areas which is critical for the planning, distribution and targeting of health, care and public health services. It is used to set recommendations in the Annual Public Health Report, which inform the commissioning and coordination of public health services. Further to preventable deaths use, premature deaths can be analysed, audits are undertaken to identify all those who died prematurely. This was used to look at the care pathways, develop new prevention programmes and implement positive change within primary care. Risk prevention for public health. This is covered by the statutory duty to provide a Public Health Advice Service. It is used within the Joint Strategic Needs Assessment to identify priority communities in the Local Authority, to establish the impact of different risk factors and social determinants on mortality rates, and informs the identification of JSNA priorities for the Local Authority. The JSNA directly informs the priorities in the Joint Health and Wellbeing Strategy, which is produced by the Health and Wellbeing Board, and is directly reflected in the commissioning plans of health and care organisations locally. As well as this strategic focus, the PCMD also informs specific actions, decisions and changes within the area covered by the Local Authority. An example of this is suicide prevention work, where PCMD data has aided the identification of suicide hotspots and risk factors which has informed the local suicide prevention strategy which has directed interventions and changes within the county. As the PCMD informs the Joint Strategic Needs Assessment, Health and Wellbeing Board and other multi-agency work, and has a direct relationship with commissioning plans and specific actions, the benefits are achieved collective across the local health and care economy through the Health and Wellbeing Board membership organisations (including health commissioners, social care, public health, council members, police and probation services, Healthwatch and other community representatives) and beyond. The benefit to the local population is that health, social care and public health services are tailored to the issues and areas of greatest needs and are focused on reducing health inequalities, with specific reference to life expectancy and mortality rates. Reductions in premature mortality rates are influenced by the design and targeting of local services to address the differences highlighted through an analysis of the PCMD. Specific interventions around suicide and accident prevention use information from the PCMD to identify specific hotspots and risk factors locally, which in turn are used to protect the public health. This data assists local authorities in tailoring local solutions to local problems, and using all the levers at their disposal to improve health and reduce inequalities and it helps to create a 21st century local public health system, based on localism, democratic accountability and evidence as directed in the Health and Social Care act 2012. Specific steps taken to protect the health of the local population using births and deaths data within a Local Authority will include the setting of priorities within the Annual Public Health Report, the Joint Health and Wellbeing Strategy and the commissioning plans of local health and care organisations. These strategic documents are underpinned by an analysis of births and mortality data including local, regional and national variations for the purposes of identifying priority areas, highlighting where health inequalities are greatest, identifying the conditions contributing to the greatest levels of premature and preventable deaths, and identifying areas for further investigation. The health of the local population is also protected through the monitoring of monthly trends in mortality rates and birth rates to identifying any emerging trends or sudden increases. The PCMD is also vital to facilitate the local investigation of mortality rates for individual GP practices (consistent with the recommendations of the Shipman Inquiry) and to investigate differences between geographic areas as required. Mortality and births data is also used to inform the location of services and social marketing activities to address the areas of greatest need within the county. Health protection projects using births and death data include the monthly monitoring of deaths from Mesothelioma, drug-related deaths, and alcohol-related deaths; the suicide audit and suicide prevention task group; the monitoring of deaths from infectious and vaccine preventable diseases; the investigation of outcomes of healthcare associated infections; the monitoring of winter deaths to identify pressures on care services; and the monitoring of child deaths for the local safeguarding children board. Statistical outputs using births and mortality data include local breakdowns of mortality rates by area, deprivation, age sex and CCG locality (preventable deaths, circulatory disease, cancer and suicide) for Health and Wellbeing Board and Public Health outcomes reports; birth rates, distribution of births by location/setting and life expectancy for JSNA community profiles; detailed analyses of overall and condition-specific mortality rates, life expectancy, stillbirths, births by maternal age, low birthweights, abortions for the Annual Public Health Report; population projections for non-standard geographic areas (including new town and development areas); and the analysis of birth rates, birth weight, stillbirths and mortality rates from specific conditions for service areas and health needs assessments as required.
