Unofficial. This site is an experimental reformatting of data published by NHS England. It is not endorsed by NHS England. Always check the official Data Uses Register before relying on anything here.

Benchmarking Service to NHS organisations

University Hospitals Birmingham NHS Foundation Trust · NHS Trust

In term In term in the September 2026 edition: the latest version runs to 27 November 2030.

Reference
DARS-NIC-06605-X1L9Z
Current version
v14.2
Term of current version
28 November 2025 to 27 November 2030
Start date
Before 1 December 2019
Data controller
Sole Data Controller
Commercial purposes
Yes
Sublicensing
No
Files released to date
530

Why the data was released

Objective for processing

University Hospitals Birmingham (UHB) NHS Foundation Trust requires access to national data sets for the purpose of providing objective insight and analysis that enables NHS organisations to deliver better services for patients.

For over a decade now, UHB has established a proven track record of using national data to provide analytical outputs that enable NHS Organisations to drive improvements to ultimately benefit patients.

Such analytical outputs are provided via UHB’s online Healthcare Evaluation Data (HED) benchmarking platform and bespoke reports.

The HED platform provides access to a range of dashboards, alerts, reports and tools that allow NHS Organisations to benchmark across thousands of metrics.

The HED Tool is accessed online by third parties holding a subscription contract with UHB to use the HED system. Such third parties include:

1. NHS Organisations with various geographical locations across England including:

• NHS Acute Trusts (85%).

• Other NHS Organisations, including: NHS Integrated Care Boards (ICBs), NHS Commissioning Support Units (CSUs), Quality Observatories with legal entity under a NHS Trust For example; North East Quality Observatory (NEQOS) is hosted by the legal entity Cumbria, Northumberland, Tyne and Wear NHS Foundation Trust (12%).

2. Non-NHS Organisations such as Pricewaterhouse Coopers (PwC) & Grant Thornton (3%).

NHS Organisations use the analytical outputs to efficiently make better informed decisions as to how they can make sustainable service improvements for the benefit of patients. The system allows NHS Organisations to actively understand performance trends and influences in order to identify improvement opportunities. The range of dashboards, alerts, reports and tools UHB create using these national data sets allow NHS Organisations to actively interrogate benchmarked and risk adjusted metrics in insightful ways. The insight provided is of significant value to NHS Organisations as it isn’t possible to produce such intelligence when solely using local information sources.

Non-NHS Organisations work within the healthcare space and are only permitted access to the HED tool when working to support NHS Organisations. Non-NHS Organisations only have access to aggregate, small number suppressed data in line with the HES Analysis guide. UHB has reviewed the NHS standard (ISB 1523) relating to anonymisation and can confirm compliance. The rationale for allowing Non-NHS Organisations access to the tool is that some NHS Organisations require additional, short-notice, specialist resource in their work.

Direct access enables:

• Staff to be equipped to provide immediate support to NHS Organisations, reducing lead time for projects which can be costly for the NHS, where it has already been determined that out-sourcing is required.

• An efficient way to disseminate information in support of NHS improvement work. Without which UHB would be actively encouraging NHS Organisations to export data outside the NHS.

• Autonomy when undertaking commissioned independent work beneficial to the NHS e.g. the Keogh Review.

The sole purpose of the work associated with this agreement is to support NHS Organisations (including UHB) in the on-going monitoring of clinical quality, patient safety and organisational effectiveness in order to deliver better services for patients.

The following NHS England Data will be accessed:

• Hospital Episode Statistics, Admitted Patient Care, Accident & Emergency, Critical Care, Outpatients and Emergency Care Data Set (ECDS), Civil Registration Deaths (Secondary Care Cut) and Civil Registration Deaths – necessary because These data will be used to produce analytical outputs encompassing a vast range of metrics and topics pertinent to healthcare provision. These analytical outputs are used by NHS Organisations to understand their current performance and opportunities for improvement in order to target work plans strategically in an evidence based fashion. The Civil Registration Deaths dataset will temporarily be accessed at the same as the Civil Registration Deaths - Secondary Care Cut dataset, so UHB can ensure that they can produce the required outputs for the purpose described above using the Civil Registration Deaths dataset, in preparation for migrating away from the Secondary Care Cut version of the dataset.

The level of the Data will be:

• Identifiable – necessary because access to LOPATID and the ability to cross-reference local hospital records is an essential part of governance activities within a Hospital Trust. It enables hospitals to efficiently conduct internal governance audits on a case-by-case basis and therefore focus their finite attention where it is most needed. This directly enables organisations to monitor and manage services for the greater benefit of patients.

Access to LOPATID is also critical to enable health care professionals to audit their data and clinical practice. This review of individual patient outcomes and experience can evidence the care provided is of a good quality and safe, and also provide assurance to trust boards. In addition, access to identifiers will also enable clinicians to review and audit deaths attributed to them in national mortality models.

In summary, without this level of information, Trusts would not be able to conduct further analysis to determine the root cause, i.e., detailed reason, for any concerns identified in the high-level information. Such root-cause analyses serve to provide assurance internally and externally across a range of crucial measures.

The Data will be minimised as follows:

• UHB destroy patient identifiers for data older than 3 years.

• The years of data required allow for organisations to perform multiple functions, such as being able to demonstrate service improvement over time and visualise trends.

• The datasets requested under this DSA include data for the whole of England. This is required because when performing analyses, organisations need to be able to select peers based on case mix for more accurate benchmarking to assist with service improvement, and these organisations may not be local. Valid peers may also change for a selected service or indicator. As an example, some HED system users are regional providers of a specific service and others are specialised hospitals which require benchmarking across the whole of the UK. Furthermore, the current user base for the HED tool is spread across multiple regions of England and each organisation requires access to their own data. National data is also required to allow the calculation of standardised metrics.

There are no alternative less intrusive ways of achieving the purpose. National and peer specific benchmarking along with risk adjust metrics can only be provided using a national data set. As such it is in the interest of the public to use an established data set that is already being routinely submitted centrally.

University Hospitals Birmingham NHS Foundation Trust (UHB) is the controller as the organisation responsible for ensuring that the Data will only be processed for the purpose described above.

The lawful basis for processing personal data under the UK GDPR is:

Article 6(1)(e) - processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

The lawful basis for processing special category data under the UK GDPR is:

Article 9(2)(i) - processing is necessary for reasons of public interest in the area of public health, such as protecting against serious cross-border threats to health or ensuring high standards of quality and safety of health care and of medicinal products or medical devices, on the basis of Union or Member State law which provides for suitable and specific measures to safeguard the rights and freedoms of the data subject, in particular professional secrecy.

The funding is provided by UHB.

The funder will have no ability to suppress or otherwise limit the publication of findings.

Processing activities

No data will flow to NHS England for the purposes of this Data Sharing Agreement (DSA).

NHS England will provide the relevant records from the Hospital Episode Statistics, Admitted Patient Care, Accident & Emergency, Critical Care, Outpatients and Emergency Care Data Set (ECDS), Civil Registration Deaths (Secondary Care Cut) and Civil Registration Deaths datasets to UHB. The Data will

• contain directly identifying data items including LOPATID (the patient ID used locally in the hospital where a patient received treatment) which is required to enable hospitals (including UHB) to cross-reference data with local hospital records.

The Data will not be transferred to any other location.

Raw Data is stored on servers onsite at UHB and offsite at Ark Data Centres.

Raw Data will be accessed by approved personnel onsite at UHB premises and via remote access

The Controller must confirm and provide evidence upon audit by NHS England that access via any remote device complies with the data security obligations within this DSA and the Data Sharing Framework Contract.

For remote access:

- Remote access will only be from secure locations situated within the territory of use (as further restricted elsewhere within the DSA if so done) stated within this DSA;

- Access controls granting users the minimum level of access required are in place;

- Remote access is only via secure connections (e.g., VPNs or secure protocols) to protect data;

- Multifactor authentication (MFA) is required for remote access;

- Device security, including up-to-date software and operating systems, antivirus software, and enabled firewalls are utilised for the remote access;

- All remote access is undertaken within the scope of the organisation’s DSPT (or other security arrangements as per this DSA) and complies with the organisation’s remote access policy.

The above applies in addition to any condition set out elsewhere within the DSA (e.g. who may carry out processing, and for what purpose).

Remote processing will be from secure locations within: England or Wales. The data will not leave England or Wales at any time.

Access is restricted to substantive employees of UHB.

All personnel accessing the Data have been appropriately trained in data protection and confidentiality.

NHS data flowed under this agreement will not be linked to any other data not otherwise specified in this agreement.

Analysts from UHB will analyse the Data for the purposes described above.

Expected output

The outputs of processed data will be disseminated appropriately via the HED system or bespoke reports.

For users not within a Hospital providing NHS care, they will be provided with aggregate small number supressed analytics.

For users working for a Hospital providing NHS care, they will be provided with aggregate level analytics for the Hospitals they are working on behalf of and aggregate small number supressed analytics for other Hospitals. Where a Hospital's Caldicott Guardian has approved, patient identifiable information will be made available.

The outputs produced as a result of data processing are benchmarked or standardised healthcare indicators and analysis encompassing a wide range of topics pertinent to the provision of high quality healthcare within the NHS.

Such topics include: clinical quality, mortality monitoring, readmissions monitoring, patient safety, data quality, operational efficiency, and discharge and admission trends.

Such outputs are provided either via:

• the range of dashboards, alerts, reports and tools made available within the HED system, or

• bespoke reports including clinically-led, retrospective, small number suppressed reports that may be published in peer review journals

The outputs provided via the HED system will then be further utilised by end-users of the system, as described in section 5a, to produce novel outputs for routine service management/evaluation, audit etc. within the NHS. For example, Hospital Trusts using the system will use the outputs provided via HED to produce their own local analysis, dashboards, and reports including board reports.

Work streams are on-going and the outputs already form part of various NHS organisations’ monthly routine reporting and governance assurance processes.

For example, each month as the national data sets are released by NHS England, UHB then undertake the processing activities described in order to produce the range of benchmarked and standardised indicators described above. These outputs will then be used, both locally at UHB, and by NHS Organisations using the HED system, to produce their own local analysis, dashboards, and reports including board reports.

Expected measurable benefits

Sharing this data benefits healthcare provision within the NHS as the data received is used to create benchmarked and standardised healthcare indicators and analysis encompassing a wide range of topics that may be used to support the provision of high quality healthcare within the NHS.

Such outputs, provided via the HED system and bespoke reports, may be used by NHS staff for the purpose of assisting the NHS to:

• Assure and manage clinical quality and patient safety within NHS Organisations.

• Identify trends requiring a clinical review of patient pathways.

• Increase the understanding of patient outcomes.

• Identify potential areas for improvement in clinical quality or operational efficiency either within a hospital or a local healthcare economy.

• Identify areas of best practice either within hospital Trusts or local healthcare economies.

• Provide consultants with the information necessary for consultant revalidation.

All of the above may serve to increase the understanding of patient outcomes in regard to quality, safety, productivity and efficiency within the NHS which may ultimately drive clinical service improvements and benefit patient outcomes.

Additionally, as an NHS Hospital, UHB has key insight and personal interest in maximising the use of analytical outputs to drive improvements in patient care and operational efficiency within the NHS.

Quality and improvement work being undertaken and supported by the NHS, for the NHS is in the public interest.

By utilising the outputs and analytics provided via the HED system and bespoke reports, organisations are able to focus and deliver on the three key principles of Health and Social Care:

• Patients at the centre of the NHS – the analytics as stated above ensure that NHS organisations are empowered to identify areas of poor performance and can put in place measures to rectify this. They are also then able to demonstrate improvement in these areas over time. As the numerous measures bring together patient safety and operational efficiency, organisations can easily identify areas to target to ensure that the care being given is safe, effective and optimal.

• Changing the emphasis of measurement to clinical outcomes – there are multiple outputs provided to assist with this focus on clinical outcomes, and the ambition to achieve best practice. Organisations are able to ensure they are performing as expected against local and national standards and where necessary identify areas of best practice through benchmarking with peers (locally and nationally).

• Empowering health professionals – The tool enables NHS managers and clinicians to make evidence-based decisions i.e. supporting business cases, changing patient pathways. HED provides easily accessible information so healthcare professionals are able to review their specialty and service lines to ensure service delivery and patient outcomes are optimal. The system reports information in a timely, meaningful and relevant fashion to various clinical settings. As the analytics are used by providers and commissioners, the whole integrated healthcare economy is empowered to better join up health and care services, improve population health and reduce health inequalities.

The dissemination of the data sets requested is crucial to achieving the aforementioned benefits. National and peer specific benchmarking along with risk adjust metrics can only be provided using a national data set. As such it is in the interest of the public to use an established data set that is already being routinely submitted.

Dissemination of the processing outputs via the HED system and bespoke reports allows a continual feedback process to exist for NHS Trusts that, through benchmarking, helps drive best practice, clinical excellence and operational efficiency.

The HED system has already directly benefited health and social care by enabling NHS clinicians and managers to increase their understanding of patient outcomes and identify areas for improvement and best practice. Namely:

• NHS Organisations are provided with the information necessary to provide clinical quality and patient safety assurance within their organisation.

• NHS Organisations are able to identify & interrogate areas of poor performance allowing for evidence based health service management.

• NHS Organisations are able to identify areas of good performance increasing the understanding of best practice in healthcare.

• Clinicians are supported in undertaking appraisal and revalidation – reflective practice is a vital contributor to ensure high quality care.

Deriving such benefits is necessarily intertwined with other on-going hospital programmes and initiatives. Reviewing the analytical evidence provided by the outputs produced at UHB is one part of implementing improvements to clinical quality, patient safety, operational efficiency etc.

Decisions, changes and actions are necessarily implemented by the NHS staff using the analytical evidence provided. In the case of the data controlled, UHB as a hospital will directly realise these benefits for our own organisation. In the case of other NHS organisations it will be their own clinical and operational staff that carry out the course of action informed by the analytical outputs produced at UHB so leading to the benefits described throughout this application.

There are over 60 NHS Organisations, equating to millions of patient contacts each year, making use of the information provided via the HED System. As such the magnitude of the impact is significant.

Benefits reported so far

Each month the range of dashboards, alerts, reports and tools made available within the HED system allows NHS Organisations to identify areas of potential concern within their organisation. Such areas are then investigated further. When appropriate and authorised, the ability to identify a cohort of patients within the organisation and undertake appropriate clinical case note review is invaluable as a part of ensuring good hospital governance.

Some examples of yielded benefits include:

1) Several large acute trusts use the HED mortality modules to monitor and improve their trust’s mortality. Patient groups are identified that demonstrate persistent deviation from the expected mortality levels as they reach a pre-set trigger point. Consequently, the trust’s response to mortality reporting is much more instantaneous, allowing clinical and governance staff to review the deaths, put any actions in motion and share the outcome with the CQC considerably before any official regulatory notification.

Former NHS Medical Director Sir Bruce Keogh described mortality statistics as “smoke signals” for potential problems with care. Using Statistical Process Control (SPC) techniques, these signals are generated. As such, the benefit is derived from the ability to effectively use the data to highlight and investigate potential areas for further clinical review. This enables focused use of limited clinical resources, i.e. increased efficiency, which in itself benefits patients and the general public. This benefit has been experienced by many trusts using HED as they report the significant amount of time they have saved because of HED enabling them to pin-point priority areas, and automatically producing reports, increasing the time available for other hospital priorities.

Additionally, patients benefit as focused clinical review increases the safety and quality of the healthcare services provided.

In one acute Trust this use of HED mortality modules to undertake root cause analysis of patients has ultimately seen them move from special measures to a Care Quality Commission (CQC) rating of ‘Good’.

2) Several acute Trusts use HED to help optimise their services. One acute Trust in the South of England has used HED to generate Service Line Benchmarking packs for clinicians and service managers to help drive service transformation. These packs use the breadth and depth of information available in HED to allow service lines to examine their data and highlight potential opportunities. A measurable benefit from this was that the trauma and orthopaedic team were surprised to find 50% of local activity was being carried out by other providers outside of the main NHS teaching hospital. Consequently, referral to treatment times were targeted by the orthopaedic team working with radiology to develop a one-stop outpatient service where patients referred by their GPs can have their imaging and initial discussions on one day – and receive a same-day decision about whether they are suitable for surgery.

This change benefited patients as they were seen quicker, only had to make one trip to the hospital, and received a decision regarding their surgery faster.

Furthermore, HED delivers the ability for this information to be available to different staff groups and tailored to their individual needs so reducing reliance on local Information support staff.

3) One acute trust specifically used HED to investigate their performance of non-elective maternity re-admissions within 42 days of delivery as raised by the CQC. Analysis of clinical coding using HED identified that they had poor recording practices and evidenced that their subsequent change in coding more accurately represented their re-admission rate. The ability to use HED to undertake such analysis and so improve the accuracy of coding and therefore reported metrics, benefits the health service as accurate information is required to make high quality management decisions when running services.

Improving the accuracy of coding and reported metrics benefits patients as: a) it is important for them to have access to accurate information relating to the quality of the services they may receive, and b) high quality decisions taken using high quality information is critical to high quality services being provided to patients.

4) A specialist acute hospital was finding it difficult to analyse market share for one of their sites. As a specialist provider they required a specific set of hospitals to benchmark against. Using HED they have been able to isolate the Trusts and sites, so they are true peers. HED has helped them drive up their market share, thus promoting competition between hospitals, which in turn drives better care and service across the geographical area so benefiting patients.

