Decision

Coronavirus (COVID-19): notification to organisations to share information

Notification to GPs and NHS England that they should share information to support efforts against COVID-19.

• From: Department of Health and Social Care and The Rt Hon Thérèse Coffey
• Published: 1 July 2022
• Last updated: 18 October 2022 — See all updates

This was published under the 2019 to 2022 Johnson Conservative government

This publication was withdrawn on 1 November 2022

This notice expired on 31 October 2022. See the current Notice to GPs and NHS England to share information.

Documents

[Withdrawn] Coronavirus (COVID-19): notice under Regulation 3(4) of the Health Service (Control of Patient Information) Regulations 2002

HTML

Details

The Secretary of State has issued a notice under the Health Service Control of Patient Information Regulations 2002 requiring the following organisations to process information:

• GPs
• NHS England

This notice requires that data is shared for purposes of COVID-19. Effective compliance with the notice will be demonstrated by use of the OpenSAFELY data analytics platform.

For patients, this means that their data may be shared with these organisations in relation to the response to COVID-19.

If no further notice is sent, it will expire on 31 October 2022.

Compliance with data protection standards

Data controllers are still required to comply with relevant and appropriate data protection standards and to ensure within reason that they operate within statutory and regulatory boundaries.

The UK General Data Protection Regulations (UK GDPR) allow health data to be used as long as one or more of the conditions under articles 6 and 9 are met. There are conditions under both articles that can be relied on for the sharing of health and care data, including ‘the care and treatment of patients’ and ‘public health’.

We would expect any organisation to share information within legal requirements set out under UK GDPR.

Published 1 July 2022
Last updated 18 October 2022 + show all updates

1. 18 October 2022

   Updated the notice to remove NHS Digital from the list of organisations required to process information under Regulation 3(4) of the Health Service (Control of Patient Information) Regulations 2002.

2. 1 July 2022

   First published.