A mixture of regular annual projects and ad hoc projects triggered by local conditions will require the use of births and deaths data that will result in published summary statistics for public health projects, and these may be used internally or externally with partners in the project. Typical uses of deaths data are for the following: a) Joint Strategic Needs Assessments (JSNAs); b) Joint Health and Wellbeing Strategies; c) the annual report of the Director of Public Health; d) reports commissioned by the Health and Wellbeing Board; e) public health and wider Local Authority health and wellbeing commissioning strategies and plans; f) public health advice to NHS commissioners; g) local health profiles; h) health impact assessments i) Suicide audits (this specifically requires NHS number) j) End of life care projects k) Abdominal Aortic Aneurysm (AAA) screening programme l) responses to internal and external requests for information and intelligence on the health and wellbeing of the population. Typical uses of births data are for the following: a) Joint Strategic Needs Assessments (JSNAs); b) Joint Health and Wellbeing Strategies; c) the annual report of the Director of Public Health; d) reports commissioned by the Health and Wellbeing Board; e) public health and wider Local Authority health and wellbeing commissioning strategies and plans; f) public health advice to NHS commissioners; g) local health profiles; h) health impact assessments i) responses to internal and external requests for information and intelligence on the health and wellbeing of the population. The specific content and target dates for these outputs will be for the Local Authority to determine, although it is required to comply with national guidance published by the Department of Health, Public Health England and others as appropriate, for example on the timetable for publishing refreshed JSNAs. All outputs will be of aggregated data (with small numbers suppressed) as per the ONS Disclosure Guidance.
The processing activities carried out by NHS Wolverhampton CCG are purely regarding IT support, involving storage, backup and server management of the data. Access to data by NHS Wolverhampton CCG is restricted to IT support staff in fulfilment of the IT support service commissioned by the Local Authority, and the CCG may not use or access the data for any other purpose. Deaths data The PCMD system holds mortality data which is made available, via an online system, to qualifying applicant organisations continuously for a year at a time. Once access is granted the approved users may process the data to produce statistical output for public health purposes, this may be for internal review or summarised to an anonymised level for publication. The standard applied for this is the ONS Disclosure control guidance for birth and death statistics. Link: http://www.ons.gov.uk/ons/guide-method/best-practice/disclosure-control-policy-for-birth-and-death-statistics/index.html Births data The births data for each defined local authority is distributed to the LA each quarter by secure e-mail and an annual refresh of the births data containing any required updates is also supplied by secure e-mail. Approved users may process the data to produce statistical output for public health purposes, this may be for internal review or summarised to an anonymised level for publication. The standard applied for this is the ONS Disclosure control guidance for birth and death statistics. Link: http://www.ons.gov.uk/ons/guide-method/best-practice/disclosure-control-policy-for-birth-and-death-statistics/index.html Various extracts from the births and deaths data will be taken for relevant time periods and localities to enhance and inform public health projects for the local area such as: End of life projects, epidemiology, local mortality variations and local GP mortality variations. The processing will vary depending on the precise nature of the project, but will align with the public health statutory function. Access to the data is provided only to the named applicants within the Local Authority only, and will only be used for the health purposes outlined above. The data will only be processed by the aforementioned Local Authority employees in fulfilment of their public health function, and will not be transferred, shared, or otherwise made available to any third party, including any organisations processing data on behalf of the Local Authority or in connection with their legal function. Such organisations may include Commissioning Support Units, Data Services for Commissioners Regional Offices, any organisation for the purposes of health research, or any Business Intelligence company providing analysis and intelligence services (whether under formal contract or not). Conditions of supply and controls on use The Director of Public Health will be the Information Asset Owner for the births and deaths data and be responsible on behalf of the Local Authority to NHS Digital for ensuring that the data supplied is only used in fulfillment of the approved public health purposes as set out in this agreement. The Local Authority confirms that the Director of Public Health is a contracted employee to the permanent role within the Local Authority, accountable to the Chief Executive. The application process also requires a signed ONS Declaration of Use form for each person who is to access the data for their Local Authority. Data must be processed according to the terms in this Agreement. Data must only be used for public health statistical purposes and not used for administrative and other activities such as list cleaning. This data may only be linked to other data with explicit permission from ONS/NHS Digital, and only as described in this Agreement. Data cannot be shared with any third party who is not identified in this Agreement at anything other than an aggregated level (with small numbers suppressed) as per the ONS Disclosure Guidance, and where stated within this agreement. For deaths data: Log-in details are provided to approved users only to access the Primary Care Mortality Database (PCMD). This is managed by the NHS AIS Exeter team. Users are able to view a time series of deaths data for their Local Authority only from this system. For births data: Data is to be disseminated by NHS Digital via secure email to users using an nhs.net or a .gcsx.gov.uk email address. There are 4 quarterly datasets disseminated for any given year plus an annual dataset. For both births and deaths data (Vital Statistics reports): An annual set of Vital Statistics reports aggregated at national and local level are produced from the births and deaths data. This primarily covers a combined set of fields from the births and deaths data with some fields derived from using the births and deaths data. These data tables have no suppression applied as users receive record level births and deaths data via this application. These tables are disseminated by NHS Digital via secure email to users via either an nhs.net or a .gcsx.gov.uk email address.
