You will have recently had a letter from the respiratory delivery board regarding proposed data extraction for the asthma / COPD audit.
There has been a change in process this year whereby a 3rd party commercial company, Informatica, will be processing the anonymised data set under clearly defined parameters. As data controller for your practice data it is important you understand what this means as should any commercial company then use data received for other purposes, although this should only happen wirh consent of the data controller, ( I.e. the practice) there is a risk, albeit very low, that the Information Commissioners Office could find a practice partly to blame.
It is also worth noting that HB associate medical director, head of primary care and associate medical director will have access to individual practice data as well as aggregated cluster and HB data. There is a clear agreement this is not to be used for performance management.
Engagement / participation in the audits is entirely voluntary so practices need to carefully digest and consider the formal letter received along with the above information and respond to the HB as to whether or not you wish to participate.
Thank you for registering with the Information Governance, Data Protection Officer (IG, DPO) Support Service. We are pleased to confirm that we have received sufficient subscriptions from GMPs across Wales to formally deliver this service and provide the ‘Data Protection Officer as a Service’ function for those practices who have subscribed.
With effect from 1st December 2018 you will have access to the basic service provision, as detailed within the Service Schedule; whilst we recruit staff resources. This initial support will be provided by the existing IG Support Service for GMPs until the additional posts are filled; which we anticipate will be during the early part of 2019. Whilst we are unable to provide a fully functioning service during the first few months, we have acknowledged this by not charging for the service support until the next financial year. The costing model will be effective from the 1st April 2019, on this date NHS Wales Shared Services Partnership (NWSSP) will collate the number of patients registered to the practice at that time. That patient head count will be multiplied by £00.0965 then divided by four to determine the quarterly charge for that first quarter of the financial year. The first quarterly payment will then be taken, as already authorised, by NWSSP on the 31st June 2019, this process will continue every three months. See the example costing model in Section 5.4 of the Service Support Schedule.
Contacting the Support Service
will be available between 9am and 5pm Monday to Thursday with a 4.30 close on a Friday.
We will be arranging a Stakeholder Engagement Webinar session early in January 2019 (date to follow shortly) to inform subscribed practices on the service progression, for example, position on recruitment, development of resources, and further detail on our service implementation plan. This interactive webinar will also be recorded and made available on the Information Governance website for anyone who is unable to access the live session.
During the first few months of 2019 we plan to hold face to face Stakeholder Engagement Seminars arranged, by health board locality. This will give practice representatives and the Support Service Team the opportunity to meet, provide updates on the service progression and clarity on the service priorities, discus any actions from the webinar, and answer any general queries that practices may have at that time.
In addition to these sessions we will producing a monthly Newsletter to keep practices updated with progress of the service, any planned events, latest developments in the resources and knowledge base, training and any other topics we think you may be interested in, etc. The Newsletters will be maintained in a specific area of the Information Governance website, details to follow.
A specific IG, DPO Support Service page has been developed on the IG website where previous communications regarding the service is available for information, this page will be updated as appropriate.
There is a requirement to inform the Information Commissioner’s Office (ICO) of the update to your Data Protection Officer. We have been in contact with the ICO and agreed that the Support Service are able to inform them of such updates on behalf of those subscribed GMPs, particularly with the large number of practices registering with the DPO Support Service at the same time.
We will notify them as follows:
Name of the ‘Data Protection Officer as a Service’ - NHS Wales Informatics Service (NWIS), Information Governance, Data Protection Officer Support Service
Address - 4th Floor, Tŷ Glan-yr-Afon, 21 Cowbridge Road East, Cardiff CF11 9AD
We have been assured that where the practice has already notified the ICO themselves of these updates, it will not cause any problems for them.
This information should also be made available to your patients and staff. We recommend that the details are published on the practice website and that staff are made aware so that if they receive any enquiries they know where to direct individuals to.
As the practice DPO, the Support Service requires practices to complete the Welsh IG Toolkit for GMPs on an annual basis. Population and submission of the toolkit will enable the service to measure the practice compliance against legislation, this is a mandatory requirement of the DPO role under GDPR. The current toolkit is open until 31st March 2019. Once the toolkit submissions are received, the service will undertake high level analysis to identify any areas which may require improvement/development and provide recommendations/support for these to be implemented across the practices’. For information: If evidence is not loaded to the toolkit we may request copies, where appropriate, of documentation. For example, IG improvement plans, procedures, patient information, etc to support your submission. We see this analysis of the IG Toolkit submissions as a focal point to inform future priorities of the Support Service
We would like to assure you of our commitment to develop and deliver a high quality IG, DPO Support Service, helping you overcome information governance challenges, providing necessary advice and support to help you embed a robust data protection compliance regime, within the practice.
This message from the primary care team clarifies the requirements of the audit documents which form part of your Annual Contract Review for 2018-2019.
The audits will cover the period 01.04.2017 – 31.03.2018.
Recognising that practices have come into some enhanced services incrementally, practices will only have to complete these new audits from the period in which they commenced the new service.
The Anti Coagulation Audit is based on the new service which commenced in January 2017.
The Care Homes Audit is part of the service specification which commenced in April 2017.
If you were not providing either during the dates indicated, then please use the old audit templates to report back to the Health Board.
In respect of diabetes, this will be based on the National Diabetes Audit. Practices are required to participate in this audit, reflect on the findings within the practice. Practices can access their practice level data via Audit Plus and should provide it to the Health Board if requested.
If you have not already done so, can you please ensure these are submitted by 31st December 2018.
Please do not hesitate to contact a member of the GMS contracting team with any queries.
We are pleased to attach the final Service Support Schedule for the provision of Data Protection Officer (DPO) for your perusal.
You will find all the relevant information regarding the intended delivery of the service including; the service model, key functions and standard features, level of support you can expect, with anticipated timescales for developing the service and the projected charges.
We intend for the subscription based service to be launched on 1st December 2018. At this point we will be offering a basic service provision whilst we recruit additional staff resources.
Therefore, there will be NO service charge imposed until 1st April 2019, with the first quarterly payment due on 30th June 2019. The service will be charged at a rate of £0.0965 ‘per patient’ and will be based on the most current quarter capitation reports at that time. It has been agreed that a cap of £1,500 will apply to the annual charge.
To subscribe to the Support Service, please complete and return the two attached forms: one requires signing to confirm your agreement for the provision of the service and the second is to authorise NHS Wales Shared Service Partnership (NWSSP) to deduct the appropriate service charge on a quarterly basis.
For the service to proceed NWIS require a minimum number of Practices to subscribe on a national basis, to enable it to be financially viable. Therefore, we would be most grateful if you can return both forms; as detailed on each, to us by the 21st November. This will enable us to confirm the formal commencement on the 1st December.
Head of Information Governance
DPO NWIS & Velindre NHS Trust
MSc Healthcare Management
NHS Wales Informatics Service
4th Floor|Ty Glan y Afon|21 Cowbridge Rd East|Cardiff
Page 9 of 22