5) Commissioning organisations using information from the HED system have reported back the ease with which their non-technical users can quickly pull-out information whilst simultaneously their analysts have the flexibility to answer more detailed questions. This diversity of topics and ease of use serves to spread the use of high-quality information empowering commissioners whilst allowing the analytical resource to be focused where required. Having effective, efficient, and evidence-based commissioning of health services directly benefits patients and the public.

This key reporting and case note review process is used by hospitals up and down the country. Without using the NHS England data it would be impossible to deliver these sorts of benefits to the NHS.

The above yielded benefits are ongoing monthly practices.

Datasets on the current version

Legal basis for provision: Health and Social Care Act 2012 - s261(5)(d); Health and Social Care Act 2012 – s261(7); National Health Service Act 2006 - s251 - 'Control of patient information'.

Datasets approved under DARS-NIC-06605-X1L9Z-v14.2
DatasetType of dataSensitivity FrequencyConfidential data
Civil Registrations of Death Identifiable Sensitive Ongoing Section 251 NHS Act 2006
Civil Registrations of Death - Secondary Care Cut Identifiable Sensitive Ongoing Section 251 NHS Act 2006
Emergency Care Data Set (ECDS) Identifiable Sensitive Ongoing Section 251 NHS Act 2006
HES-ID to MPS-ID HES Accident and Emergency Anonymised - ICO Code Compliant Non-Sensitive One-Off Section 251 NHS Act 2006
HES-ID to MPS-ID HES Admitted Patient Care Anonymised - ICO Code Compliant Non-Sensitive One-Off Section 251 NHS Act 2006
HES-ID to MPS-ID HES Outpatients Anonymised - ICO Code Compliant Non-Sensitive One-Off Section 251 NHS Act 2006
HES:Civil Registration (Deaths) bridge Identifiable Non-Sensitive Ongoing Section 251 NHS Act 2006
Hospital Episode Statistics Admitted Patient Care (HES APC) Identifiable Sensitive Ongoing Section 251 NHS Act 2006
Hospital Episode Statistics Critical Care (HES Critical Care) Identifiable Non-Sensitive Ongoing Section 251 NHS Act 2006
Hospital Episode Statistics Outpatients (HES OP) Identifiable Sensitive Ongoing Section 251 NHS Act 2006

Files released

Files released counts only files released externally by DARS. Access granted in NHS England's own systems, such as its Secure Data Environment, is not included.

Patient opt-outs were applied to 484 of the 530 files released under this agreement, across every version. About opt-outs

Files released against version 14.2 of this agreement, summarised by dataset.

Files released under DARS-NIC-06605-X1L9Z-v14.2
DatasetFilesFirst releasedLast releasedOpt-outs applied
Hospital Episode Statistics Critical Care (HES Critical Care)10 December 2025August 2026Yes
Emergency Care Data Set (ECDS)9 December 2025August 2026Yes
Hospital Episode Statistics Admitted Patient Care (HES APC)9 December 2025August 2026Yes
Hospital Episode Statistics Outpatients (HES OP)9 December 2025August 2026Yes
Civil Registrations of Death - Secondary Care Cut8 December 2025June 2026Yes
Civil Registrations of Death2 July 2026August 2026Yes

Version history

The register lists each renewal of this agreement as a separate row. This site has 6 versions — earlier versions existed before this site's records begin.

DARS-NIC-06605-X1L9Z-v14.2 28 November 2025 to 27 November 2030
Title
Benchmarking Service to NHS organisations
Commercial
Yes
Sublicensing
No
Datasets
10
Files released
47

Datasets: Civil Registrations of Death; Civil Registrations of Death - Secondary Care Cut; Emergency Care Data Set (ECDS); HES-ID to MPS-ID HES Accident and Emergency; HES-ID to MPS-ID HES Admitted Patient Care; HES-ID to MPS-ID HES Outpatients; HES:Civil Registration (Deaths) bridge; Hospital Episode Statistics Admitted Patient Care (HES APC); Hospital Episode Statistics Critical Care (HES Critical Care); Hospital Episode Statistics Outpatients (HES OP)

What changed from DARS-NIC-06605-X1L9Z-v13.3

Text removed is struck through; text added is underlined. Unchanged paragraphs are summarised rather than repeated.

Fields changed from DARS-NIC-06605-X1L9Z-v13.3
FieldWasBecame
Start date2024-07-032025-11-28
End date2025-11-302030-11-27
Civil Registrations of Death - Secondary Care Cut: legal basisHealth and Social Care Act 2012 – s261(7); National Health Service Act 2006 - s251 - 'Control of patient information'.Health and Social Care Act 2012 - s261(5)(d)
Emergency Care Data Set (ECDS): legal basisHealth and Social Care Act 2012 – s261(7); National Health Service Act 2006 - s251 - 'Control of patient information'.Health and Social Care Act 2012 - s261(5)(d)
HES:Civil Registration (Deaths) bridge: legal basisHealth and Social Care Act 2012 – s261(7); National Health Service Act 2006 - s251 - 'Control of patient information'.Health and Social Care Act 2012 - s261(5)(d)

Datasets: + Civil Registrations of Death

Objective for processing

[1 paragraph unchanged] The General Data Protection Regulation (GDPR) basis is that it is a public task to monitor healthcare services provided and it is in public interest that the care given is safe and effective. Namely: For over a decade now, UHB has established a proven track record of using national data to provide analytical outputs that enable NHS Organisations to drive improvements to ultimately benefit patients. a. Article 6 (lawfulness of processing):(e) Public task: the processing is necessary for you to perform a task in the public interest or for your official functions, and the task or function has a clear basis in law. b. Article 9 (processing of special categories of personal data):(i) processing is necessary for reasons of public interest in the area of public health, such as protecting against serious cross-border threats to health or ensuring high standards of quality and safety of health care and of medicinal products or medical devices, on the basis of Union or Member State law which provides for suitable and specific measures to safeguard the rights and freedoms of the data subject, in particular professional secrecy. The datasets held and requested under this Data Sharing Agreement (DSA) are: Hospital Episode Statistics (HES) Admitted Patient Care, Outpatients, Accident & Emergency, Emergency Care Data Set (ECDS), Critical Care and linked Civil registration deaths (secondary care cut) mortality data. These data will be used to produce analytical outputs encompassing a vast range of metrics and topics pertinent to healthcare provision. These analytical outputs are used by NHS Organisations to understand their current performance and opportunities for improvement in order to target work plans strategically in an evidence based fashion. For over a decade now, UHB has established a proven track record of using national data to provide analytical outputs that enable NHS Organisations to drive improvements to ultimately benefit patients. (Further details of examples are provided in section 5d.) [7 paragraphs unchanged] For any future non-NHS subscribers, UHB will inform NHS England in any renewal or amendment to this agreement. [7 paragraphs unchanged] To deliver the stated objective a wide range of healthcare indicators are calculated. The objective of having as wide an array of relevant indicators as possible is to give NHS managers and clinicians as complete a picture of hospital performance across topics such as mortality, readmissions, length of stay, emergency care, coding quality, etc. HES-Civil registration deaths (secondary care cut). linked data specifically will be used within this work to look at outcomes analysis and form analytical overviews relating to post-discharge mortality. Such overviews relate to standardised post-discharge mortality monitoring within distinct clinical cohorts and bespoke long-term survival monitoring. This work will increase the understanding of complete pathways of care. The following NHS England Data will be accessed: Within this agreement, UHB are applying for Local Patient Identifier within Provider (LOPATIDs) a code which uniquely identifies an individual patient locally within a hospital that has provided that patient with treatment or care for the national datasets. There is a legal basis in place for this under Section 251 of the National Health Service Act 2006. • Hospital Episode Statistics, Admitted Patient Care, Accident & Emergency, Critical Care, Outpatients and Emergency Care Data Set (ECDS), Civil Registration Deaths (Secondary Care Cut) and Civil Registration Deaths – necessary because These data will be used to produce analytical outputs encompassing a vast range of metrics and topics pertinent to healthcare provision. These analytical outputs are used by NHS Organisations to understand their current performance and opportunities for improvement in order to target work plans strategically in an evidence based fashion. The Civil Registration Deaths dataset will temporarily be accessed at the same as the Civil Registration Deaths - Secondary Care Cut dataset, so UHB can ensure that they can produce the required outputs for the purpose described above using the Civil Registration Deaths dataset, in preparation for migrating away from the Secondary Care Cut version of the dataset. The LOPATID field will only be provided to NHS Hospital Staff, for patients that have been treated by their organisation, where the Caldicott Guardian of that organisation has given their approval. The level of the Data will be: LOPATID is required as: • Identifiable – necessary because access to LOPATID and the ability to cross-reference local hospital records is an essential part of governance activities within a Hospital Trust. It enables hospitals to efficiently conduct internal governance audits on a case-by-case basis and therefore focus their finite attention where it is most needed. This directly enables organisations to monitor and manage services for the greater benefit of patients. • UHB via HED delivers a national benchmarking system that can provide assurance to NHS Hospitals that they are providing safe and high quality care and treatment while signposting them to any areas of concern. The HED system provides additional information to that available locally within a hospital trust by enabling the swift observation of patient cohorts that are statistical outliers and warrant further examination. Access to LOPATID is also critical to enable health care professionals to audit their data and clinical practice. This review of individual patient outcomes and experience can evidence the care provided is of a good quality and safe, and also provide assurance to trust boards. In addition, access to identifiers will also enable clinicians to review and audit deaths attributed to them in national mortality models. • Access to LOPATID and the ability to cross-reference local hospital records is an essential part of governance activities within a Hospital Trust. It enables hospitals to efficiently conduct internal governance audits on a case-by-case basis and therefore focus their finite attention where it is most needed. This directly enables organisations to monitor and manage services for the greater benefit of patients. In summary, without this level of information, Trusts would not be able to conduct further analysis to determine the root cause, i.e., detailed reason, for any concerns identified in the high-level information. Such root-cause analyses serve to provide assurance internally and externally across a range of crucial measures. • Access to LOPATID is also critical to enable health care professionals to audit their data and clinical practice. This review of individual patient outcomes and experience can evidence the care provided is of a good quality and safe, and also provide assurance to trust boards. In addition, access to identifiers will also enable clinicians to review and audit deaths attributed to them in national mortality models. The Data will be minimised as follows: • In summary, without this level of information, Trusts would not be able to conduct further analysis to determine the root cause, i.e., detailed reason, for any concerns identified in the high-level information. Such root-cause analyses serve to provide assurance internally and externally across a range of crucial measures. • UHB destroy patient identifiers for data older than 3 years. To address the GDPR principle of data minimisation, UHB have only requested data that is deemed necessary to achieve the purpose described within this Agreement. In particular: • The years of data required allow for organisations to perform multiple functions, such as being able to demonstrate service improvement over time and visualise trends. • Regarding identifiable data: UHB destroy patient identifiers for data older than 3 years. • The datasets requested under this DSA include data for the whole of England. This is required because when performing analyses, organisations need to be able to select peers based on case mix for more accurate benchmarking to assist with service improvement, and these organisations may not be local. Valid peers may also change for a selected service or indicator. As an example, some HED system users are regional providers of a specific service and others are specialised hospitals which require benchmarking across the whole of the UK. Furthermore, the current user base for the HED tool is spread across multiple regions of England and each organisation requires access to their own data. National data is also required to allow the calculation of standardised metrics. • Regarding time periods held: The years of data required allow for organisations to perform multiple functions, such as being able to demonstrate service improvement over time and visualise trends. • Regarding national data: The datasets requested under this DSA include data for the whole of England. This is required because when performing analyses, organisations need to be able to select peers based on case mix for more accurate benchmarking to assist with service improvement, and these organisations may not be local. Valid peers may also change for a selected service or indicator. As an example, some HED system users are regional providers of a specific service and others are specialised hospitals which require benchmarking across the whole of the UK. Furthermore, the current user base for the HED tool is spread across multiple regions of England and each organisation requires access to their own data. National data is also required to allow the calculation of standardised metrics. [1 paragraph unchanged] The HED tool is produced and owned by UHB, an NHS Foundation Trust and registered charity. This work is commissioned and funded on an on-going basis by the sole data controller who also process data, UHB. University Hospitals Birmingham NHS Foundation Trust (UHB) is the controller as the organisation responsible for ensuring that the Data will only be processed for the purpose described above. Income from subscriptions to the HED system goes back into the UHB Trust budget and so is subject to standard NHS financial governance. The lawful basis for processing personal data under the UK GDPR is: Article 6(1)(e) - processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. The lawful basis for processing special category data under the UK GDPR is: Article 9(2)(i) - processing is necessary for reasons of public interest in the area of public health, such as protecting against serious cross-border threats to health or ensuring high standards of quality and safety of health care and of medicinal products or medical devices, on the basis of Union or Member State law which provides for suitable and specific measures to safeguard the rights and freedoms of the data subject, in particular professional secrecy. The funding is provided by UHB. The funder will have no ability to suppress or otherwise limit the publication of findings.

Processing activities

There will be no flow of data from UHB to NHS England. The only flow of record level data will be the dissemination of data by NHS England to UHB (University Hospitals Birmingham NHS FT) on a monthly basis for the following data sets: HES Admitted Patient Care, Outpatients, Emergency Care Data Set (ECDS), Critical Care and linked Civil Registration (Deaths) - Secondary Care Cut mortality data. This data will be provided at patient level with a pseudonymised identifier and LOPATID (i.e. the patient ID used locally in the hospital where a patient received treatment) included. No data will flow to NHS England for the purposes of this Data Sharing Agreement (DSA). The outputs of processed data will be disseminated appropriately via the HED system or bespoke reports. (Please see section 5a. Objective for processing.) NHS England will provide the relevant records from the Hospital Episode Statistics, Admitted Patient Care, Accident & Emergency, Critical Care, Outpatients and Emergency Care Data Set (ECDS), Civil Registration Deaths (Secondary Care Cut) and Civil Registration Deaths datasets to UHB. The Data will The outputs of processed data will be provided on the following basis: • contain directly identifying data items including LOPATID (the patient ID used locally in the hospital where a patient received treatment) which is required to enable hospitals (including UHB) to cross-reference data with local hospital records. • For users not within an NHS Hospital: Access to aggregate-level small-number-suppressed analytics only. The Data will not be transferred to any other location. • For NHS Hospital Users: Access to aggregate-level analytics for their own organisation and access to aggregate-level small-number-suppressed analytics for other organisations. Raw Data is stored on servers onsite at UHB and offsite at Ark Data Centres. Additionally, where a Hospital Trust’s Caldicott Guardian has provided approval identifiable information will available for their own organisation only. Raw Data will be accessed by approved personnel onsite at UHB premises and via remote access UHB is the only organisation conducting processing of the data sets provided by NHS England. The Controller must confirm and provide evidence upon audit by NHS England that access via any remote device complies with the data security obligations within this DSA and the Data Sharing Framework Contract. The data received is processed by UHB to create a wide range of healthcare indicators which focus in on the quality, safety, productivity and efficiency of healthcare delivery. The processing activities undertaken involve: For remote access: • transforming the data from single episodes into spells and continuous inpatient spells, - Remote access will only be from secure locations situated within the territory of use (as further restricted elsewhere within the DSA if so done) stated within this DSA; • linking inpatient admissions to mortality data, - Access controls granting users the minimum level of access required are in place; • and generating benchmarked quality metrics from the data including the creation of statistical models to produce nationally standardised indicators. - Remote access is only via secure connections (e.g., VPNs or secure protocols) to protect data; - Multifactor authentication (MFA) is required for remote access; - Device security, including up-to-date software and operating systems, antivirus software, and enabled firewalls are utilised for the remote access; - All remote access is undertaken within the scope of the organisation’s DSPT (or other security arrangements as per this DSA) and complies with the organisation’s remote access policy. The above applies in addition to any condition set out elsewhere within the DSA (e.g. who may carry out processing, and for what purpose). Remote processing will be from secure locations within: England or Wales. The data will not leave England or Wales at any time. Access is restricted to substantive employees of UHB. All personnel accessing the Data have been appropriately trained in data protection and confidentiality. [1 paragraph unchanged] There will be no requirement or attempt to re-identify individuals except in the circumstance of allowing NHS Hospital Organisations to review low level information directly relating to patient care they have delivered. This information is only provided when an individual working in an NHS Hospital has the authorisation of their Hospital’s Caldicott Guardian to access such information. In such instances a summary of processed information is provided at a low level. For example, the summary will give relevant details of the admission date, method and diagnosis for a patient alongside modelling outputs but not all fields relating to the episodes as recorded in the HES and ECDS data sets would be included. Analysts from UHB will analyse the Data for the purposes described above. Data received from NHS England is only processed by authorised substantive UHB staff with standard NHS training in data protection and confidentiality. The data received is held on a secure server which sits within the Trust's IT framework. Access to data is tightly controlled via UHB Active Directory (AD) accounts settings, i.e., this is the trust user account by which UHB NHS staff access the trust network. There are different access groups that an AD account can be added to, and this controls whether a member of staff can access the data received. Under this Agreement UHB store data at Ark Data Centres. Ark Data Centres supply datacentre-as-a-service (co-location) from Crown Hosting, a HM Government approved datacentre facility. The server and storage equipment at Ark Data Centres are owned by UHB and operated via a privately dedicated link to UHB. IT Services span the local network to the servers and storage hosted at Ark Data Centres. Ark Data Centres have no access to the data. All servers are held in a locked storage room where entry in and out of the rooms is logged and controlled.

