Cardiovascular Disease Prevention Audit (CVDPREVENT Audit)
Summary
Why and how we process your data in the Cardiovascular Disease Prevention Audit (CVDPREVENT audit) and your rights.
| Controller | NHS England (in relation to processing the personal data) and the Department of Health and Social Care (DHSC) (in relation to determining the purpose for processing the data through the issuing of a Direction to NHS England). |
| How we use the information (processing activities) | NHS England collects data from general practices in England to facilitate the CVDPREVENT Audit. The CVDPREVENT Audit is a national primary care audit commissioned and delivered by several partners including NHS England, DHSC, the Healthcare Quality Improvement Partnership (HQIP) and HQIP’s commissioned provider (hereafter referred to as ‘Audit Partners’) to support the NHS Long Term Plan, the annually negotiated General Medical Services (GMS) contract and the national CVD Prevention programme. The NHS Long Term Plan identifies CVD as a clinical priority with the potential to prevent 150,000 strokes, heart attacks and cases of dementia over the next ten years by improving the detection and management of high blood pressure, high cholesterol and atrial fibrillation. There are around 6 million people living with CVD and a further 16 million at risk of CVD. Heart and circulatory diseases cause a quarter (25%) of all deaths in England. This equates to almost 140,000 deaths each year. Healthcare costs relating to heart and circulatory diseases are estimated at £7.4 billion each year. The cost of CVD to the wider economy in England (including premature death, disability and informal costs) is estimated to be £15.8 billion each year. The CVDPREVENT Audit has and will continue to help focus and optimise the CVD Prevention programme locally and nationally. The CVDPREVENT Audit has allowed for, for the first time, the provision of comprehensive locally specific and nationwide information related to CVD prevention and associated outcomes. This work has and will continue to help to highlight opportunities for broader professionally led quality improvement activity associated with the delivery of the NHS Long Term Plan. In summary, the CVDPREVENT Audit data is needed because it supports:
Sharing of CVDPREVENT Audit data and linked CVDPREVENT Audit, HES and Mortality data to the NHS England Unified Data Access Layer (UDAL)Pseudonymised CVDPREVENT Audit data and linked CVDPREVENT Audit, HES and Mortality data has been transferred to NHS England’s UDAL. Processing in this pseudonymised environment will facilitate the tracking of the recovery of cardiovascular services post COVID-19. It will additionally provide an on-going resource to inform activities supporting NHS England’s statutory functions under the NHS Act 2006, namely but not limited to, sections: 13D - Duty as to the effectiveness, efficiency of services. The pseudonymised data will be linked (through the use of a common pseudonym) with other datasets held in UDAL to support the above purposes, such as:
Linkage of CVDPREVENT Audit data with HES and Mortality dataLinkage of CVDPREVENT Audit data with HES and Mortality data is required for the purposes of tracking, monitoring and evaluation of national programme delivery across the life course and care pathway. The enhanced data will also allow the Audit Partners to determine the impact on outcomes and health inequalities in both primary and secondary care. Re-use of CVDPREVENT Audit data for the purposes of the National Obesity Audit (NOA) CVDPREVENT Audit data is being re-used for the purposes of the NOA, which seeks to measure weight management service provision, interventions and outcomes to support current and future services to deliver efficient, effective and equitable prevention and care. The NOA is a patient-level data set which will cover all aspects of weight management services that are publicly funded by the NHS and DHSC in England. |
| Does this contain sensitive (special category) data such as health information? | Yes |
| Who are recipients of this data? |
NHS Benchmarking Network (aggregate data with small numbers suppressed). No personal data provided. OHID (government unit of DHSC). Pseudonymised data provided under data sharing agreement. |
| Is data transferred outside the UK? | No |
| How long the data is kept | NHS England will retain the data for a minimum of 6 years from the date that the information is no longer required, in line with the NHS England Records Management Policy and Records Retention and Disposal Schedule. The data retention period for OHID is specified in the data sharing agreement. |
| Our lawful basis for holding this data | Legal obligation |
| Your rights |
|
| How can you withdraw your consent? |
Consent is not the basis for processing, |
| Is the data subject to decisions made solely by computers? (automated decision making) | No |
| Where does this data come from? | General practices in England |
| The legal basis for collecting this data | NHS England's lawful basis for the collection of personal data via the GP Extraction Service (GPES) is:
NHS England's lawful basis for the collection of special categories of personal data via GPES is UK GDPR Article 9(2)(g) - reasons of substantial public interests, supplemented by:
In relation to the sharing of data with Arden and GEM CSU, Arden and GEM CSU, as a department of NHS England, processes personal data under the same lawful bases as NHS England. See above. NHS England's lawful basis for processing personal data held in UDAL is:
NHS England's lawful basis for processing special categories of personal data held in UDAL is:
|
