Product description

The National respiratory programme dashboard is used by NHS organisations to identify patient groups who have a lung condition, this enables them to access information to improve the services being provided to patients with these conditions. The use of this is to improve the services made available and ensure that patients are receiving the best care possible at the appropriate time.

What are the purposes for processing my personal data in this product?

The dashboard enables the NHS to better understand how many patients are identified as having a lung condition. By having a clearer understanding of this it allows the NHS to continually improve patient experience at the service facilities and better co-ordinate patient care across the services.

The dashboard does not show any personal information (called ‘personal data’ under data protection laws) to the NHS colleague who is using the dashboard – the user will only see aggregated numbers, such as the total number of patients identified with chronic obstructive pulmonary disease (COPD). De-identified information is used in order to create the aggregate information which is shown in the dashboard.

What personal data about me is processed in this product?

Personal data which has been de-identified (we call this de-identified data) will be processed by NHS England for the purposes above about patients who are identified as having a lung condition by both primary and secondary care teams in England. De-identified data that is processed to create the Product and to create anonymous data that is shown in the dashboards may include data about a patient’s:

• postcode
• date of birth
• age
• sex
• NHS number
• race or ethnicity
• medical conditions, diagnosis and treatment

Who is my personal data shared with?

De-identified data is securely analysed by a small number of data analysts in NHS England for the purposes of creating anonymous aggregated data to display in the dashboards. This is statistical counts of data that don’t identify you. It is therefore not personal data. Your personal data will not therefore be shared with any other organisation as part of this product.

Authorised users from NHS England, NHS Trusts and integrated care boards can access the anonymous data in the dashboards for the purposes described above.

UK General Data Protection Regulation (GDPR) information

Controllers of your personal data

Under data protection law NHS England are the legal controllers of your de-identified personal data.

Legal grounds for processing your personal data

The processing of de-identified personal data by NHS England for the purposes explained above is permitted under the following legal grounds under data protection law (this is UK GDPR and the Data Protection Act 2018 (DPA 2018)):

• Legal obligation – Article 6(1)(c) … ‘the processing is necessary for compliance with a legal obligation’. This applies where NHS England is directed under section 254 of the Health and Social Care Act 2012 to collect and analyse personal data for the purpose of producing the dashboards.
• Substantial public interest – Article 9(2)(g) ‘processing is necessary for reasons of substantial public interest’ together with the legal ground in Schedule 1, Part 2, Paragraph 6 of the Data Protection Act 2018 (“DPA 2018”) “statutory etc and government purposes”. This applies where NHS England processes de-identified personal data under Legal Obligation above.

Processor acting on behalf of NHS England

The data platform contractor, Palantir Technologies UK LTD is a processor acting on behalf of NHS England. They provide the data platform and the technology that the Product uses and only act on the instructions of NHS England to process the de-identified data to store it and make it available to NHS England in the platform for the Product.

Your rights under UK GDPR

You have the following rights under UK GDPR in relation to the processing of your personal data by NHS England for the purposes above:

• right to be informed
• right of access
• right to rectify

Further information about these rights is in the NHS Federated Data Platform Privacy Notice.

You can contact NHS England’s data protection officer at england.dpo@nhs.net.

Does the National Data Opt Out or any other opt out apply to this product?

The National Data Opt Out policy does not apply to this product as:

• the collection and analysis of Data by NHS England to create the product has been carried out under a legal obligation (the legal direction) and therefore the National Data Opt out does not apply
• no confidential patient information will be disclosed to users of the product via the dashboard which only provides access to anonymous aggregated data

More information about when the National Data Opt Out does not apply is available at When your choice about sharing data from your health records does not apply – NHS (www.nhs.uk)

Type 1 opt outs do not apply to this product because the datasets used to create the Product does not contain confidential patient information that has been collected by NHS England from GP practices.

More information

For more information about how personal data is processed within the Federated Data Platform please see the NHS Federated Data Platform Privacy Notice.

Last updated date: 23 August 2024