Expected output

All outputs will contain only data that is aggregated with small numbers suppressed in line with the HES Analysis Guide. The outputs of processed data will be disseminated appropriately via the HED system or bespoke reports. For users not within a Hospital providing NHS care, they will be provided with aggregate small number supressed analytics. For users working for a Hospital providing NHS care, they will be provided with aggregate level analytics for the Hospitals they are working on behalf of and aggregate small number supressed analytics for other Hospitals. Where a Hospital's Caldicott Guardian has approved, patient identifiable information will be made available. [8 paragraphs unchanged]

Unchanged: Expected measurable benefits, Benefits reported.

DARS-NIC-06605-X1L9Z-v13.3 3 July 2024 to 30 November 2025
Title
Benchmarking Service to NHS organisations
Commercial
Yes
Sublicensing
No
Datasets
9
Files released
93

Datasets: Civil Registrations of Death - Secondary Care Cut; Emergency Care Data Set (ECDS); HES-ID to MPS-ID HES Accident and Emergency; HES-ID to MPS-ID HES Admitted Patient Care; HES-ID to MPS-ID HES Outpatients; HES:Civil Registration (Deaths) bridge; Hospital Episode Statistics Admitted Patient Care (HES APC); Hospital Episode Statistics Critical Care (HES Critical Care); Hospital Episode Statistics Outpatients (HES OP)

What changed from DARS-NIC-06605-X1L9Z-v12.4

Text removed is struck through; text added is underlined. Unchanged paragraphs are summarised rather than repeated.

Fields changed from DARS-NIC-06605-X1L9Z-v12.4
FieldWasBecame
Start date2022-12-012024-07-03

Objective for processing

[11 paragraphs unchanged] • NHS Acute Trusts (80%). (85%). • Other NHS Organisations, including: NHS Integrated Care Boards (ICBs), NHS Commissioning [21 words unchanged] by the legal entity Cumbria, Northumberland, Tyne and Wear NHS Foundation Trust (18%). (12%). 2. Non-NHS Organisations such as Pricewaterhouse Coopers (PwC) (2%). & Grant Thornton (3%). For any future non-NHS subscribers, UHB will inform NHS Digital upfront and include specific details England in any renewal or amendment to this agreement. [1 paragraph unchanged] PwC Non-NHS Organisations work within the healthcare space and are only permitted access to the HED tool when working to support NHS Organisations. PWC Non-NHS Organisations only have access to aggregate, small number suppressed data in line with [11 words unchanged] 1523) relating to anonymisation and can confirm compliance. The rationale for allowing PwC Non-NHS Organisations access to the tool is that some NHS Organisations require additional, short-notice, specialist resource in their work. [1 paragraph unchanged] • PWC staff Staff to be equipped to provide immediate support to NHS Organisations, reducing lead [8 words unchanged] the NHS, where it has already been determined that out-sourcing is required. [18 paragraphs unchanged]

Processing activities

There will be no flow of data from UHB to NHS Digital. England. The only flow of record level data will be the dissemination of data by NHS Digital England to UHB (University Hospitals Birmingham NHS FT) on a monthly basis for [44 words unchanged] ID used locally in the hospital where a patient received treatment) included. [5 paragraphs unchanged] UHB is the only organisation conducting processing of the data sets provided by NHS Digital. England. [6 paragraphs unchanged] Data received from NHS Digital England is only processed by authorised substantive UHB staff with standard NHS training in data protection and confidentiality. [2 paragraphs unchanged]

Expected output

[8 paragraphs unchanged] For example, each month as the national data sets are released by NHS Digital, England, UHB then undertake the processing activities described in order to produce the [26 words unchanged] to produce their own local analysis, dashboards, and reports including board reports.

Benefits reported

[13 paragraphs unchanged] This key reporting and case note review process is used by hospitals up and down the country. Without using the NHS Digital England data it would be impossible to deliver these sorts of benefits to the NHS. The above yielded benefits are ongoing monthly practices.

Unchanged: Expected measurable benefits.

Objective for processing

University Hospitals Birmingham (UHB) NHS Foundation Trust requires access to national data sets for the purpose of providing objective insight and analysis that enables NHS organisations to deliver better services for patients.

The General Data Protection Regulation (GDPR) basis is that it is a public task to monitor healthcare services provided and it is in public interest that the care given is safe and effective. Namely:

a. Article 6 (lawfulness of processing):(e) Public task: the processing is necessary for you to perform a task in the public interest or for your official functions, and the task or function has a clear basis in law.

b. Article 9 (processing of special categories of personal data):(i) processing is necessary for reasons of public interest in the area of public health, such as protecting against serious cross-border threats to health or ensuring high standards of quality and safety of health care and of medicinal products or medical devices, on the basis of Union or Member State law which provides for suitable and specific measures to safeguard the rights and freedoms of the data subject, in particular professional secrecy.

The datasets held and requested under this Data Sharing Agreement (DSA) are: Hospital Episode Statistics (HES) Admitted Patient Care, Outpatients, Accident & Emergency, Emergency Care Data Set (ECDS), Critical Care and linked Civil registration deaths (secondary care cut) mortality data.

These data will be used to produce analytical outputs encompassing a vast range of metrics and topics pertinent to healthcare provision. These analytical outputs are used by NHS Organisations to understand their current performance and opportunities for improvement in order to target work plans strategically in an evidence based fashion.

For over a decade now, UHB has established a proven track record of using national data to provide analytical outputs that enable NHS Organisations to drive improvements to ultimately benefit patients. (Further details of examples are provided in section 5d.)

Such analytical outputs are provided via UHB’s online Healthcare Evaluation Data (HED) benchmarking platform and bespoke reports.

The HED platform provides access to a range of dashboards, alerts, reports and tools that allow NHS Organisations to benchmark across thousands of metrics.

The HED Tool is accessed online by third parties holding a subscription contract with UHB to use the HED system. Such third parties include:

1. NHS Organisations with various geographical locations across England including:

• NHS Acute Trusts (85%).

• Other NHS Organisations, including: NHS Integrated Care Boards (ICBs), NHS Commissioning Support Units (CSUs), Quality Observatories with legal entity under a NHS Trust For example; North East Quality Observatory (NEQOS) is hosted by the legal entity Cumbria, Northumberland, Tyne and Wear NHS Foundation Trust (12%).

2. Non-NHS Organisations such as Pricewaterhouse Coopers (PwC) & Grant Thornton (3%).

For any future non-NHS subscribers, UHB will inform NHS England in any renewal or amendment to this agreement.

NHS Organisations use the analytical outputs to efficiently make better informed decisions as to how they can make sustainable service improvements for the benefit of patients. The system allows NHS Organisations to actively understand performance trends and influences in order to identify improvement opportunities. The range of dashboards, alerts, reports and tools UHB create using these national data sets allow NHS Organisations to actively interrogate benchmarked and risk adjusted metrics in insightful ways. The insight provided is of significant value to NHS Organisations as it isn’t possible to produce such intelligence when solely using local information sources.

Non-NHS Organisations work within the healthcare space and are only permitted access to the HED tool when working to support NHS Organisations. Non-NHS Organisations only have access to aggregate, small number suppressed data in line with the HES Analysis guide. UHB has reviewed the NHS standard (ISB 1523) relating to anonymisation and can confirm compliance. The rationale for allowing Non-NHS Organisations access to the tool is that some NHS Organisations require additional, short-notice, specialist resource in their work.

Direct access enables:

• Staff to be equipped to provide immediate support to NHS Organisations, reducing lead time for projects which can be costly for the NHS, where it has already been determined that out-sourcing is required.

• An efficient way to disseminate information in support of NHS improvement work. Without which UHB would be actively encouraging NHS Organisations to export data outside the NHS.

• Autonomy when undertaking commissioned independent work beneficial to the NHS e.g. the Keogh Review.

The sole purpose of the work associated with this agreement is to support NHS Organisations (including UHB) in the on-going monitoring of clinical quality, patient safety and organisational effectiveness in order to deliver better services for patients.

To deliver the stated objective a wide range of healthcare indicators are calculated. The objective of having as wide an array of relevant indicators as possible is to give NHS managers and clinicians as complete a picture of hospital performance across topics such as mortality, readmissions, length of stay, emergency care, coding quality, etc. HES-Civil registration deaths (secondary care cut). linked data specifically will be used within this work to look at outcomes analysis and form analytical overviews relating to post-discharge mortality. Such overviews relate to standardised post-discharge mortality monitoring within distinct clinical cohorts and bespoke long-term survival monitoring. This work will increase the understanding of complete pathways of care.

Within this agreement, UHB are applying for Local Patient Identifier within Provider (LOPATIDs) a code which uniquely identifies an individual patient locally within a hospital that has provided that patient with treatment or care for the national datasets. There is a legal basis in place for this under Section 251 of the National Health Service Act 2006.

The LOPATID field will only be provided to NHS Hospital Staff, for patients that have been treated by their organisation, where the Caldicott Guardian of that organisation has given their approval.

LOPATID is required as:

• UHB via HED delivers a national benchmarking system that can provide assurance to NHS Hospitals that they are providing safe and high quality care and treatment while signposting them to any areas of concern. The HED system provides additional information to that available locally within a hospital trust by enabling the swift observation of patient cohorts that are statistical outliers and warrant further examination.

• Access to LOPATID and the ability to cross-reference local hospital records is an essential part of governance activities within a Hospital Trust. It enables hospitals to efficiently conduct internal governance audits on a case-by-case basis and therefore focus their finite attention where it is most needed. This directly enables organisations to monitor and manage services for the greater benefit of patients.

• Access to LOPATID is also critical to enable health care professionals to audit their data and clinical practice. This review of individual patient outcomes and experience can evidence the care provided is of a good quality and safe, and also provide assurance to trust boards. In addition, access to identifiers will also enable clinicians to review and audit deaths attributed to them in national mortality models.

• In summary, without this level of information, Trusts would not be able to conduct further analysis to determine the root cause, i.e., detailed reason, for any concerns identified in the high-level information. Such root-cause analyses serve to provide assurance internally and externally across a range of crucial measures.

To address the GDPR principle of data minimisation, UHB have only requested data that is deemed necessary to achieve the purpose described within this Agreement. In particular:

• Regarding identifiable data: UHB destroy patient identifiers for data older than 3 years.

• Regarding time periods held: The years of data required allow for organisations to perform multiple functions, such as being able to demonstrate service improvement over time and visualise trends.

• Regarding national data: The datasets requested under this DSA include data for the whole of England. This is required because when performing analyses, organisations need to be able to select peers based on case mix for more accurate benchmarking to assist with service improvement, and these organisations may not be local. Valid peers may also change for a selected service or indicator. As an example, some HED system users are regional providers of a specific service and others are specialised hospitals which require benchmarking across the whole of the UK. Furthermore, the current user base for the HED tool is spread across multiple regions of England and each organisation requires access to their own data. National data is also required to allow the calculation of standardised metrics.

There are no alternative less intrusive ways of achieving the purpose. National and peer specific benchmarking along with risk adjust metrics can only be provided using a national data set. As such it is in the interest of the public to use an established data set that is already being routinely submitted centrally.

The HED tool is produced and owned by UHB, an NHS Foundation Trust and registered charity. This work is commissioned and funded on an on-going basis by the sole data controller who also process data, UHB.

Income from subscriptions to the HED system goes back into the UHB Trust budget and so is subject to standard NHS financial governance.

Expected output

All outputs will contain only data that is aggregated with small numbers suppressed in line with the HES Analysis Guide.

The outputs produced as a result of data processing are benchmarked or standardised healthcare indicators and analysis encompassing a wide range of topics pertinent to the provision of high quality healthcare within the NHS.

Such topics include: clinical quality, mortality monitoring, readmissions monitoring, patient safety, data quality, operational efficiency, and discharge and admission trends.

Such outputs are provided either via:

• the range of dashboards, alerts, reports and tools made available within the HED system, or

• bespoke reports including clinically-led, retrospective, small number suppressed reports that may be published in peer review journals

The outputs provided via the HED system will then be further utilised by end-users of the system, as described in section 5a, to produce novel outputs for routine service management/evaluation, audit etc. within the NHS. For example, Hospital Trusts using the system will use the outputs provided via HED to produce their own local analysis, dashboards, and reports including board reports.

Work streams are on-going and the outputs already form part of various NHS organisations’ monthly routine reporting and governance assurance processes.

For example, each month as the national data sets are released by NHS England, UHB then undertake the processing activities described in order to produce the range of benchmarked and standardised indicators described above. These outputs will then be used, both locally at UHB, and by NHS Organisations using the HED system, to produce their own local analysis, dashboards, and reports including board reports.

Benefits reported

Each month the range of dashboards, alerts, reports and tools made available within the HED system allows NHS Organisations to identify areas of potential concern within their organisation. Such areas are then investigated further. When appropriate and authorised, the ability to identify a cohort of patients within the organisation and undertake appropriate clinical case note review is invaluable as a part of ensuring good hospital governance.

Some examples of yielded benefits include:

1) Several large acute trusts use the HED mortality modules to monitor and improve their trust’s mortality. Patient groups are identified that demonstrate persistent deviation from the expected mortality levels as they reach a pre-set trigger point. Consequently, the trust’s response to mortality reporting is much more instantaneous, allowing clinical and governance staff to review the deaths, put any actions in motion and share the outcome with the CQC considerably before any official regulatory notification.

Former NHS Medical Director Sir Bruce Keogh described mortality statistics as “smoke signals” for potential problems with care. Using Statistical Process Control (SPC) techniques, these signals are generated. As such, the benefit is derived from the ability to effectively use the data to highlight and investigate potential areas for further clinical review. This enables focused use of limited clinical resources, i.e. increased efficiency, which in itself benefits patients and the general public. This benefit has been experienced by many trusts using HED as they report the significant amount of time they have saved because of HED enabling them to pin-point priority areas, and automatically producing reports, increasing the time available for other hospital priorities.

Additionally, patients benefit as focused clinical review increases the safety and quality of the healthcare services provided.

In one acute Trust this use of HED mortality modules to undertake root cause analysis of patients has ultimately seen them move from special measures to a Care Quality Commission (CQC) rating of ‘Good’.

2) Several acute Trusts use HED to help optimise their services. One acute Trust in the South of England has used HED to generate Service Line Benchmarking packs for clinicians and service managers to help drive service transformation. These packs use the breadth and depth of information available in HED to allow service lines to examine their data and highlight potential opportunities. A measurable benefit from this was that the trauma and orthopaedic team were surprised to find 50% of local activity was being carried out by other providers outside of the main NHS teaching hospital. Consequently, referral to treatment times were targeted by the orthopaedic team working with radiology to develop a one-stop outpatient service where patients referred by their GPs can have their imaging and initial discussions on one day – and receive a same-day decision about whether they are suitable for surgery.

This change benefited patients as they were seen quicker, only had to make one trip to the hospital, and received a decision regarding their surgery faster.

Furthermore, HED delivers the ability for this information to be available to different staff groups and tailored to their individual needs so reducing reliance on local Information support staff.

3) One acute trust specifically used HED to investigate their performance of non-elective maternity re-admissions within 42 days of delivery as raised by the CQC. Analysis of clinical coding using HED identified that they had poor recording practices and evidenced that their subsequent change in coding more accurately represented their re-admission rate. The ability to use HED to undertake such analysis and so improve the accuracy of coding and therefore reported metrics, benefits the health service as accurate information is required to make high quality management decisions when running services.

Improving the accuracy of coding and reported metrics benefits patients as: a) it is important for them to have access to accurate information relating to the quality of the services they may receive, and b) high quality decisions taken using high quality information is critical to high quality services being provided to patients.

4) A specialist acute hospital was finding it difficult to analyse market share for one of their sites. As a specialist provider they required a specific set of hospitals to benchmark against. Using HED they have been able to isolate the Trusts and sites, so they are true peers. HED has helped them drive up their market share, thus promoting competition between hospitals, which in turn drives better care and service across the geographical area so benefiting patients.

5) Commissioning organisations using information from the HED system have reported back the ease with which their non-technical users can quickly pull-out information whilst simultaneously their analysts have the flexibility to answer more detailed questions. This diversity of topics and ease of use serves to spread the use of high-quality information empowering commissioners whilst allowing the analytical resource to be focused where required. Having effective, efficient, and evidence-based commissioning of health services directly benefits patients and the public.

This key reporting and case note review process is used by hospitals up and down the country. Without using the NHS England data it would be impossible to deliver these sorts of benefits to the NHS.

The above yielded benefits are ongoing monthly practices.

DARS-NIC-06605-X1L9Z-v12.4 1 December 2022 to 30 November 2025
Title
Benchmarking Service to NHS organisations
Commercial
Yes
Sublicensing
No
Datasets
9
Files released
106

Datasets: Civil Registrations of Death - Secondary Care Cut; Emergency Care Data Set (ECDS); HES-ID to MPS-ID HES Accident and Emergency; HES-ID to MPS-ID HES Admitted Patient Care; HES-ID to MPS-ID HES Outpatients; HES:Civil Registration (Deaths) bridge; Hospital Episode Statistics Admitted Patient Care (HES APC); Hospital Episode Statistics Critical Care (HES Critical Care); Hospital Episode Statistics Outpatients (HES OP)

What changed from DARS-NIC-06605-X1L9Z-v11.9

Text removed is struck through; text added is underlined. Unchanged paragraphs are summarised rather than repeated.

