NHS Digital Data Release Register - reformatted
Department For Business And Trade projects
4 data files in total were disseminated unsafely (information about files used safely is missing for TRE/"system access" projects).
Understanding the extent of product-related injuries through Emergency Care Data Set — DARS-NIC-687582-X2P3K
Type of data: information not disclosed for TRE projects
Opt outs honoured: Anonymised - ICO Code Compliant, No (Does not include the flow of confidential data)
Legal basis: Health and Social Care Act 2012 s261(2)(a)
Purposes: No (Ministerial Department)
Sensitive: Sensitive
When:DSA runs 2024-06-28 — 2027-06-27 2024.07 — 2024.11.
Access method: Ongoing
Data-controller type: DEPARTMENT FOR BUSINESS AND TRADE
Sublicensing allowed: No
Datasets:
- Emergency Care Data Set (ECDS)
Expected Benefits:
Processing the NHS England data is expected to provide insights to support OPSS operations and improve policy and regulation and allow OPSS to track its impact in reducing product-related injuries over time.
The results of this work will be used by OPSS to help prevent people and places from product-related harm. The analysis is expected to allow OPSS to understand more about the injuries sustained to support operations and policy makers. For example, identifying how and where injuries are more likely to take place and to which demographics, so policy and regulation can be improved, and communications can be targeted to prevent future injury.
The use of the data could:
> advance understanding of regional and national trends in health and social care needs.
> advance understanding of the need for, or effectiveness of, preventative health and care measures for particular populations
> inform policy makers
> prevent product-related injuries, leading to reduced instance of these injuries within the NHS.
These benefits are expected to be achieved within 3 years after data receipt.
The work is also in the public interest as it is expected to provide insights into the demographics, and circumstances, and severity of the injuries to increase public awareness, and deliver targeted communication campaigns.
It is hoped that through publication of findings in appropriate media, the findings of this research will add to the body of evidence that is considered by the bodies, organisations and individual care practitioners charged with making policy decisions.
Product working groups will be worked with to communicate insights and discuss the number and severity of injuries caused by products, so that OPSS can work with manufacturers to make products safer.
Outputs:
The expected outputs of the processing will be:
> Reports of findings to OPSS teams: including an initial preliminary findings report, and subsequent reports on an ad-hoc basis.
> Submissions to peer reviewed journals: one or two submissions expected once processing has been completed.
> Presentations to OPSS teams
> Power BI dashboards, accessed by the Department for Business and Trade, will be produced to visualise insights from the data
> Presentations at appropriate conferences
The outputs will not contain NHS England data and will only contain aggregated information with small numbers suppressed as appropriate in line with the relevant disclosure rules for the dataset(s) from which the information was derived.
The outputs will be communicated to relevant recipients through the following dissemination channels:
> Journals
> Reports aimed at OPSS teams
> Presentations to OPSS teams
> Conferences: the work related to applying AI techniques to the data may be disseminated via conferences
> Internal communications to inform OPSS operations
> Communication of insights with product working groups
> External campaigns
> OPSS may communicate information gained from insights to external entities. For example, campaign awareness on injury in home.
The target dates for the reports and presentations will be within 1 year after the data is received. The dashboards will be produced within 2 years after the data is received. Any submission to peer reviewed journals and conferences will be within 3 years after the data is received.
Processing:
No data will flow to NHS England for the purposes of this Agreement.
NHS England data will provide the relevant records from the ECDS dataset to OPSS of the Department for Business and Trade. The data will:
> Contain no direct identifying data items. The data will be pseudonymised and individuals cannot be reidentified through linkage with other data in the possession of the recipient.
OPSS will securely transfer the data into the secured Cloud-Based Analytical System (AWS) in a password protected folder.
The data will be stored on servers at the Department for Business and Trade.
The Department for Business and Trade stores data on the Cloud provided by Amazon Web Services.
The Data will be accessed by authorised personnel via remote access.
The Controller(s) must confirm and provide evidence upon audit by NHS England that access via any remote device complies with the data security obligations within this DSA and the Data Sharing Framework Contract.
For remote access:
- Remote access will only be from secure locations situated within the territory of use (as further restricted elsewhere within the DSA if so done) stated within this DSA;
- Access controls granting users the minimum level of access required are in place;
- Remote access is only via secure connections (e.g., VPNs or secure protocols) to protect data;
- Multifactor authentication (MFA) is required for remote access;
- Device security, including up-to-date software and operating systems, antivirus software, and enabled firewalls are utilised for the remote access;
- All remote access is undertaken within the scope of the organisations DSPT (or other security arrangements as per this DSA) and complies with the organisations remote access policy.
The above applies in addition to any condition set out elsewhere within the DSA (e.g. who may carry out processing, and for what purpose).
Personnel are prohibited from downloading or copying data to local devices.
The data will not leave the UK at any time.
Access is restricted to individuals within the OPSS of the Department for Business and Trade who have authorisation from the Head of Analysis. All such individuals are substantive employees or contractors of the Department for Business and Trade.
All personnel accessing the data have been appropriately trained in data protection and confidentiality.
The NHS England data may be compared, but not linked, to other data, such as:
> Partial data provided by stakeholders such as Royal Society for Prevention of Accidents (RoSPA), British Toy and Hobby Association.
> A&E text data: Obtained from the Royal Society for the Prevention of Accidents (RoSPA).
> Button Batteries: Obtained from the British Paediatric Surveillance Unit (BPSU).
> Magnet study: Obtained from British Paediatric Surveillance Unit (BPSU).
> Citizens advice bureau complaints data
> Fire services data
The data will not be linked with any other data.
There will be no requirement and no attempt to reidentify individuals when using the data.
Analysts from the OPSS will analyse the data for the purposes described above.