Urgent and emergency care (UEC) dashboard FDP product privacy notice
Product description
The Urgent and Emergency Care (UEC) Dashboard provides information about:
- the amount and types of visits by patients to hospital accident and emergency care departments, specialist emergency care departments (for example specialist eye hospitals), urgent treatment centres and minor injury units in England. We call these urgent and emergency care facilities
- how long patients have to wait to be treated in urgent and emergency care facilities and whether patients are admitted to hospital after attending
The dashboard enables the NHS to understand the operational activity of urgent and emergency care facilities to support service delivery challenges and improvements to patient care, safety and operational performance. This then leads to a positive change to the way that patients are cared for in urgent and emergency care facilities.
What are the purposes for processing my personal data in this product?
This Product processes personal information (called ‘personal data’ under data protection laws) about patients who have attended urgent and emergency care facilities to enable the NHS to better understand the number and needs of patients accessing those services. This enables the NHS to continually improve patient experience at these facilities and better co-ordinate patient care.
You can’t be identified in the data in the dashboard because all identifiers such as your name, NHS number, full address and full date of birth have been removed from the data which is used. This is called de-identification. Your data is de-identified by NHS England before it is transferred into FDP. The de-identified data is processed to create the Product. The dashboards in the Product only show anonymous aggregated data. This is counts of data which don’t identify you.
The dashboards provide oversight of the operational activity of urgent and emergency care services to identify and support resolution of delivery challenges and improvements to patient care and safety, care co-ordination and operational delivery. This allows the NHS to provide a better level of services to patients.
What personal data about me is processed in this product?
Personal data which has been de-identified (we call this de-identified data) will be processed by NHS England for the purposes above about patients who have attended urgent and emergency care service. De-identified data that is processed to create the Product and to create anonymous data that is shown in the dashboards may include data about a patient’s:
- age
- sex
- gender
- race or ethnicity
- medical conditions, diagnosis and treatment
The dashboard also shows operational information about urgent and emergency care services including:
- waiting times
- hospital bed occupancy levels
Who is my personal data shared with?
De-identified data is securely analysed by a small number of data analysts in NHS England for the purposes of creating anonymous aggregated data to display in the dashboards. This is statistical counts of data that don’t identify you. It is therefore not personal data. Your personal data will not therefore be shared with any other organisation as part of this Product.
Authorised users from NHS England, NHS trusts and integrated care boards can access the anonymous data in the dashboards for the purposes described above.
UK GDPR Information
Controllers of your personal data
Under data protection law NHS England are the legal controllers of your de-identified personal data.
Legal grounds for processing your personal data
The processing of de-identified personal data by NHS England for the purposes explained above is permitted under the following legal grounds under data protection law (this is UK GDPR and the Data Protection Act 2018 (DPA2018)):
- Legal Obligation – Article 6(1)(c)… ‘the processing is necessary for compliance with a legal obligation’. This applies where NHS England is directed under section 254 of the Health and Social Care Act 2012 to collect and analyse personal data for the purpose of producing the dashboards.
- Substantial Public Interest – Article 9(2)(g) ‘processing is necessary for reasons of substantial public interest’ together with the legal ground in Schedule 1, Part 2, Paragraph 6 of the Data Protection Act 2018 (“DPA 2018”) “statutory etc and government purposes”. This applies where NHS England processes de-identified personal data under Legal Obligation above;
Processor acting on behalf of NHS England
The data platform contractor, Palantir Technologies UK LTD is a processor acting on behalf of NHS England. They provide the data platform and the technology that the Product uses and only act on the instructions of NHS England to process the de-identified data to store it and make it available to NHS England in the platform for the Product.
Your rights under UK GDPR
You have the following rights under UK GDPR in relation to the processing of your personal data by NHS England for the purposes above:
- right to be informed
- right of access
- right to rectify
Further information about these rights is in the NHS Federated Data Platform Privacy Notice.
You can contact NHS England’s data protection officer at england.dpo@nhs.net.
Does the National Data Opt Out or any other opt out apply to this product?
The National Data Opt Out does not apply to the processing of de-identified personal data by NHS England in this Product. This is because NHS England is required by law under the Legal Direction to process the data to create the dashboards. The National Data Opt Out does not apply in these circumstances. The National Data Opt Out also does not apply to anonymous data that is shared through the dashboards as information that can identify you has been removed.
More information about when the National Data Opt Out does not apply is available at When your choice about sharing data from your health records does not apply – NHS (www.nhs.uk)
Type One Opt Outs do not apply to this Product as no confidential patient information obtained from GP Practices is used in this Product.
More information
For more information about how personal data is processed within the Federated Data Platform please see the NHS Federated Data Platform Privacy Notice here.
Last updated date: 16 May 2024