Fields changed from DARS-NIC-06605-X1L9Z-v11.9
FieldWasBecame
Start date2021-12-012022-12-01
End date2022-11-302025-11-30

Datasets: − Hospital Episode Statistics Accident and Emergency (HES A and E)

Objective for processing

The University Hospitals Birmingham (UHB) NHS Foundation Trust requires access to national data sets for the purpose of providing objective is to provide quality insight and benchmarking analysis that will enable enables NHS organisations to deliver better services for patients. Such analysis is solely provided either: via the online Healthcare Evaluation Data (HED) tool, or via bespoke reports. The General Data Protection Regulation (GDPR) basis is that it is a public task to monitor healthcare services provided and it is in public interest that the care given is safe and effective. Namely: This work is commissioned and funded on an ongoing basis by the data controller, University Hospitals Birmingham NHS Foundation Trust (UHB) and produced by the Health Informatics Department within the Hospital. a. Article 6 (lawfulness of processing):(e) Public task: the processing is necessary for you to perform a task in the public interest or for your official functions, and the task or function has a clear basis in law. The sole objective of this work it is to support both UHB and other NHS Trusts and commissioners in the ongoing monitoring of clinical quality and organisational effectiveness. This purpose is fulfilled either: b. Article 9 (processing of special categories of personal data):(i) processing is necessary for reasons of public interest in the area of public health, such as protecting against serious cross-border threats to health or ensuring high standards of quality and safety of health care and of medicinal products or medical devices, on the basis of Union or Member State law which provides for suitable and specific measures to safeguard the rights and freedoms of the data subject, in particular professional secrecy. a) Directly, the NHS Trust holds a subscription to use the HED system, The datasets held and requested under this Data Sharing Agreement (DSA) are: Hospital Episode Statistics (HES) Admitted Patient Care, Outpatients, Accident & Emergency, Emergency Care Data Set (ECDS), Critical Care and linked Civil registration deaths (secondary care cut) mortality data. b) Indirectly, analytics are provided via a non-NHS organisation, e.g. Pricewaterhouse Coopers (PwC), who hold a subscription to use aggregate small number suppressed data within the system only with NHS organisations. UHB has reviewed the NHS standard (ISB 1523) relating to anonymisation and can confirm the systems are compliant with this. These data will be used to produce analytical outputs encompassing a vast range of metrics and topics pertinent to healthcare provision. These analytical outputs are used by NHS Organisations to understand their current performance and opportunities for improvement in order to target work plans strategically in an evidence based fashion. c) through clinically-led bespoke reports based on retrospective, pseudonymised data which if requested are published in peer review journals with small numbers suppressed. For over a decade now, UHB has established a proven track record of using national data to provide analytical outputs that enable NHS Organisations to drive improvements to ultimately benefit patients. (Further details of examples are provided in section 5d.) The GDPR basis is: Such analytical outputs are provided via UHB’s online Healthcare Evaluation Data (HED) benchmarking platform and bespoke reports. a. Article 6 (lawfulness of processing): The HED platform provides access to a range of dashboards, alerts, reports and tools that allow NHS Organisations to benchmark across thousands of metrics. (e) Public task: the processing is necessary for you to perform a task in the public interest or for your official functions, and the task or function has a clear basis in law. The HED Tool is accessed online by third parties holding a subscription contract with UHB to use the HED system. Such third parties include: b. Article 9 (processing of special categories of personal data): 1. NHS Organisations with various geographical locations across England including: (i) processing is necessary for reasons of public interest in the area of public health, such as protecting against serious cross-border threats to health or ensuring high standards of quality and safety of health care and of medicinal products or medical devices, on the basis of Union or Member State law which provides for suitable and specific measures to safeguard the rights and freedoms of the data subject, in particular professional secrecy. • NHS Acute Trusts (80%). All subscriber organisations are NHS Organisations, except for two. • Other NHS Organisations, including: NHS Integrated Care Boards (ICBs), NHS Commissioning Support Units (CSUs), Quality Observatories with legal entity under a NHS Trust For example; North East Quality Observatory (NEQOS) is hosted by the legal entity Cumbria, Northumberland, Tyne and Wear NHS Foundation Trust (18%). The two non-NHS organisations are PwC and Carnall Farrar. 2. Non-NHS Organisations such as Pricewaterhouse Coopers (PwC) (2%). These non-NHS organisations work within the healthcare space and have access to the system solely for the purpose of assisting NHS organisations. They will only access anonymous data, i.e. aggregate level data with small numbers suppressed in line with HES Analysis guide. For any future non-NHS subscribers, UHB will inform NHS Digital upfront and include specific details in any renewal or amendment to this agreement. For any future non-NHS subscribers, UHB would seek permission from NHS Digital first and update the DSA accordingly. NHS Organisations use the analytical outputs to efficiently make better informed decisions as to how they can make sustainable service improvements for the benefit of patients. The system allows NHS Organisations to actively understand performance trends and influences in order to identify improvement opportunities. The range of dashboards, alerts, reports and tools UHB create using these national data sets allow NHS Organisations to actively interrogate benchmarked and risk adjusted metrics in insightful ways. The insight provided is of significant value to NHS Organisations as it isn’t possible to produce such intelligence when solely using local information sources. NHS organisations are limited to the below list only. The geographical range of these organisations is spread across England. PwC work within the healthcare space and are only permitted access to the HED tool when working to support NHS Organisations. PWC only have access to aggregate, small number suppressed data in line with the HES Analysis guide. UHB has reviewed the NHS standard (ISB 1523) relating to anonymisation and can confirm compliance. The rationale for allowing PwC access to the tool is that some NHS Organisations require additional, short-notice, specialist resource in their work. • NHS Trusts (between 50 to 75 hospitals) Direct access enables: • Clinical Commissioning Groups (CCG - Less than 10) • PWC staff to be equipped to provide immediate support to NHS Organisations, reducing lead time for projects which can be costly for the NHS, where it has already been determined that out-sourcing is required. • Commissioning Support Units (CSU - Less than 10) • An efficient way to disseminate information in support of NHS improvement work. Without which UHB would be actively encouraging NHS Organisations to export data outside the NHS. • NHS England and NHS Improvement • Autonomy when undertaking commissioned independent work beneficial to the NHS e.g. the Keogh Review. • Quality Observatories (QO - Less than 10) The sole purpose of the work associated with this agreement is to support NHS Organisations (including UHB) in the on-going monitoring of clinical quality, patient safety and organisational effectiveness in order to deliver better services for patients. AQUA – legal entity is under Salford Royal NHS Foundation Trust To deliver the stated objective a wide range of healthcare indicators are calculated. The objective of having as wide an array of relevant indicators as possible is to give NHS managers and clinicians as complete a picture of hospital performance across topics such as mortality, readmissions, length of stay, emergency care, coding quality, etc. HES-Civil registration deaths (secondary care cut). linked data specifically will be used within this work to look at outcomes analysis and form analytical overviews relating to post-discharge mortality. Such overviews relate to standardised post-discharge mortality monitoring within distinct clinical cohorts and bespoke long-term survival monitoring. This work will increase the understanding of complete pathways of care. NEQOS – legal entity is under Northumberland Tyne and Wear and South Tees NHS Foundation Trusts Within this agreement, UHB are applying for Local Patient Identifier within Provider (LOPATIDs) a code which uniquely identifies an individual patient locally within a hospital that has provided that patient with treatment or care for the national datasets. There is a legal basis in place for this under Section 251 of the National Health Service Act 2006. • Non-NHS Organisations - (PwC and Carnall Farrar) The LOPATID field will only be provided to NHS Hospital Staff, for patients that have been treated by their organisation, where the Caldicott Guardian of that organisation has given their approval. Patient data is required for all England, for two reasons. Firstly, because when performing analyses, organisations need to be able to select peers based on case mix for more accurate benchmarking to assist with service improvement and these organisations may not be local or regional based. This is true for both UHB and customers of the UHB HED analytical tool. As an example, some HED customers are regional providers of a specific service and others are specialised hospitals which require benchmarking across the whole of the UK. Secondly, the current client base for the HED tool is spread across multiple regions of England and therefore require access to their own data. Further, data for all organisations is required to allow for valid peers to be selected for a given service and indicator. National data is also required to allow the calculation of standardised metric. The years of data required allow for organisations to perform multiple functions, such as being able to demonstrate service improvement over time and visualize trends. LOPATID is required as: To address the GDPR principle of data minimisation, UHB have only requested data that is deemed necessary to achieve the purpose described within this Agreement. Identifiable data is deleted each month for the period in question. UHB do not hold identifiable data older than 3 years. • UHB via HED delivers a national benchmarking system that can provide assurance to NHS Hospitals that they are providing safe and high quality care and treatment while signposting them to any areas of concern. The HED system provides additional information to that available locally within a hospital trust by enabling the swift observation of patient cohorts that are statistical outliers and warrant further examination. To deliver the stated objective a wide range of healthcare indicators are calculated (over 100) and as such various HES data sets including Admitted Patient Care, Outpatients, Accident & Emergency as well as linked mortality data are required. This includes access to the Emergency Care Data Set (ECDS). The objective in having as wide an array of relevant indicators as possible is to give NHS managers and clinicians as complete a picture of hospital performance as possible. Therefore, the whole dataset is needed and cannot be compressed to certain fields. • Access to LOPATID and the ability to cross-reference local hospital records is an essential part of governance activities within a Hospital Trust. It enables hospitals to efficiently conduct internal governance audits on a case-by-case basis and therefore focus their finite attention where it is most needed. This directly enables organisations to monitor and manage services for the greater benefit of patients. HES-Civil registration mortality linked data specifically will be used within this work to look at outcomes analysis and form analytical overviews relating to post-discharge mortality. Such overviews relate to standardised post-discharge mortality monitoring within distinct clinical cohorts and bespoke long-term survival monitoring. This work will increase the understanding of complete pathways of care. Any analysis produced using Civil Registration mortality data will not be made available to non-NHS organisations. • Access to LOPATID is also critical to enable health care professionals to audit their data and clinical practice. This review of individual patient outcomes and experience can evidence the care provided is of a good quality and safe, and also provide assurance to trust boards. In addition, access to identifiers will also enable clinicians to review and audit deaths attributed to them in national mortality models. Local patient identifier (LOAPTID) is required within the HED system for direct patient care and there is a legal basis in place under Section 251 of the National Health Service Act 2006. Subscribers will only be able to access this record level Identifiable data for their own patient records (i.e. patients within their Trust). • In summary, without this level of information, Trusts would not be able to conduct further analysis to determine the root cause, i.e., detailed reason, for any concerns identified in the high-level information. Such root-cause analyses serve to provide assurance internally and externally across a range of crucial measures. HED delivers a national benchmarking system that can provide assurance to hospitals they are providing safe and high-quality care and treatment, or signpost areas of concern. The HED system enables Trusts to easily identify particular patient cohorts that are statistical outliers and warrant further examination. Local patient identifiers are an essential requirement linking areas that require investigation, to hospital records. Without them Trusts would not be able to identify their patients and conduct root-cause analyses both for internal governance and also to provide assurance to external regulatory authorities across a range of key indicators i.e. HSMR, SHMI. Historically, the Secretary of State for Health had ordered a review of avoidable deaths. Ensuring Trusts have access to their local patient identifiers through HED enables them to conduct these audits and therefore focuses attention on eradicating mortalities that could have been prevented. To address the GDPR principle of data minimisation, UHB have only requested data that is deemed necessary to achieve the purpose described within this Agreement. In particular: HED does not just include HES and Mortality datasets. Other data sources used within the HED system are Healthcare Resource Group (HRG) National Tariff, Venous Thromboembolism Risk Assessment data, publicly available NHS England datasets, National Reporting and Learning System (NRLS) patient safety incident reports, PROMS, Safety Thermometer and Infection Control. There is no international data within HED. Furthermore, HES/ECDS/Civil Registration mortality data is not linked to international data and is not used outside of England/Wales. • Regarding identifiable data: UHB destroy patient identifiers for data older than 3 years. It is essential for root-cause analysis that patients can be considered on a case-by-case basis. The ability to be able to identify patients via HED and then subsequently interact with other datasets and clinical notes held locally is vital to detect required clinical quality improvements. A specific example of this is via Mortality reviews, where HED directly enables organisations to monitor and manage services so that no avoidable harm comes to patients whilst in their care. • Regarding time periods held: The years of data required allow for organisations to perform multiple functions, such as being able to demonstrate service improvement over time and visualise trends. HED specifically empowers healthcare managers and clinicians to measure patient experience and outcomes benchmarked against their peers (both local and nationally) e.g. Length of stay, Mortality, Readmissions. This information is not available locally and delivers clinically relevant outcome data and comparative information to clinicians. Access to local patient identifiers is critical to enable health care professionals to audit their data and clinical practice. This review of individual patient outcomes and experience can evidence the care provided is of a good quality and safe, and also provide assurance to trust boards. In addition, access to identifiers will also enable clinicians to review and audit deaths attributed to them in national mortality models. • Regarding national data: The datasets requested under this DSA include data for the whole of England. This is required because when performing analyses, organisations need to be able to select peers based on case mix for more accurate benchmarking to assist with service improvement, and these organisations may not be local. Valid peers may also change for a selected service or indicator. As an example, some HED system users are regional providers of a specific service and others are specialised hospitals which require benchmarking across the whole of the UK. Furthermore, the current user base for the HED tool is spread across multiple regions of England and each organisation requires access to their own data. National data is also required to allow the calculation of standardised metrics. Record-level patient information is only available to organisations who deliver the care. A protocol including Caldicott authorisation form has been reviewed previously by DAAG (DAAG reference: 240412-a) for controlling access to such sensitive items. This established process ensures that access to sensitive items is restricted to authorised hospital trust staff and was found to be robust during a recent NHS Digital Audit. There are no alternative less intrusive ways of achieving the purpose. National and peer specific benchmarking along with risk adjust metrics can only be provided using a national data set. As such it is in the interest of the public to use an established data set that is already being routinely submitted centrally. The rationale for allowing PwC access to aggregate-level small-number suppressed analytics: The HED tool is produced and owned by UHB, an NHS Foundation Trust and registered charity. This work is commissioned and funded on an on-going basis by the sole data controller who also process data, UHB. As some NHS organisations require additional specialist resource to deliver the benefits of using benchmarking information, therefore subscription to the HED tool is required by PwC as: Income from subscriptions to the HED system goes back into the UHB Trust budget and so is subject to standard NHS financial governance. 1. This enables PwC to have people equipped to provide immediate support to NHS organisations. 2. Providing PwC with aggregate-level information via the tool is the most efficient way of disseminating information in support of this work – the alternative described directly below would clearly create large inefficiencies. 3. It allows such organisations to be autonomous in undertaking work that requires a level of independence and is beneficial to the NHS e.g. the Keogh review. In this instance PwC were commissioned to complete this review independently of any engagement of NHS Trusts involved. It would therefore have been inappropriate for them to ask the Hospitals for the information required to undertake this review. The rationale for allowing Carnall Farrar access to aggregate-level small-number-supressed analytics: Carnall Farrar is a management consultancy dedicated to improving health, care and public services. They identify where clinical improvements can be made and the best ways to make change happen. This leads to better use of the scarce NHS resources of workforce, facilities and beds. Carnall Farrar’s objective is to look for clinical solutions to streamline and improve patient care, allowing more people access to a quality service. NHS clients of Carnall Farrar have to meet the costs associated with collecting, processing and analysing that data. The ability for Carnall Farrar to access analysis directly within HED would streamline the data collection process and save time, therefore lowering the cost for the NHS organisation and saving NHS management teams the time it takes to respond to data requests. The ability to undertake such clinical improvement projects allows patient care to be streamlined and improved so allowing more people to receive the best quality clinical care. Please note: The level of access given to PwC and Carnall Farrar will be the same i.e. same levels of security and censoring. An alternative would be for NHS organisations working with PwC and Carnall Farrar to provide data directly to the non-NHS organisations. This arrangement would have the following detrimental effect on the NHS: 1. It would actively be encouraging NHS-organisations to export data at varying levels (while only aggregate-level small-number-supressed analytics will be provided) from the HED system and send it to non-NHS organisations. By these two non-NHS organisations having direct access UHB can monitor which modules are accessed when and by whom. This negates the need for NHS organisations to export isolated aggregate data and email it outside the NHS. 2. It would introduce a longer lead time for projects which would ultimately cost the NHS more.

