NHS England Post Audit Review: NHS North Central London Clinical Commissioning Group

Purpose

This report provides the formal closure of the remote data sharing audit of NHS North Central London Clinical Commissioning Group (NCL CCG) between 25 April and 4 May 2022.  It provides an evaluation of how NCL CCG conforms to the requirements of:

• the data sharing framework contract (DSFC) CON-369360-Z5R7D-v2.01
• the data sharing agreement (DSA) DARS-NIC-362253-J5V8L-v3.2
• the organisation’s own policies, processes and procedures 

This DSA covers the provision of the following datasets:

In the DSA, the Controller was NCL CCG, and the Processors were North and East London Clinical Support Unit (NEL CSU), North of England CSU (NECS) and Microsoft UK. However, after the DSA was signed, there were changes to the Processors and their roles, significantly NEL CSU. At the time of the audit the Processors were NEL CCG, London Shared Services (LSS), NECS and Microsoft UK. 

Since the audit, NCL CCG and LSS have both ceased to exist. The former’s commissioning and Controller responsibilities have predominantly transferred to the North Central London Integrated Care Board (NCL ICB), while CSU roles have moved into either NCL ICB, NEL ICB and other organisations.

Further guidance on the terms used in this post audit review report can be found in version 1 of the NHS Digital Data Sharing Remote Audit Guide. 
 

Post audit review

This post audit review comprised of a desk-based assessment of the action plan and supporting evidence supplied by NCL ICB between February and April 2023. Video conference calls to review evidence were held in March and April 2023.

Post audit review outcome

Based on the evidence provided by NCL ICB, the Audit Team has closed all the findings. Therefore, no further action is required by the Audit Team and NCL ICB.

Data recipient’s acceptance statement

NCL ICB has reviewed this report and confirmed that it is accurate.

The following tables identify the 5 agreement nonconformities, 1 observation, 5 opportunities for improvement and 3 points for follow-up raised as part of the original audit. 

Note: whilst the findings assigned in the original audit report continue to reference the names of the audited organisations, the update column reflects any subsequent changes in organisational names and roles.
 

NHS England takes all reasonable care to ensure that this audit report is fair and accurate but cannot accept any liability to any person or organisation, including any third party, for any loss or damage suffered or costs incurred by it arising out of, or in connection with, the use of this report, however such loss or damage is caused. NHS England cannot accept liability for loss occasioned to any person or organisation, including any third party, acting or refraining from acting as a result of any information contained in this report.