Project 2 — DARS-NIC-230538-B9J9Z
Opt outs honoured: No - deaths data flowing to Local Authorities does not require the application of patient opt outs (Does not include the flow of confidential data)
When: 2019/08 — 2019/08.
Legal basis: Health and Social Care Act 2012 – s261(1) and s261(2)(b)(ii)
- Primary Care Mortality Data
The purpose of this project is to: - provide a whole system overview of current end of life care and need within Wolverhampton; - understand how and when people are identified as being at the end of their life and who dies an “expected” death without having been identified for end of life care; - understand what services people use at the end of their lives and how much is spent on these; - discover where there are opportunities to redesign services to better meet the needs of Wolverhampton residents, ensure a good patient experience with financial sustainability, and reduce health inequalities . People are often in touch with a range of services throughout the last year of their lives, including residential or nursing homes, community services, palliative care team, acute hospital admission or A&E attendance, and their GP. Currently information about service usage is held by each service area in disparate datasets, so there is limited understanding about the flows of people through the system and how resources could be redistributed to improve patient outcomes and experience. There is some evidence from published research that quality of experience and costs can be improved by the use of community provision and proactive care planning, but a limited understanding of how and where improvements can be made locally and what level of resource is currently spent on people at the end of their lives. Currently each organisation providing care at the end of life only has a piece of the data puzzle, and this project would bring all that data together in one place i.e the Local Authority, so that analysis can be focussed around the patient, rather than the service. The NHS Digital Primary Care Mortality Data on deaths registrations is key to this project, because it provides a “gold standard” record of all deaths, that other datasets (in this case GP data, Social Care, Hospital, Palliative Care and Community data) can then be linked back to, by using the NHS number . This is vital to ensuring that information about all deaths and end of life experiences are captured, not just those of people who were proactively identified as end of life, or those who died in hospital. This information has been requested to facilitate the work of the Local Authority operating, on this issue, as part of an Integrated Care Alliance (ICA); a partnership forum established in 2017 between health and social care organisations in Wolverhampton, including GPs, Clinical Commissioning Group, Council, NHS Trust, Compton Care (palliative care provider) and others. The end of life workstream is just one of a number of priority areas that are being developed under the ICA, and it is intended to use this project as an exemplar for how data could be used in the future to promote Population Health Management across all workstreams; focusing on delivering outcomes for population groups, rather than activity for specific conditions. The ICA works together on a number of workstreams. Organisations within this partnership may contribute to suggestions on which questions of interest would be beneficial to explore. However, the use of the data for the purposes outlined in the agreement is solely decided upon by the Local Authority under their role as Data Controller. Additionally, the Local Authority Public Health team has a legal basis for conducting needs assessments on a population level.
The outputs will form the Local Authority’s input into the ICA discussions. The Local Authority will define the use of the data, but the outputs will then be shared with ICA who may act upon those outputs or consider them alongside other evidence in their decision-making processes. These evidence-based decisions about integrated care provision and resource distribution via the ICA programme will also provide a baseline upon which the success of any service development can be evaluated . The three overarching aims of the ICA are to improve patient experience, to improve population level outcomes, and to make the health and social care system financially sustainable. For end of life, the intention is to increase the number of patients experiencing a good quality death, to increase the number of people dying in their home or preferred place of death, and to achieve value for tax payers’ money by redistributing resource to where it achieves the biggest impact, for example by providing additional community services where these would result in a comfortable death in the home, rather than an expensive emergency admission. The additional intended benefit is to use this project as an exemplar project to demonstrate the value of using a Population Health Management approach to service redesign – this would involve sharing a summary of the methodology and headline findings from the data analysis with the wider network of organisations working on Integrated Care across the country. Learning and headline findings will be disseminated across the regional West Midlands Population Health Management network, led by Public Health England and NHS England, as well as the national NHS England Population Health Analytics network, in the hope of increasing the understanding of what is possible in terms of information governance and population level analytics using linked datasets.