Processing activities

Data received from NHS Digital is only processed by authorised staff on site at UHB. No third parties are involved in the processing of the data. There will be no flow of data from UHB to NHS Digital. The only flow of record level data will be the dissemination of data by NHS Digital to UHB (University Hospitals Birmingham NHS FT) on a monthly basis for the following data sets: HES Admitted Patient Care, Outpatients, Emergency Care Data Set (ECDS), Critical Care and linked Civil Registration (Deaths) - Secondary Care Cut mortality data. This data will be provided at patient level with a pseudonymised identifier and LOPATID (i.e. the patient ID used locally in the hospital where a patient received treatment) included. All staff members processing the data are substantive employees of UHB and have received training in data protection and confidentiality. The outputs of processed data will be disseminated appropriately via the HED system or bespoke reports. (Please see section 5a. Objective for processing.) Data received from the NHS Digital by UHB is processed in line with a strict protocol. Under this Agreement UHB store data at Ark Data Centres. The storage and equipment at Ark Data Centres are owned and operated via a privately dedicated link to UHB. IT Services span the local network to the servers and storage hosted at Ark Data Centres. The data is held on a Secure SQL server which sits within the Trusts IT framework and is not available for querying by any external parties or tools. Passwords are strictly controlled by UHB IT services, with access permissions for each user administered on the authorisation of the Data Controller (Director of Strategy and Quality Development). Access requests go through a robust internal sign off process. All servers are held in a locked storage room where entry in and out of the rooms is logged and controlled by senior managers. The outputs of processed data will be provided on the following basis: Ark Data Centres supply support to the system, but do not access data. Therefore, any access to the data held under this Agreement would be considered a breach of the Agreement. • For users not within an NHS Hospital: Access to aggregate-level small-number-suppressed analytics only. The data received is used to create a wide range of healthcare indicators which focus in on the quality, safety, productivity and efficiency of healthcare delivery. Such analysis is solely provided either: via the online Healthcare Evaluation Data (HED) tool, or via bespoke reports. Either of which is only provided to UK organisations. • For NHS Hospital Users: Access to aggregate-level analytics for their own organisation and access to aggregate-level small-number-suppressed analytics for other organisations. Summary of types of users and access controls in place: Additionally, where a Hospital Trust’s Caldicott Guardian has provided approval identifiable information will available for their own organisation only. PwC and Carnall Farrar: Access to aggregate-level small-number-suppressed analytics only formed using HES APC, OP, A&E or ECDS data (but NOT Civil Registration mortality data) UHB is the only organisation conducting processing of the data sets provided by NHS Digital. NHS but non-Hospital User: Access to aggregate-level small-number-suppressed analytics only formed using HES APC, OP, A&E, ECDS and/or Civil Registration mortality linked data. The data received is processed by UHB to create a wide range of healthcare indicators which focus in on the quality, safety, productivity and efficiency of healthcare delivery. The processing activities undertaken involve: NHS Hospital User: Access to aggregate-level small-number-suppressed analytics only formed using HES APC, OP, A&E, ECDS or Civil Registration mortality linked data unless Caldicott authorisation is in place to allow access to low level details and/or sensitive items for their own organisation only. These are the only uses who have access to LOPATID, only for patients treated at that hospital. • transforming the data from single episodes into spells and continuous inpatient spells, Civil Registration mortality data access will be limited to subscriber NHS organisations only (in line with current approvals). • linking inpatient admissions to mortality data, UHB have permission to share Civil Registration mortality data with NHS Acute Trusts. This Agreement permits UHB to additionally share Civil Registration mortality data with NHS organisations that are Non-Acute Trusts, specifically: • and generating benchmarked quality metrics from the data including the creation of statistical models to produce nationally standardised indicators. Clinical Commissioning Groups NHS data flowed under this agreement will not be linked to any other data not otherwise specified in this agreement. Commissioning Support Units There will be no requirement or attempt to re-identify individuals except in the circumstance of allowing NHS Hospital Organisations to review low level information directly relating to patient care they have delivered. This information is only provided when an individual working in an NHS Hospital has the authorisation of their Hospital’s Caldicott Guardian to access such information. In such instances a summary of processed information is provided at a low level. For example, the summary will give relevant details of the admission date, method and diagnosis for a patient alongside modelling outputs but not all fields relating to the episodes as recorded in the HES and ECDS data sets would be included. NHS England and NHS Improvement Data received from NHS Digital is only processed by authorised substantive UHB staff with standard NHS training in data protection and confidentiality. Only aggregate-level small-number-supressed analytics will be provided to the Non-Acute Trusts. These NHS organisations require access to aggregate mortality data as they report on the SHMI mortality model (which uses mortality data to report on numbers of deaths within 30 days of discharge). The data received is held on a secure server which sits within the Trust's IT framework. Access to data is tightly controlled via UHB Active Directory (AD) accounts settings, i.e., this is the trust user account by which UHB NHS staff access the trust network. There are different access groups that an AD account can be added to, and this controls whether a member of staff can access the data received. The NHS Non-Acute Trusts are responsible for nursing and medical teams across England. HES/ECDS-Civil Registration mortality linked data specifically will be used to look at outcomes analysis and form analytical overviews relating to post discharge mortality. Such overviews relate to standardised post-discharge mortality monitoring within distinct clinical cohorts and bespoke long-term survival monitoring. This work will increase the understanding of complete pathways of care. Any analysis produced using Civil Registration mortality data will not be made available to non-NHS organisations. The objective is to provide quality and benchmarking analysis that will enable NHS organisations to deliver better services for patients. Under this Agreement UHB store data at Ark Data Centres. Ark Data Centres supply datacentre-as-a-service (co-location) from Crown Hosting, a HM Government approved datacentre facility. The server and storage equipment at Ark Data Centres are owned by UHB and operated via a privately dedicated link to UHB. IT Services span the local network to the servers and storage hosted at Ark Data Centres. Ark Data Centres have no access to the data. All servers are held in a locked storage room where entry in and out of the rooms is logged and controlled. Record-level data is only available to organisations that deliver patient care. This data will only be provided if an individual working within an NHS Hospital has the authorisation of their Hospital’s Caldicott Guardian to access patient-level information where that patient is treated at that Trust, including sensitive items, for the purposes of conducting clinical review of cases. In such instances a summary (but not all fields present in the raw HES, ECDS or Civil Registration mortality data) is provided at spell or patient level. For example, the summary will give details of the admission date, method and diagnosis for a patient but not all fields relating to the episodes as recorded in the raw HES and ECDS data. There will be no data linkage undertaken with NHS Digital data provided under this Agreement that is not already noted in the Agreement. Data will only be accessed and processed by substantive employees of University Hospitals Birmingham NHS Foundation Trusts and will not be accessed or processed by any other third parties not mentioned in this Agreement. All organisations party to this agreement must comply with the Data Sharing Framework Contract requirements, including those regarding the use (and purposes of that use) by “Personnel” (as defined within the Data Sharing Framework Contract i.e: employees, agents and contractors of the Data Recipient who may have access to that data).

Expected output

The sole outputs are benchmarked or standardised healthcare indicators such as measures of mortality, survival, discharge and admission trends, readmissions, length of stay, patient safety etc. All outputs will contain only data that is aggregated with small numbers suppressed in line with the HES Analysis Guide. Such outputs are solely provided either via: The outputs produced as a result of data processing are benchmarked or standardised healthcare indicators and analysis encompassing a wide range of topics pertinent to the provision of high quality healthcare within the NHS. • the range of Dashboards and Modules made available within the HED system, or Such topics include: clinical quality, mortality monitoring, readmissions monitoring, patient safety, data quality, operational efficiency, and discharge and admission trends. • aggregate small number censored reports Such outputs are provided either via: Within the HED system: • the range of dashboards, alerts, reports and tools made available within the HED system, or Dashboards will only contain aggregate level information. Modules can contain aggregate level information and low-level information. As explained, the level of data that can be viewed within a module depends on the access level of the named individual user and which organisation they are working for. As such, access to low-level information, including small numbers, is strictly controlled in line with the access controls outlined in the above section on ‘Processing activities’ • bespoke reports including clinically-led, retrospective, small number suppressed reports that may be published in peer review journals Outputs are to be used solely for the purpose of assisting the NHS. The outputs provided via the HED system will then be further utilised by end-users of the system, as described in section 5a, to produce novel outputs for routine service management/evaluation, audit etc. within the NHS. For example, Hospital Trusts using the system will use the outputs provided via HED to produce their own local analysis, dashboards, and reports including board reports. Outputs will be used by NHS Clinicians and Managers to: Work streams are on-going and the outputs already form part of various NHS organisations’ monthly routine reporting and governance assurance processes. • Assure and manage clinical quality and patient safety within NHS Organisations For example, each month as the national data sets are released by NHS Digital, UHB then undertake the processing activities described in order to produce the range of benchmarked and standardised indicators described above. These outputs will then be used, both locally at UHB, and by NHS Organisations using the HED system, to produce their own local analysis, dashboards, and reports including board reports. • Identify trends requiring a clinical review of patient pathways. (Hospital based users with Caldicott approval are able to investigate nationally standardised metrics and ‘drill-down’ to patient level information for patients treated at that trust, including local patient identifiers, in order to conduct clinical case note review and route cause analysis) • Increase the understanding of patient outcomes • Identify potential areas for improvement in clinical quality or operational efficiency either within a Hospital or a local healthcare economy • Identify areas of best practice either within hospital Trusts or local healthcare economies • Provide consultants with the information necessary for consultant revalidation All of the above will serve to increase the understanding of patient outcomes in regard to quality, safety, productivity and efficiency benchmarking within the NHS. As mentioned, aggregate-level small-number-suppressed analytics produced for the HED tool are being made available to two non-NHS organisations. In the case of PwC, UHB are working with this subscriber to support NHS organisations. Some examples of the specific outcomes of this access are: • Aggregate-level analytics have been used to undertake due diligence for both Monitor and CQC. A good example being production of the Keogh review information packs. This information was vital to the extensive work undertaken as part of the Keogh review which has culminated in the majority of the hospitals originally identified being taken out of special measures by the CQC. • A further example is use of aggregate level analytics on elderly care readmissions with a CCG in order to support work helping them to understand how they could reduce avoidable readmissions within their region. In the case of Carnall Farrar, the specific output is continuation of the development and implementation of local solutions that address long-standing challenges within clinical service delivery and the achievement of financial targets. This support is provided to STPs, hospital Trusts and CCGs. It is not appropriate to set a target date for this work as the work streams are ongoing and the outputs already form part of various NHS organisations’ monthly reporting and governance assurance processes.

Expected measurable benefits

To continue to drive clinical service improvements and benefit patient outcome as demonstrated below. Sharing this data benefits healthcare provision within the NHS as the data received is used to create benchmarked and standardised healthcare indicators and analysis encompassing a wide range of topics that may be used to support the provision of high quality healthcare within the NHS. How the data has already benefited health and social care: Such outputs, provided via the HED system and bespoke reports, may be used by NHS staff for the purpose of assisting the NHS to: The data is used to provide benchmarking information on areas such as: • Assure and manage clinical quality and patient safety within NHS Organisations. • Mortality rate • Identify trends requiring a clinical review of patient pathways. • Emergency readmission rate • Increase the understanding of patient outcomes. • Length of stay • Identify potential areas for improvement in clinical quality or operational efficiency either within a hospital or a local healthcare economy. • Day case rate • Identify areas of best practice either within hospital Trusts or local healthcare economies. • New to follow-up outpatient ratios • Provide consultants with the information necessary for consultant revalidation. • A&E clinical quality indicators All of the above may serve to increase the understanding of patient outcomes in regard to quality, safety, productivity and efficiency within the NHS which may ultimately drive clinical service improvements and benefit patient outcomes. The output of analytics available to NHS organisations using the HED system to enable NHS clinicians and managers to increase the understanding of patient outcomes and identify areas for improvement and best practice. Additionally, as an NHS Hospital, UHB has key insight and personal interest in maximising the use of analytical outputs to drive improvements in patient care and operational efficiency within the NHS. A range of direct benefits to healthcare have already been delivered during the course of this project. Quality and improvement work being undertaken and supported by the NHS, for the NHS is in the public interest. In summary: By utilising the outputs and analytics provided via the HED system and bespoke reports, organisations are able to focus and deliver on the three key principles of Health and Social Care: • NHS Organisations are provided with the information necessary to provide clinical quality and patient safety assurance within their organisation • Patients at the centre of the NHS – the analytics as stated above ensure that NHS organisations are empowered to identify areas of poor performance and can put in place measures to rectify this. They are also then able to demonstrate improvement in these areas over time. As the numerous measures bring together patient safety and operational efficiency, organisations can easily identify areas to target to ensure that the care being given is safe, effective and optimal. • NHS Organisations are able to identify & interrogate areas of poor performance allowing for evidence based health service management • Changing the emphasis of measurement to clinical outcomes – there are multiple outputs provided to assist with this focus on clinical outcomes, and the ambition to achieve best practice. Organisations are able to ensure they are performing as expected against local and national standards and where necessary identify areas of best practice through benchmarking with peers (locally and nationally). • NHS Organisations are able to identify areas of good performance increasing the understanding of best practice in healthcare • Empowering health professionals – The tool enables NHS managers and clinicians to make evidence-based decisions i.e. supporting business cases, changing patient pathways. HED provides easily accessible information so healthcare professionals are able to review their specialty and service lines to ensure service delivery and patient outcomes are optimal. The system reports information in a timely, meaningful and relevant fashion to various clinical settings. As the analytics are used by providers and commissioners, the whole integrated healthcare economy is empowered to better join up health and care services, improve population health and reduce health inequalities. • Clinicians are supported in undertaking appraisal and revalidation – reflective practice is a vital contributor to ensure high quality care The dissemination of the data sets requested is crucial to achieving the aforementioned benefits. National and peer specific benchmarking along with risk adjust metrics can only be provided using a national data set. As such it is in the interest of the public to use an established data set that is already being routinely submitted. By utilising the outputs and analytics provided, organisations are able to focus and deliver on the three key principles of Health and Social Care: Dissemination of the processing outputs via the HED system and bespoke reports allows a continual feedback process to exist for NHS Trusts that, through benchmarking, helps drive best practice, clinical excellence and operational efficiency. • Patients at the centre of the NHS – the analytics as stated above ensure that organisations are empowered to identify areas of poor performance and can put in place measures to rectify this. They are also then able to demonstrate improvement in these areas over time. As the numerous measures bring together patient safety and operational efficiency, organisations can easily identify areas to target to ensure that the care being given is safe, effective and optimal. The HED system has already directly benefited health and social care by enabling NHS clinicians and managers to increase their understanding of patient outcomes and identify areas for improvement and best practice. Namely: • Changing the emphasis of measurement to clinical outcomes – there are multiple modules provided to assist with this focus on clinical outcomes, and the strive to achieve best practice. Organisations are able to ensure they are performing as expected against local and national standards and where necessary identify areas of best practice through benchmarking with peers (locally and nationally). • NHS Organisations are provided with the information necessary to provide clinical quality and patient safety assurance within their organisation. • Empowering health professionals – The tool enables managers and clinicians to make evidence-based decisions i.e. supporting business cases, changing patient pathways. HED provides easily accessible dashboards and analytical modules so healthcare professionals are able to review their specialty and service lines to ensure service delivery and patient outcomes are optimal. The system reports information in a timely, meaningful and relevant fashion to various clinical settings. As the analytics are used by providers and commissioners, the GP is empowered to ensure the services provided are delivery best patient care, again keeping the patient at the centre. • NHS Organisations are able to identify & interrogate areas of poor performance allowing for evidence based health service management. To give some specific examples: • NHS Organisations are able to identify areas of good performance increasing the understanding of best practice in healthcare. Since 2010 the number of NHS organisations using HED has grown, and retention of customers remains high with only a small percentage of customers who did not renew (<5% non-retention rate). Customers are also signing for lengthy contract periods as they value the insight provided, with the average contract length being for 3 years and with some NHS organisations subscribing for 5 year periods. This high retention rate and the continued investment in the HED system demonstrates the value organisations place on the product and the benefits it brings in a period where organisations are looking to make cost savings and efficiencies. • Clinicians are supported in undertaking appraisal and revalidation – reflective practice is a vital contributor to ensure high quality care. The role of Non-NHS Organisations in supporting NHS Organisations: Deriving such benefits is necessarily intertwined with other on-going hospital programmes and initiatives. Reviewing the analytical evidence provided by the outputs produced at UHB is one part of implementing improvements to clinical quality, patient safety, operational efficiency etc. Allowing the named non-NHS organisations to access aggregate level analytics is beneficial to the NHS as it enables the NHS to quickly access additional specialist resource when it is required. This allows the timely delivery of improvements in clinical quality and/or operational efficiency. Decisions, changes and actions are necessarily implemented by the NHS staff using the analytical evidence provided. In the case of the data controlled, UHB as a hospital will directly realise these benefits for our own organisation. In the case of other NHS organisations it will be their own clinical and operational staff that carry out the course of action informed by the analytical outputs produced at UHB so leading to the benefits described throughout this application. Without this option it would be necessary for them to increase or upskill their internal resource. To do so would require longer timescales and prove more costly for the organisation in the long run if there is primarily a short term need. There are over 60 NHS Organisations, equating to millions of patient contacts each year, making use of the information provided via the HED System. As such the magnitude of the impact is significant. Some further specific benefits relating to private sector access include: 1. Supporting the Keogh review at various levels in terms of creating the initial data packs for the review and also in undertaking subsequent mortality reviews which ultimately resulted in 13 hospitals being taken off special measures by the CQC. 2. Supporting commissioners across an area to have the evidence necessary to understand how to improve the quality and provision of care across a region.

Benefits reported

Each month a the range of modules are produced which allow dashboards, alerts, reports and tools made available within the HED system allows NHS hospitals Organisations to identify areas of potential concern within their organisation. Such areas are [23 words unchanged] note review is invaluable as a part of ensuring good hospital governance. • University Hospitals Birmingham (UHB) NHS Foundation Trust’s Clinical Quality Monitoring Group use the HED CUSUM model as a continual assessment of mortality. Diagnosis groups are identified that demonstrate persistent deviation from the expected mortality levels and reach a pre-set trigger point. Consequently, the trust approach to mortality is proactive rather than reactive and enables UHB to review the deaths and share the outcome with CQC considerably before the official regulatory notification. Former NHS Medical Director Sir Bruce Keogh described mortality statistics as “smoke signals” for potential problems with care. Using Statistical Process Control (SPC) techniques, these signals are only generated by ‘out-of control’ organisations, both significantly higher or lower than expected. As such, the benefit is derived from the ability to effectively use the numbers to highlight and investigate potential areas for further clinical review. Some examples of yielded benefits include: • George Eliot Hospital NHS Trust have used HED mortality modules to undertake root cause analysis of patients which has ultimately seen them move from special measures to a CQC rating of ‘Good’. 1) Several large acute trusts use the HED mortality modules to monitor and improve their trust’s mortality. Patient groups are identified that demonstrate persistent deviation from the expected mortality levels as they reach a pre-set trigger point. Consequently, the trust’s response to mortality reporting is much more instantaneous, allowing clinical and governance staff to review the deaths, put any actions in motion and share the outcome with the CQC considerably before any official regulatory notification. • Royal Liverpool and Broadgreen University Hospital NHS Trust uses HED to report benchmarking and mortality to their Trust Board. A measurable benefit they have observed, and that is echoed in other Trusts, is the significant amount of time they have saved with HED automatically producing these reports for them, freeing their time for other hospital priorities. Former NHS Medical Director Sir Bruce Keogh described mortality statistics as “smoke signals” for potential problems with care. Using Statistical Process Control (SPC) techniques, these signals are generated. As such, the benefit is derived from the ability to effectively use the data to highlight and investigate potential areas for further clinical review. This enables focused use of limited clinical resources, i.e. increased efficiency, which in itself benefits patients and the general public. This benefit has been experienced by many trusts using HED as they report the significant amount of time they have saved because of HED enabling them to pin-point priority areas, and automatically producing reports, increasing the time available for other hospital priorities. • Calderdale and Huddersfield have used HED to look at their clinical coding to evidence areas of improvement in data quality and ensure they are not over- or under-coding compared to local and national peers. The system has provided reassurance to the Calderdale and Huddersfield NHS Outpatients (CHFT) Exec Board and Local Commissioning Groups while providing benchmarking insight into coding within different specialty areas. Additionally, patients benefit as focused clinical review increases the safety and quality of the healthcare services provided. • HED provides direct intelligent feedback to service areas that can change hospital performance for the better. However, this is not the only tool that will influence behaviour in a hospital, so it is difficult to attribute changes solely to HED. As a marker of the sizeable impact, it would have were HED not able to provide this information, Derby Teaching Hospitals NHS Foundation Trust, Royal Cornwall Hospital NHS Trust, Bradford Teaching Hospitals NHS Foundation Trust and The Royal Wolverhampton NHS Trust are just a few examples of the many Trusts that have contacted HED over the last few months unable to access LOPATID information for case note reviews. Hospitals who are unable to access LOPATID have noticed instantly the impact this missing data is having on their ability to interrogate and improve their trust’s mortality levels. In one acute Trust this use of HED mortality modules to undertake root cause analysis of patients has ultimately seen them move from special measures to a Care Quality Commission (CQC) rating of ‘Good’. • Plymouth Hospitals NHS 2) Several acute Trusts use HED to help optimise their services. One acute Trust have in the South of England has used HED to generate Service Line Benchmarking packs for clinicians and service managers to help inform decisions about drive service transformation. The These packs bring together data on finances, operational efficiency, safety use the breadth and quality indicators benchmarked against relevant peers. This allows depth of information available in HED to allow service lines to examine their data and highlight potential financial opportunities. A measurable benefit from this was that the trauma and orthopaedic [60 words unchanged] and receive a same-day decision about whether they are suitable for surgery. • Sherwood Forest Hospitals NHS Foundation Trust predominantly use HED for market share and benchmarking of length of stay, day case rates, readmissions, DNA rates and new to follow up ratios against peers. HED is also used to provide assurances around the HSMR/SHMI and highlight areas of focus to the Mortality Surveillance group. Specific measurable benefits have been the delivery of information to service line meetings and to the business unit. This has been used to set targets, interpret meaningful information and provide context by measuring against local peers and nationally – which the trust had not otherwise been able to do for a number of years. Furthermore, HED delivers the ability for this information to be available to all staff groups – without the reliance on the individual trust’s Information Team. This change benefited patients as they were seen quicker, only had to make one trip to the hospital, and received a decision regarding their surgery faster. • One acute trust specifically used HED to investigate their performance of non-elective maternity re-admissions within 42 days of delivery as raised by the CQC. Analysis of clinical coding using HED identified that they had poor recording practices and evidenced that their subsequent change in coding more accurately represented their re-admission rate. Furthermore, HED delivers the ability for this information to be available to different staff groups and tailored to their individual needs so reducing reliance on local Information support staff. • A specialist acute hospital was finding it difficult to analyse market share for one of their sites. As a specialist provider they required a specific set of hospitals to benchmark against. Using HED they have been able to isolate the Trusts and sites, so they are true peers. HED has helped them drive up their market share, thus promoting competition between hospitals, which in turn drives better care and service across the geographical area. 3) One acute trust specifically used HED to investigate their performance of non-elective maternity re-admissions within 42 days of delivery as raised by the CQC. Analysis of clinical coding using HED identified that they had poor recording practices and evidenced that their subsequent change in coding more accurately represented their re-admission rate. The ability to use HED to undertake such analysis and so improve the accuracy of coding and therefore reported metrics, benefits the health service as accurate information is required to make high quality management decisions when running services. This key reporting and case note review process is used by hospitals up and down the country, most commonly in the areas of mortality and readmissions management. Without using the HES data it would be impossible to deliver these sorts of benefits to the NHS. Improving the accuracy of coding and reported metrics benefits patients as: a) it is important for them to have access to accurate information relating to the quality of the services they may receive, and b) high quality decisions taken using high quality information is critical to high quality services being provided to patients. The yielded benefit of HED is the continual feedback process to Trusts that, through benchmarking, enables best practice, clinical excellence, efficiency and financial savings. Most outcomes are intertwined with other ongoing hospital monitoring programmes and initiatives. 4) A specialist acute hospital was finding it difficult to analyse market share for one of their sites. As a specialist provider they required a specific set of hospitals to benchmark against. Using HED they have been able to isolate the Trusts and sites, so they are true peers. HED has helped them drive up their market share, thus promoting competition between hospitals, which in turn drives better care and service across the geographical area so benefiting patients. 5) Commissioning organisations using information from the HED system have reported back the ease with which their non-technical users can quickly pull-out information whilst simultaneously their analysts have the flexibility to answer more detailed questions. This diversity of topics and ease of use serves to spread the use of high-quality information empowering commissioners whilst allowing the analytical resource to be focused where required. Having effective, efficient, and evidence-based commissioning of health services directly benefits patients and the public. This key reporting and case note review process is used by hospitals up and down the country. Without using the NHS Digital data it would be impossible to deliver these sorts of benefits to the NHS.

Objective for processing

University Hospitals Birmingham (UHB) NHS Foundation Trust requires access to national data sets for the purpose of providing objective insight and analysis that enables NHS organisations to deliver better services for patients.

The General Data Protection Regulation (GDPR) basis is that it is a public task to monitor healthcare services provided and it is in public interest that the care given is safe and effective. Namely:

a. Article 6 (lawfulness of processing):(e) Public task: the processing is necessary for you to perform a task in the public interest or for your official functions, and the task or function has a clear basis in law.

b. Article 9 (processing of special categories of personal data):(i) processing is necessary for reasons of public interest in the area of public health, such as protecting against serious cross-border threats to health or ensuring high standards of quality and safety of health care and of medicinal products or medical devices, on the basis of Union or Member State law which provides for suitable and specific measures to safeguard the rights and freedoms of the data subject, in particular professional secrecy.

The datasets held and requested under this Data Sharing Agreement (DSA) are: Hospital Episode Statistics (HES) Admitted Patient Care, Outpatients, Accident & Emergency, Emergency Care Data Set (ECDS), Critical Care and linked Civil registration deaths (secondary care cut) mortality data.

These data will be used to produce analytical outputs encompassing a vast range of metrics and topics pertinent to healthcare provision. These analytical outputs are used by NHS Organisations to understand their current performance and opportunities for improvement in order to target work plans strategically in an evidence based fashion.

For over a decade now, UHB has established a proven track record of using national data to provide analytical outputs that enable NHS Organisations to drive improvements to ultimately benefit patients. (Further details of examples are provided in section 5d.)

Such analytical outputs are provided via UHB’s online Healthcare Evaluation Data (HED) benchmarking platform and bespoke reports.

The HED platform provides access to a range of dashboards, alerts, reports and tools that allow NHS Organisations to benchmark across thousands of metrics.

The HED Tool is accessed online by third parties holding a subscription contract with UHB to use the HED system. Such third parties include:

1. NHS Organisations with various geographical locations across England including:

• NHS Acute Trusts (80%).

• Other NHS Organisations, including: NHS Integrated Care Boards (ICBs), NHS Commissioning Support Units (CSUs), Quality Observatories with legal entity under a NHS Trust For example; North East Quality Observatory (NEQOS) is hosted by the legal entity Cumbria, Northumberland, Tyne and Wear NHS Foundation Trust (18%).

2. Non-NHS Organisations such as Pricewaterhouse Coopers (PwC) (2%).

For any future non-NHS subscribers, UHB will inform NHS Digital upfront and include specific details in any renewal or amendment to this agreement.

NHS Organisations use the analytical outputs to efficiently make better informed decisions as to how they can make sustainable service improvements for the benefit of patients. The system allows NHS Organisations to actively understand performance trends and influences in order to identify improvement opportunities. The range of dashboards, alerts, reports and tools UHB create using these national data sets allow NHS Organisations to actively interrogate benchmarked and risk adjusted metrics in insightful ways. The insight provided is of significant value to NHS Organisations as it isn’t possible to produce such intelligence when solely using local information sources.

PwC work within the healthcare space and are only permitted access to the HED tool when working to support NHS Organisations. PWC only have access to aggregate, small number suppressed data in line with the HES Analysis guide. UHB has reviewed the NHS standard (ISB 1523) relating to anonymisation and can confirm compliance. The rationale for allowing PwC access to the tool is that some NHS Organisations require additional, short-notice, specialist resource in their work.

Direct access enables:

• PWC staff to be equipped to provide immediate support to NHS Organisations, reducing lead time for projects which can be costly for the NHS, where it has already been determined that out-sourcing is required.

• An efficient way to disseminate information in support of NHS improvement work. Without which UHB would be actively encouraging NHS Organisations to export data outside the NHS.

• Autonomy when undertaking commissioned independent work beneficial to the NHS e.g. the Keogh Review.

The sole purpose of the work associated with this agreement is to support NHS Organisations (including UHB) in the on-going monitoring of clinical quality, patient safety and organisational effectiveness in order to deliver better services for patients.

To deliver the stated objective a wide range of healthcare indicators are calculated. The objective of having as wide an array of relevant indicators as possible is to give NHS managers and clinicians as complete a picture of hospital performance across topics such as mortality, readmissions, length of stay, emergency care, coding quality, etc. HES-Civil registration deaths (secondary care cut). linked data specifically will be used within this work to look at outcomes analysis and form analytical overviews relating to post-discharge mortality. Such overviews relate to standardised post-discharge mortality monitoring within distinct clinical cohorts and bespoke long-term survival monitoring. This work will increase the understanding of complete pathways of care.

Within this agreement, UHB are applying for Local Patient Identifier within Provider (LOPATIDs) a code which uniquely identifies an individual patient locally within a hospital that has provided that patient with treatment or care for the national datasets. There is a legal basis in place for this under Section 251 of the National Health Service Act 2006.

The LOPATID field will only be provided to NHS Hospital Staff, for patients that have been treated by their organisation, where the Caldicott Guardian of that organisation has given their approval.

LOPATID is required as:

• UHB via HED delivers a national benchmarking system that can provide assurance to NHS Hospitals that they are providing safe and high quality care and treatment while signposting them to any areas of concern. The HED system provides additional information to that available locally within a hospital trust by enabling the swift observation of patient cohorts that are statistical outliers and warrant further examination.

• Access to LOPATID and the ability to cross-reference local hospital records is an essential part of governance activities within a Hospital Trust. It enables hospitals to efficiently conduct internal governance audits on a case-by-case basis and therefore focus their finite attention where it is most needed. This directly enables organisations to monitor and manage services for the greater benefit of patients.

• Access to LOPATID is also critical to enable health care professionals to audit their data and clinical practice. This review of individual patient outcomes and experience can evidence the care provided is of a good quality and safe, and also provide assurance to trust boards. In addition, access to identifiers will also enable clinicians to review and audit deaths attributed to them in national mortality models.

• In summary, without this level of information, Trusts would not be able to conduct further analysis to determine the root cause, i.e., detailed reason, for any concerns identified in the high-level information. Such root-cause analyses serve to provide assurance internally and externally across a range of crucial measures.

To address the GDPR principle of data minimisation, UHB have only requested data that is deemed necessary to achieve the purpose described within this Agreement. In particular:

• Regarding identifiable data: UHB destroy patient identifiers for data older than 3 years.

• Regarding time periods held: The years of data required allow for organisations to perform multiple functions, such as being able to demonstrate service improvement over time and visualise trends.

• Regarding national data: The datasets requested under this DSA include data for the whole of England. This is required because when performing analyses, organisations need to be able to select peers based on case mix for more accurate benchmarking to assist with service improvement, and these organisations may not be local. Valid peers may also change for a selected service or indicator. As an example, some HED system users are regional providers of a specific service and others are specialised hospitals which require benchmarking across the whole of the UK. Furthermore, the current user base for the HED tool is spread across multiple regions of England and each organisation requires access to their own data. National data is also required to allow the calculation of standardised metrics.

There are no alternative less intrusive ways of achieving the purpose. National and peer specific benchmarking along with risk adjust metrics can only be provided using a national data set. As such it is in the interest of the public to use an established data set that is already being routinely submitted centrally.

The HED tool is produced and owned by UHB, an NHS Foundation Trust and registered charity. This work is commissioned and funded on an on-going basis by the sole data controller who also process data, UHB.

Income from subscriptions to the HED system goes back into the UHB Trust budget and so is subject to standard NHS financial governance.

Expected output

All outputs will contain only data that is aggregated with small numbers suppressed in line with the HES Analysis Guide.

The outputs produced as a result of data processing are benchmarked or standardised healthcare indicators and analysis encompassing a wide range of topics pertinent to the provision of high quality healthcare within the NHS.

Such topics include: clinical quality, mortality monitoring, readmissions monitoring, patient safety, data quality, operational efficiency, and discharge and admission trends.

Such outputs are provided either via:

• the range of dashboards, alerts, reports and tools made available within the HED system, or

• bespoke reports including clinically-led, retrospective, small number suppressed reports that may be published in peer review journals

The outputs provided via the HED system will then be further utilised by end-users of the system, as described in section 5a, to produce novel outputs for routine service management/evaluation, audit etc. within the NHS. For example, Hospital Trusts using the system will use the outputs provided via HED to produce their own local analysis, dashboards, and reports including board reports.

Work streams are on-going and the outputs already form part of various NHS organisations’ monthly routine reporting and governance assurance processes.

For example, each month as the national data sets are released by NHS Digital, UHB then undertake the processing activities described in order to produce the range of benchmarked and standardised indicators described above. These outputs will then be used, both locally at UHB, and by NHS Organisations using the HED system, to produce their own local analysis, dashboards, and reports including board reports.

Benefits reported

Each month the range of dashboards, alerts, reports and tools made available within the HED system allows NHS Organisations to identify areas of potential concern within their organisation. Such areas are then investigated further. When appropriate and authorised, the ability to identify a cohort of patients within the organisation and undertake appropriate clinical case note review is invaluable as a part of ensuring good hospital governance.

Some examples of yielded benefits include:

1) Several large acute trusts use the HED mortality modules to monitor and improve their trust’s mortality. Patient groups are identified that demonstrate persistent deviation from the expected mortality levels as they reach a pre-set trigger point. Consequently, the trust’s response to mortality reporting is much more instantaneous, allowing clinical and governance staff to review the deaths, put any actions in motion and share the outcome with the CQC considerably before any official regulatory notification.

Former NHS Medical Director Sir Bruce Keogh described mortality statistics as “smoke signals” for potential problems with care. Using Statistical Process Control (SPC) techniques, these signals are generated. As such, the benefit is derived from the ability to effectively use the data to highlight and investigate potential areas for further clinical review. This enables focused use of limited clinical resources, i.e. increased efficiency, which in itself benefits patients and the general public. This benefit has been experienced by many trusts using HED as they report the significant amount of time they have saved because of HED enabling them to pin-point priority areas, and automatically producing reports, increasing the time available for other hospital priorities.

Additionally, patients benefit as focused clinical review increases the safety and quality of the healthcare services provided.

In one acute Trust this use of HED mortality modules to undertake root cause analysis of patients has ultimately seen them move from special measures to a Care Quality Commission (CQC) rating of ‘Good’.

2) Several acute Trusts use HED to help optimise their services. One acute Trust in the South of England has used HED to generate Service Line Benchmarking packs for clinicians and service managers to help drive service transformation. These packs use the breadth and depth of information available in HED to allow service lines to examine their data and highlight potential opportunities. A measurable benefit from this was that the trauma and orthopaedic team were surprised to find 50% of local activity was being carried out by other providers outside of the main NHS teaching hospital. Consequently, referral to treatment times were targeted by the orthopaedic team working with radiology to develop a one-stop outpatient service where patients referred by their GPs can have their imaging and initial discussions on one day – and receive a same-day decision about whether they are suitable for surgery.