Data will be used to produce reports, charts and dashboards to analyse the data for the purposes listed. Any outputs shared outside the Council will be at aggregate level with small number suppression. Outputs will take the form of reports and presentations, which will be made available to all organisations in the Integrated Care Alliance, as described above. Furthermore, a summary of key findings will also be disseminated to the wider network of organisations working on Integrated Care across the country as well as other key regional and national networks such as the West Midlands Population Health Management Network and NHS England’s Population Health Analytics Network. The specific lines of enquiry are detailed in the table below and will be published approximately two to six months following DARS application approval. 1.Describe "expected deaths" (ONS case definition*) in terms of demographics - By combining demographics from all datasets, no duplicates, death registration as gold standard 2.Describe palliative care identification; when does this occur, are those identified different (demographics) from those who have an expected death without identification - By combining PCMD, primary care and demographics 3.Describe non-elective activity at end of life for expected deaths; when (including time of day, day of week, in relation to date of death), why (presenting condition/symptom), how (A&E, ambulance) are patients admitted, length of stay and discharge destination, level of need as described by SPC for those in receipt - By using expected deaths subset from PCMD, SUS data description, SPC 4.Does the above vary depending on whether patient has palliative care flag, admission avoidance flag, advanced care plan recorded before admission - By combining primary care and SUS 5.Describe any "unexpected deaths" for people on an end of life register e.g. accident, suicide - Those that meet exclusion criteria as per ONS definition but have palliative care flag in EMIS 6.Describe costs associated with palliative care for those identified and not identified - By examining costs from in-patient, A&E, outpatient, community (NB GP costs not possible) 7.Where preferred place of death is captured, describe place of death and matches - By combining Death registration and primary care 8.Equity audit of specialist palliative care services - By examining demographics of those in receipt of Compton or in patient palliative care services, compared with expected deaths cohort, does this vary by GP practice 9.Describe timelines of health and social care usage - identify services received in parallel - Plotting dates in relation to death for contacts in all datasets
The proposal is to take one year of data on deaths for Wolverhampton residents (those that occurred in 2017 from the PCMD data) and link this to data from key services within the City; GP record, in-patient, out-patient and A&E hospital activity data, NHS community and specialist palliative care services, social care client data, and Compton Care palliative care services. The DSCRO will create a pseudonymisation key using Open Pseudonymiser (www.openpseudonymiser.org) which will be unique to this project. This key will be shared with each agency providing data, who will apply the key to the NHS number in a pre-defined dataset. Only those fields which are necessary for this analysis will be requested, rather than complete datasets. Any patient identifiable data (date of birth, address, name) will be removed or replaced with non-identifiable proxy, for example date of birth would be replaced with age band. These steps will ensure that patient confidentiality is maintained. This pseudonymised data from the GPs, the Trust, the Local Authority and Compton Care will then be shared via secure email (nhs.net or GSX) with the CSU. The DSCRO will provide pseudonymised SUS and PCMD datasets to the CSU as the processor, to conduct the record linkage using pseudo-NHS number, so that only those records which relate to deaths in the specified time period would be in the linked dataset, thereby ensuring that the data analysed is the minimum amount necessary to achieve the objectives. Once the data has been linked using the pseudo-ID number, the data on those who died within the specified year linked to the other datasets will be further pseudonymised by the CSU by removing the pseudo-NHS number and replacing with a new unique identifier before leaving the CSU, thus avoiding the potential for reidentification of any individual by Public Health analysts. The linked dataset will be shared by the CSU via secure email with specified analysts who are employees in Public Health at the City of Wolverhampton Council, who will then produce the specified analysis at an aggregate level, in line with the HES Analysis Guide . The aggregate outputs of the analysis will be shared with all included partner organisations in the Integrated Care Alliance, but the dataset will remain securely at the Council. None of the other organisations providing data will receive the linked dataset and therefore will not be able to re-identify any individual. No attempt will be made by Public Health to perform any further matching of the dataset or to re-identify any individuals. Access to patient/client level identifiable Adult Social Care data is on a role-based access basis within City of Wolverhampton Council. Analysts within the Public Health department (who are not part of the wider Council business intelligence team) do not have the ability to view or access these records. Pseudonymisation of social care records would be performed by a social care analyst who has role-based access permissions. Likewise Public Health datasets are stored in a secure area of a separate server, which no one beyond the identified Public Health analysts has access to, and therefore there is no potential for the social care records and the final linked dataset to be viewed concurrently or by the same individual, thus avoiding any possibility of re-identification of an individual from the data. A local data processing and sharing agreement for the project covering all providers supplying data, the Local Authority as the Data Controller and the CSU as the processor has been written in accordance of IG rules for each organisation, with input from specialist IG staff across these organisations. No patient level data will be linked other than as specifically detailed within this agreement and data will only be used to carry out purposes specified in the Data Sharing Agreement. Data will only be shared with those parties listed and will only be used for the purposes laid out in the application/agreement. The data to be released from NHS Digital will not be national data, but only that data relating to the specific locality of interest of the applicant. The processing activities carried out by NHS Wolverhampton CCG are purely regarding IT support, involving storage, backup and server management of the data. Access to data by NHS Wolverhampton CCG is restricted to IT support staff in fulfilment of the IT support service commissioned by the Local Authority, and the CCG may not use or access the data for any other purpose. Analysts in Public Health undertake compulsory Information Governance training every year. All staff understand their responsibilities with regard to receiving, storage, processing and handling of data. All access to data is managed under Roles-Based Access Controls.