This change benefited patients as they were seen quicker, only had to make one trip to the hospital, and received a decision regarding their surgery faster.

Furthermore, HED delivers the ability for this information to be available to different staff groups and tailored to their individual needs so reducing reliance on local Information support staff.

3) One acute trust specifically used HED to investigate their performance of non-elective maternity re-admissions within 42 days of delivery as raised by the CQC. Analysis of clinical coding using HED identified that they had poor recording practices and evidenced that their subsequent change in coding more accurately represented their re-admission rate. The ability to use HED to undertake such analysis and so improve the accuracy of coding and therefore reported metrics, benefits the health service as accurate information is required to make high quality management decisions when running services.

Improving the accuracy of coding and reported metrics benefits patients as: a) it is important for them to have access to accurate information relating to the quality of the services they may receive, and b) high quality decisions taken using high quality information is critical to high quality services being provided to patients.

4) A specialist acute hospital was finding it difficult to analyse market share for one of their sites. As a specialist provider they required a specific set of hospitals to benchmark against. Using HED they have been able to isolate the Trusts and sites, so they are true peers. HED has helped them drive up their market share, thus promoting competition between hospitals, which in turn drives better care and service across the geographical area so benefiting patients.

5) Commissioning organisations using information from the HED system have reported back the ease with which their non-technical users can quickly pull-out information whilst simultaneously their analysts have the flexibility to answer more detailed questions. This diversity of topics and ease of use serves to spread the use of high-quality information empowering commissioners whilst allowing the analytical resource to be focused where required. Having effective, efficient, and evidence-based commissioning of health services directly benefits patients and the public.

This key reporting and case note review process is used by hospitals up and down the country. Without using the NHS Digital data it would be impossible to deliver these sorts of benefits to the NHS.

DARS-NIC-06605-X1L9Z-v11.9 1 December 2021 to 30 November 2022
Title
Benchmarking Service to NHS organisations
Commercial
Yes
Sublicensing
No
Datasets
10
Files released
80

Datasets: Civil Registrations of Death - Secondary Care Cut; Emergency Care Data Set (ECDS); HES-ID to MPS-ID HES Accident and Emergency; HES-ID to MPS-ID HES Admitted Patient Care; HES-ID to MPS-ID HES Outpatients; HES:Civil Registration (Deaths) bridge; Hospital Episode Statistics Accident and Emergency (HES A and E); Hospital Episode Statistics Admitted Patient Care (HES APC); Hospital Episode Statistics Critical Care (HES Critical Care); Hospital Episode Statistics Outpatients (HES OP)

What changed from DARS-NIC-06605-X1L9Z-v10.4

Text removed is struck through; text added is underlined. Unchanged paragraphs are summarised rather than repeated.

Fields changed from DARS-NIC-06605-X1L9Z-v10.4
FieldWasBecame
Start date2020-12-012021-12-01
End date2021-11-302022-11-30
HES-ID to MPS-ID HES Accident and Emergency: legal basisHealth and Social Care Act 2012 – s261(7)Health and Social Care Act 2012 – s261(7); National Health Service Act 2006 - s251 - 'Control of patient information'.
HES-ID to MPS-ID HES Admitted Patient Care: legal basisHealth and Social Care Act 2012 – s261(7)Health and Social Care Act 2012 – s261(7); National Health Service Act 2006 - s251 - 'Control of patient information'.
HES-ID to MPS-ID HES Outpatients: legal basisHealth and Social Care Act 2012 – s261(7)Health and Social Care Act 2012 – s261(7); National Health Service Act 2006 - s251 - 'Control of patient information'.

Objective for processing

[2 paragraphs unchanged] This work is commissioned and funded on an ongoing basis by the data controller, University Hospitals Birmingham NHS Foundation Trust (UHB) and produced by the data processor, Health Informatics Department within the Hospital. [2 paragraphs unchanged] b) Indirectly, analytics are provided via a non-NHS organisation, e.g.. e.g. Pricewaterhouse Coopers (PwC), who hold a subscription to use aggregate small number [17 words unchanged] relating to anonymisation and can confirm the systems are compliant with this. [10 paragraphs unchanged] NHS organisations are limited to the below list only. The geographical range of these organisations is spread across England, and are not concentrated in one region. England. [3 paragraphs unchanged] • NHS England and NHS Improvement • NHS England [4 paragraphs unchanged] Identifiable patient Patient data is required for all England, for two reasons. Firstly, because when [144 words unchanged] as being able to demonstrate service improvement over time and visualize trends. [16 paragraphs unchanged] Historically, NHS clients of Carnall Farrar have to meet the costs associated with [63 words unchanged] improved so allowing more people to receive the best quality clinical care. [1 paragraph unchanged] The An alternative would be for NHS organisations working with PwC and Carnall Farrar [7 words unchanged] organisations. This arrangement would have the following detrimental effect on the NHS: [2 paragraphs unchanged]

Processing activities

[1 paragraph unchanged] All staff members processing the data are substantive employees of UHB, UHB and have received training in data protection and confidentiality. Data received from the NHS Digital by UHB is processed in line with a strict protocol. Under this Agreement UHB are requesting to store data at Ark Data Centres. The storage and equipment at Ark [32 words unchanged] held on a Secure SQL server which sits within the Trusts IT framework, framework and is not available for querying by any external parties or tools. [50 words unchanged] and out of the rooms is logged and controlled by senior managers. [10 paragraphs unchanged] NHS England and NHS Improvement NHS England [4 paragraphs unchanged] Data will only be accessed and processed by substantive employees of University Hospitals Birmingham NHS Foundation Trusts and will not be accessed or processed by any other third parties not mentioned in this Agreement. [1 paragraph unchanged]

Expected output

[5 paragraphs unchanged] Dashboards will only contain aggregate level information. Modules can contain aggregate level [47 words unchanged] line with the access controls outlined in the above section on ‘Processing activities’. activities’ [15 paragraphs unchanged]

Benefits reported

Each month a range of modules are produced which allow NHS hospitals [5 words unchanged] concern within their organisation. Such areas are then investigated further. When appropriate & and authorised, the ability to identify a cohort of patients within the organisation [5 words unchanged] note review is invaluable as a part of ensuring good hospital governance. [4 paragraphs unchanged] • HED provides direct intelligent feedback to service areas that can change [6 words unchanged] this is not the only tool that will influence behaviour in a hospital hospital, so it is difficult to attribute changes solely to HED. As a marker of the sizeable impact impact, it would have were HED not able to provide this information, Derby [18 words unchanged] Royal Wolverhampton NHS Trust are just a few examples of the many trusts Trusts that have contacted HED over the last few months unable to access [22 words unchanged] having on their ability to interrogate and improve their trust’s mortality levels. [3 paragraphs unchanged] • A specialist acute hospital was finding it difficult to analyse market [17 words unchanged] to benchmark against. Using HED they have been able to isolate the trusts Trusts and sites sites, so they are true peers. HED has helped them drive up their marketshare, market share, thus promoting competition between hospitals, which in turn drives better care and service across the geographical area. [2 paragraphs unchanged]

Unchanged: Expected measurable benefits.

Objective for processing

The objective is to provide quality and benchmarking analysis that will enable NHS organisations to deliver better services for patients.

Such analysis is solely provided either: via the online Healthcare Evaluation Data (HED) tool, or via bespoke reports.

This work is commissioned and funded on an ongoing basis by the data controller, University Hospitals Birmingham NHS Foundation Trust (UHB) and produced by the Health Informatics Department within the Hospital.

The sole objective of this work it is to support both UHB and other NHS Trusts and commissioners in the ongoing monitoring of clinical quality and organisational effectiveness. This purpose is fulfilled either:

a) Directly, the NHS Trust holds a subscription to use the HED system,

b) Indirectly, analytics are provided via a non-NHS organisation, e.g. Pricewaterhouse Coopers (PwC), who hold a subscription to use aggregate small number suppressed data within the system only with NHS organisations. UHB has reviewed the NHS standard (ISB 1523) relating to anonymisation and can confirm the systems are compliant with this.

c) through clinically-led bespoke reports based on retrospective, pseudonymised data which if requested are published in peer review journals with small numbers suppressed.

The GDPR basis is:

a. Article 6 (lawfulness of processing):

(e) Public task: the processing is necessary for you to perform a task in the public interest or for your official functions, and the task or function has a clear basis in law.

b. Article 9 (processing of special categories of personal data):

(i) processing is necessary for reasons of public interest in the area of public health, such as protecting against serious cross-border threats to health or ensuring high standards of quality and safety of health care and of medicinal products or medical devices, on the basis of Union or Member State law which provides for suitable and specific measures to safeguard the rights and freedoms of the data subject, in particular professional secrecy.

All subscriber organisations are NHS Organisations, except for two.

The two non-NHS organisations are PwC and Carnall Farrar.

These non-NHS organisations work within the healthcare space and have access to the system solely for the purpose of assisting NHS organisations. They will only access anonymous data, i.e. aggregate level data with small numbers suppressed in line with HES Analysis guide.

For any future non-NHS subscribers, UHB would seek permission from NHS Digital first and update the DSA accordingly.

NHS organisations are limited to the below list only. The geographical range of these organisations is spread across England.

• NHS Trusts (between 50 to 75 hospitals)

• Clinical Commissioning Groups (CCG - Less than 10)

• Commissioning Support Units (CSU - Less than 10)

• NHS England and NHS Improvement

• Quality Observatories (QO - Less than 10)

AQUA – legal entity is under Salford Royal NHS Foundation Trust

NEQOS – legal entity is under Northumberland Tyne and Wear and South Tees NHS Foundation Trusts

• Non-NHS Organisations - (PwC and Carnall Farrar)

Patient data is required for all England, for two reasons. Firstly, because when performing analyses, organisations need to be able to select peers based on case mix for more accurate benchmarking to assist with service improvement and these organisations may not be local or regional based. This is true for both UHB and customers of the UHB HED analytical tool. As an example, some HED customers are regional providers of a specific service and others are specialised hospitals which require benchmarking across the whole of the UK. Secondly, the current client base for the HED tool is spread across multiple regions of England and therefore require access to their own data. Further, data for all organisations is required to allow for valid peers to be selected for a given service and indicator. National data is also required to allow the calculation of standardised metric. The years of data required allow for organisations to perform multiple functions, such as being able to demonstrate service improvement over time and visualize trends.

To address the GDPR principle of data minimisation, UHB have only requested data that is deemed necessary to achieve the purpose described within this Agreement. Identifiable data is deleted each month for the period in question. UHB do not hold identifiable data older than 3 years.

To deliver the stated objective a wide range of healthcare indicators are calculated (over 100) and as such various HES data sets including Admitted Patient Care, Outpatients, Accident & Emergency as well as linked mortality data are required. This includes access to the Emergency Care Data Set (ECDS). The objective in having as wide an array of relevant indicators as possible is to give NHS managers and clinicians as complete a picture of hospital performance as possible. Therefore, the whole dataset is needed and cannot be compressed to certain fields.

HES-Civil registration mortality linked data specifically will be used within this work to look at outcomes analysis and form analytical overviews relating to post-discharge mortality. Such overviews relate to standardised post-discharge mortality monitoring within distinct clinical cohorts and bespoke long-term survival monitoring. This work will increase the understanding of complete pathways of care. Any analysis produced using Civil Registration mortality data will not be made available to non-NHS organisations.

Local patient identifier (LOAPTID) is required within the HED system for direct patient care and there is a legal basis in place under Section 251 of the National Health Service Act 2006. Subscribers will only be able to access this record level Identifiable data for their own patient records (i.e. patients within their Trust).

HED delivers a national benchmarking system that can provide assurance to hospitals they are providing safe and high-quality care and treatment, or signpost areas of concern. The HED system enables Trusts to easily identify particular patient cohorts that are statistical outliers and warrant further examination. Local patient identifiers are an essential requirement linking areas that require investigation, to hospital records. Without them Trusts would not be able to identify their patients and conduct root-cause analyses both for internal governance and also to provide assurance to external regulatory authorities across a range of key indicators i.e. HSMR, SHMI. Historically, the Secretary of State for Health had ordered a review of avoidable deaths. Ensuring Trusts have access to their local patient identifiers through HED enables them to conduct these audits and therefore focuses attention on eradicating mortalities that could have been prevented.

HED does not just include HES and Mortality datasets. Other data sources used within the HED system are Healthcare Resource Group (HRG) National Tariff, Venous Thromboembolism Risk Assessment data, publicly available NHS England datasets, National Reporting and Learning System (NRLS) patient safety incident reports, PROMS, Safety Thermometer and Infection Control. There is no international data within HED. Furthermore, HES/ECDS/Civil Registration mortality data is not linked to international data and is not used outside of England/Wales.

It is essential for root-cause analysis that patients can be considered on a case-by-case basis. The ability to be able to identify patients via HED and then subsequently interact with other datasets and clinical notes held locally is vital to detect required clinical quality improvements. A specific example of this is via Mortality reviews, where HED directly enables organisations to monitor and manage services so that no avoidable harm comes to patients whilst in their care.

HED specifically empowers healthcare managers and clinicians to measure patient experience and outcomes benchmarked against their peers (both local and nationally) e.g. Length of stay, Mortality, Readmissions. This information is not available locally and delivers clinically relevant outcome data and comparative information to clinicians. Access to local patient identifiers is critical to enable health care professionals to audit their data and clinical practice. This review of individual patient outcomes and experience can evidence the care provided is of a good quality and safe, and also provide assurance to trust boards. In addition, access to identifiers will also enable clinicians to review and audit deaths attributed to them in national mortality models.

Record-level patient information is only available to organisations who deliver the care. A protocol including Caldicott authorisation form has been reviewed previously by DAAG (DAAG reference: 240412-a) for controlling access to such sensitive items. This established process ensures that access to sensitive items is restricted to authorised hospital trust staff and was found to be robust during a recent NHS Digital Audit.

The rationale for allowing PwC access to aggregate-level small-number suppressed analytics:

As some NHS organisations require additional specialist resource to deliver the benefits of using benchmarking information, therefore subscription to the HED tool is required by PwC as:

1. This enables PwC to have people equipped to provide immediate support to NHS organisations.

2. Providing PwC with aggregate-level information via the tool is the most efficient way of disseminating information in support of this work – the alternative described directly below would clearly create large inefficiencies.

3. It allows such organisations to be autonomous in undertaking work that requires a level of independence and is beneficial to the NHS e.g. the Keogh review. In this instance PwC were commissioned to complete this review independently of any engagement of NHS Trusts involved. It would therefore have been inappropriate for them to ask the Hospitals for the information required to undertake this review.

The rationale for allowing Carnall Farrar access to aggregate-level small-number-supressed analytics:

Carnall Farrar is a management consultancy dedicated to improving health, care and public services. They identify where clinical improvements can be made and the best ways to make change happen. This leads to better use of the scarce NHS resources of workforce, facilities and beds. Carnall Farrar’s objective is to look for clinical solutions to streamline and improve patient care, allowing more people access to a quality service.

NHS clients of Carnall Farrar have to meet the costs associated with collecting, processing and analysing that data. The ability for Carnall Farrar to access analysis directly within HED would streamline the data collection process and save time, therefore lowering the cost for the NHS organisation and saving NHS management teams the time it takes to respond to data requests. The ability to undertake such clinical improvement projects allows patient care to be streamlined and improved so allowing more people to receive the best quality clinical care.

Please note: The level of access given to PwC and Carnall Farrar will be the same i.e. same levels of security and censoring.

An alternative would be for NHS organisations working with PwC and Carnall Farrar to provide data directly to the non-NHS organisations. This arrangement would have the following detrimental effect on the NHS:

1. It would actively be encouraging NHS-organisations to export data at varying levels (while only aggregate-level small-number-supressed analytics will be provided) from the HED system and send it to non-NHS organisations. By these two non-NHS organisations having direct access UHB can monitor which modules are accessed when and by whom. This negates the need for NHS organisations to export isolated aggregate data and email it outside the NHS.

2. It would introduce a longer lead time for projects which would ultimately cost the NHS more.

Expected output

The sole outputs are benchmarked or standardised healthcare indicators such as measures of mortality, survival, discharge and admission trends, readmissions, length of stay, patient safety etc.

Such outputs are solely provided either via:

• the range of Dashboards and Modules made available within the HED system, or

• aggregate small number censored reports

Within the HED system:

Dashboards will only contain aggregate level information. Modules can contain aggregate level information and low-level information. As explained, the level of data that can be viewed within a module depends on the access level of the named individual user and which organisation they are working for. As such, access to low-level information, including small numbers, is strictly controlled in line with the access controls outlined in the above section on ‘Processing activities’

Outputs are to be used solely for the purpose of assisting the NHS.

Outputs will be used by NHS Clinicians and Managers to:

• Assure and manage clinical quality and patient safety within NHS Organisations

• Identify trends requiring a clinical review of patient pathways. (Hospital based users with Caldicott approval are able to investigate nationally standardised metrics and ‘drill-down’ to patient level information for patients treated at that trust, including local patient identifiers, in order to conduct clinical case note review and route cause analysis)

• Increase the understanding of patient outcomes

• Identify potential areas for improvement in clinical quality or operational efficiency either within a Hospital or a local healthcare economy

• Identify areas of best practice either within hospital Trusts or local healthcare economies

• Provide consultants with the information necessary for consultant revalidation

All of the above will serve to increase the understanding of patient outcomes in regard to quality, safety, productivity and efficiency benchmarking within the NHS.

As mentioned, aggregate-level small-number-suppressed analytics produced for the HED tool are being made available to two non-NHS organisations.

In the case of PwC, UHB are working with this subscriber to support NHS organisations. Some examples of the specific outcomes of this access are:

• Aggregate-level analytics have been used to undertake due diligence for both Monitor and CQC. A good example being production of the Keogh review information packs. This information was vital to the extensive work undertaken as part of the Keogh review which has culminated in the majority of the hospitals originally identified being taken out of special measures by the CQC.

• A further example is use of aggregate level analytics on elderly care readmissions with a CCG in order to support work helping them to understand how they could reduce avoidable readmissions within their region.

In the case of Carnall Farrar, the specific output is continuation of the development and implementation of local solutions that address long-standing challenges within clinical service delivery and the achievement of financial targets. This support is provided to STPs, hospital Trusts and CCGs.

It is not appropriate to set a target date for this work as the work streams are ongoing and the outputs already form part of various NHS organisations’ monthly reporting and governance assurance processes.

Benefits reported

Each month a range of modules are produced which allow NHS hospitals to identify areas of potential concern within their organisation. Such areas are then investigated further. When appropriate and authorised, the ability to identify a cohort of patients within the organisation and undertake appropriate clinical case note review is invaluable as a part of ensuring good hospital governance.

• University Hospitals Birmingham (UHB) NHS Foundation Trust’s Clinical Quality Monitoring Group use the HED CUSUM model as a continual assessment of mortality. Diagnosis groups are identified that demonstrate persistent deviation from the expected mortality levels and reach a pre-set trigger point. Consequently, the trust approach to mortality is proactive rather than reactive and enables UHB to review the deaths and share the outcome with CQC considerably before the official regulatory notification. Former NHS Medical Director Sir Bruce Keogh described mortality statistics as “smoke signals” for potential problems with care. Using Statistical Process Control (SPC) techniques, these signals are only generated by ‘out-of control’ organisations, both significantly higher or lower than expected. As such, the benefit is derived from the ability to effectively use the numbers to highlight and investigate potential areas for further clinical review.

• George Eliot Hospital NHS Trust have used HED mortality modules to undertake root cause analysis of patients which has ultimately seen them move from special measures to a CQC rating of ‘Good’.

• Royal Liverpool and Broadgreen University Hospital NHS Trust uses HED to report benchmarking and mortality to their Trust Board. A measurable benefit they have observed, and that is echoed in other Trusts, is the significant amount of time they have saved with HED automatically producing these reports for them, freeing their time for other hospital priorities.

• Calderdale and Huddersfield have used HED to look at their clinical coding to evidence areas of improvement in data quality and ensure they are not over- or under-coding compared to local and national peers. The system has provided reassurance to the Calderdale and Huddersfield NHS Outpatients (CHFT) Exec Board and Local Commissioning Groups while providing benchmarking insight into coding within different specialty areas.

• HED provides direct intelligent feedback to service areas that can change hospital performance for the better. However, this is not the only tool that will influence behaviour in a hospital, so it is difficult to attribute changes solely to HED. As a marker of the sizeable impact, it would have were HED not able to provide this information, Derby Teaching Hospitals NHS Foundation Trust, Royal Cornwall Hospital NHS Trust, Bradford Teaching Hospitals NHS Foundation Trust and The Royal Wolverhampton NHS Trust are just a few examples of the many Trusts that have contacted HED over the last few months unable to access LOPATID information for case note reviews. Hospitals who are unable to access LOPATID have noticed instantly the impact this missing data is having on their ability to interrogate and improve their trust’s mortality levels.

• Plymouth Hospitals NHS Trust have used HED to generate Service Line Benchmarking packs for clinicians and service managers to help inform decisions about transformation. The packs bring together data on finances, operational efficiency, safety and quality indicators benchmarked against relevant peers. This allows service lines to examine their data and highlight potential financial opportunities. A measurable benefit from this was that the trauma and orthopaedic team were surprised to find 50% of local activity was being carried out by other providers outside of the main NHS teaching hospital. Consequently, referral to treatment times were targeted by the orthopaedic team working with radiology to develop a one-stop outpatient service where patients referred by their GPs can have their imaging and initial discussions on one day – and receive a same-day decision about whether they are suitable for surgery.

• Sherwood Forest Hospitals NHS Foundation Trust predominantly use HED for market share and benchmarking of length of stay, day case rates, readmissions, DNA rates and new to follow up ratios against peers. HED is also used to provide assurances around the HSMR/SHMI and highlight areas of focus to the Mortality Surveillance group. Specific measurable benefits have been the delivery of information to service line meetings and to the business unit. This has been used to set targets, interpret meaningful information and provide context by measuring against local peers and nationally – which the trust had not otherwise been able to do for a number of years. Furthermore, HED delivers the ability for this information to be available to all staff groups – without the reliance on the individual trust’s Information Team.

• One acute trust specifically used HED to investigate their performance of non-elective maternity re-admissions within 42 days of delivery as raised by the CQC. Analysis of clinical coding using HED identified that they had poor recording practices and evidenced that their subsequent change in coding more accurately represented their re-admission rate.

• A specialist acute hospital was finding it difficult to analyse market share for one of their sites. As a specialist provider they required a specific set of hospitals to benchmark against. Using HED they have been able to isolate the Trusts and sites, so they are true peers. HED has helped them drive up their market share, thus promoting competition between hospitals, which in turn drives better care and service across the geographical area.

This key reporting and case note review process is used by hospitals up and down the country, most commonly in the areas of mortality and readmissions management. Without using the HES data it would be impossible to deliver these sorts of benefits to the NHS.

The yielded benefit of HED is the continual feedback process to Trusts that, through benchmarking, enables best practice, clinical excellence, efficiency and financial savings. Most outcomes are intertwined with other ongoing hospital monitoring programmes and initiatives.

DARS-NIC-06605-X1L9Z-v10.4 1 December 2020 to 30 November 2021
Title
Benchmarking Service to NHS organisations
Commercial
Yes
Sublicensing
No
Datasets
10
Files released
126

Datasets: Civil Registrations of Death - Secondary Care Cut; Emergency Care Data Set (ECDS); HES-ID to MPS-ID HES Accident and Emergency; HES-ID to MPS-ID HES Admitted Patient Care; HES-ID to MPS-ID HES Outpatients; HES:Civil Registration (Deaths) bridge; Hospital Episode Statistics Accident and Emergency (HES A and E); Hospital Episode Statistics Admitted Patient Care (HES APC); Hospital Episode Statistics Critical Care (HES Critical Care); Hospital Episode Statistics Outpatients (HES OP)

What changed from DARS-NIC-06605-X1L9Z-v9.10

Text removed is struck through; text added is underlined. Unchanged paragraphs are summarised rather than repeated.

Fields changed from DARS-NIC-06605-X1L9Z-v9.10
FieldWasBecame
Start date2019-12-012020-12-01
End date2020-11-302021-11-30
HES:Civil Registration (Deaths) bridge: type of dataAnonymised - ICO Code CompliantIdentifiable

Datasets: + HES-ID to MPS-ID HES Accident and Emergency; + HES-ID to MPS-ID HES Admitted Patient Care; + HES-ID to MPS-ID HES Outpatients

Objective for processing

[26 paragraphs unchanged] Data Identifiable patient data is required for all England, for two reasons. Firstly, because when performing [92 words unchanged] access to their own data. Further, data for all organisations is required in order to allow for valid peers to be selected for a given service and indicator. National data is also required in order to allow the calculation of standardised metric. The years of data required [8 words unchanged] as being able to demonstrate service improvement over time and visualize trends. To address the GDPR principle of data minimisation, UHB have only requested data that is deemed necessary to achieve the purpose described within this Agreement. Identifiable data is deleted each month for the period in question. UHB do not hold identifiable data older than 3 years. [16 paragraphs unchanged] Please note: The level of access given to PwC and Carnall Farrar will be exactly the same i.e. same levels of security and censoring. [1 paragraph unchanged] 1. It would actively be encouraging NHS-organisations to export data at varying [16 words unchanged] to non-NHS organisations. By these two non-NHS organisations having direct access UHB are able to can monitor which modules are accessed when and by whom. This negates the need for NHS organisations to export isolated aggregate data and email it outside the NHS. [1 paragraph unchanged]

Processing activities

Data received from NHS Digital is only processed by authorised UHB staff on site at UHB. No third parties are involved in the processing of the data. Data received from the NHS Digital by UHB is processed in line with a strict protocol and is stored in an access restricted server. This process was audited by NHS Digital and found to be robust. All staff members processing the data are substantive employees of UHB, and have received training in data protection and confidentiality. Data received from the NHS Digital by UHB is processed in line with a strict protocol. Under this Agreement UHB are requesting to store data at Ark Data Centres. The storage and equipment at Ark Data Centres are owned and operated via a privately dedicated link to UHB. IT Services span the local network to the servers and storage hosted at Ark Data Centres. The data is held on a Secure SQL server which sits within the Trusts IT framework, and is not available for querying by any external parties or tools. Passwords are strictly controlled by UHB IT services, with access permissions for each user administered on the authorisation of the Data Controller (Director of Strategy and Quality Development). Access requests go through a robust internal sign off process. All servers are held in a locked storage room where entry in and out of the rooms is logged and controlled by senior managers. Ark Data Centres supply support to the system, but do not access data. Therefore, any access to the data held under this agreement would be considered a breach of the agreement. [13 paragraphs unchanged] No record-level Record-level data is only available to organisations that deliver patient care. This data will only be provided to any organisation, except where if an individual working within an NHS Hospital has the authorisation of their [76 words unchanged] to the episodes as recorded in the raw HES and ECDS data. [2 paragraphs unchanged]

Expected measurable benefits

[12 paragraphs unchanged] • NHS Organisations are provided with the information necessary to provide clinical quality and patient safety assurance within their organization organisation [2 paragraphs unchanged] I ha• • Clinicians are supported in undertaking appraisal and revalidation – reflective practice is a vital contributor to ensure high quality care [12 paragraphs unchanged]

Benefits reported

[8 paragraphs unchanged] • One acute trust specifically used HED to investigate their performance of non-elective maternity re-admissions within 42 days of delivery as raised by the CQC. Analysis of clinical coding using HED identified that they had poor recording practices and evidenced that their subsequent change in coding more accurately represented their re-admission rate. • A specialist acute hospital was finding it difficult to analyse market share for one of their sites. As a specialist provider they required a specific set of hospitals to benchmark against. Using HED they have been able to isolate the trusts and sites so they are true peers. HED has helped them drive up their marketshare, thus promoting competition between hospitals, which in turn drives better care and service across the geographical area. [1 paragraph unchanged] The yielded benefit of HED is the continual feedback process to trusts that, through benchmarking, enables best practice, clinical excellence, efficiency and financial savings. Most outcomes are intertwined with other ongoing hospital monitoring programmes and initiatives.

Unchanged: Expected output.

Objective for processing

The objective is to provide quality and benchmarking analysis that will enable NHS organisations to deliver better services for patients.

Such analysis is solely provided either: via the online Healthcare Evaluation Data (HED) tool, or via bespoke reports.

This work is commissioned and funded on an ongoing basis by the data controller, University Hospitals Birmingham NHS Foundation Trust (UHB) and produced by the data processor, Health Informatics Department within the Hospital.

The sole objective of this work it is to support both UHB and other NHS Trusts and commissioners in the ongoing monitoring of clinical quality and organisational effectiveness. This purpose is fulfilled either:

a) Directly, the NHS Trust holds a subscription to use the HED system,

b) Indirectly, analytics are provided via a non-NHS organisation, e.g.. Pricewaterhouse Coopers (PwC), who hold a subscription to use aggregate small number suppressed data within the system only with NHS organisations. UHB has reviewed the NHS standard (ISB 1523) relating to anonymisation and can confirm the systems are compliant with this.

c) through clinically-led bespoke reports based on retrospective, pseudonymised data which if requested are published in peer review journals with small numbers suppressed.

The GDPR basis is:

a. Article 6 (lawfulness of processing):

(e) Public task: the processing is necessary for you to perform a task in the public interest or for your official functions, and the task or function has a clear basis in law.

b. Article 9 (processing of special categories of personal data):

(i) processing is necessary for reasons of public interest in the area of public health, such as protecting against serious cross-border threats to health or ensuring high standards of quality and safety of health care and of medicinal products or medical devices, on the basis of Union or Member State law which provides for suitable and specific measures to safeguard the rights and freedoms of the data subject, in particular professional secrecy.

All subscriber organisations are NHS Organisations, except for two.

The two non-NHS organisations are PwC and Carnall Farrar.

These non-NHS organisations work within the healthcare space and have access to the system solely for the purpose of assisting NHS organisations. They will only access anonymous data, i.e. aggregate level data with small numbers suppressed in line with HES Analysis guide.

For any future non-NHS subscribers, UHB would seek permission from NHS Digital first and update the DSA accordingly.

NHS organisations are limited to the below list only. The geographical range of these organisations spread across England, and are not concentrated in one region.

• NHS Trusts (between 50 to 75 hospitals)

• Clinical Commissioning Groups (CCG - Less than 10)

• Commissioning Support Units (CSU - Less than 10)

• NHS Improvement

• NHS England

• Quality Observatories (QO - Less than 10)

AQUA – legal entity is under Salford Royal NHS Foundation Trust

NEQOS – legal entity is under Northumberland Tyne and Wear and South Tees NHS Foundation Trusts

• Non-NHS Organisations - (PwC and Carnall Farrar)

Identifiable patient data is required for all England, for two reasons. Firstly, because when performing analyses, organisations need to be able to select peers based on case mix for more accurate benchmarking to assist with service improvement and these organisations may not be local or regional based. This is true for both UHB and customers of the UHB HED analytical tool. As an example, some HED customers are regional providers of a specific service and others are specialised hospitals which require benchmarking across the whole of the UK. Secondly, the current client base for the HED tool is spread across multiple regions of England and therefore require access to their own data. Further, data for all organisations is required to allow for valid peers to be selected for a given service and indicator. National data is also required to allow the calculation of standardised metric. The years of data required allow for organisations to perform multiple functions, such as being able to demonstrate service improvement over time and visualize trends.

To address the GDPR principle of data minimisation, UHB have only requested data that is deemed necessary to achieve the purpose described within this Agreement. Identifiable data is deleted each month for the period in question. UHB do not hold identifiable data older than 3 years.

To deliver the stated objective a wide range of healthcare indicators are calculated (over 100) and as such various HES data sets including Admitted Patient Care, Outpatients, Accident & Emergency as well as linked mortality data are required. This includes access to the Emergency Care Data Set (ECDS). The objective in having as wide an array of relevant indicators as possible is to give NHS managers and clinicians as complete a picture of hospital performance as possible. Therefore, the whole dataset is needed and cannot be compressed to certain fields.

HES-Civil registration mortality linked data specifically will be used within this work to look at outcomes analysis and form analytical overviews relating to post-discharge mortality. Such overviews relate to standardised post-discharge mortality monitoring within distinct clinical cohorts and bespoke long-term survival monitoring. This work will increase the understanding of complete pathways of care. Any analysis produced using Civil Registration mortality data will not be made available to non-NHS organisations.

Local patient identifier (LOAPTID) is required within the HED system for direct patient care and there is a legal basis in place under Section 251 of the National Health Service Act 2006. Subscribers will only be able to access this record level Identifiable data for their own patient records (i.e. patients within their Trust).

HED delivers a national benchmarking system that can provide assurance to hospitals they are providing safe and high-quality care and treatment, or signpost areas of concern. The HED system enables trusts to easily identify particular patient cohorts that are statistical outliers and warrant further examination. Local patient identifiers are an essential requirement linking areas that require investigation, to hospital records. Without them trusts would not be able to identify their patients and conduct root-cause analyses both for internal governance and also to provide assurance to external regulatory authorities across a range of key indicators i.e. HSMR, SHMI. Historically, the Secretary of State for Health had ordered a review of avoidable deaths. Ensuring trusts have access to their local patient identifiers through HED enables them to conduct these audits and therefore focuses attention on eradicating mortalities that could have been prevented.

HED does not just include HES and Mortality datasets. Other data sources used within the HED system are Healthcare Resource Group (HRG) National Tariff, Venous Thromboembolism Risk Assessment data, publicly available NHS England datasets, National Reporting and Learning System (NRLS) patient safety incident reports, PROMS, Safety Thermometer and Infection Control. There is no international data within HED. Furthermore, HES/ECDS/Civil Registration mortality data is not linked to international data and is not used outside of England/Wales.

It is essential for root-cause analysis that patients can be considered on a case-by-case basis. The ability to be able to identify patients via HED and then subsequently interact with other datasets and clinical notes held locally is vital to detect required clinical quality improvements. A specific example of this is via Mortality reviews, where HED directly enables organisations to monitor and manage services so that no avoidable harm comes to patients whilst in their care.

HED specifically empowers healthcare managers and clinicians to measure patient experience and outcomes benchmarked against their peers (both local and nationally) e.g. Length of stay, Mortality, Readmissions. This information is not available locally and delivers clinically relevant outcome data and comparative information to clinicians. Access to local patient identifiers is critical to enable health care professionals to audit their data and clinical practice. This review of individual patient outcomes and experience can evidence the care provided is of a good quality and safe, and also provide assurance to trust boards. In addition, access to identifiers will also enable clinicians to review and audit deaths attributed to them in national mortality models.

Record-level patient information is only available to organisations who deliver the care. A protocol including Caldicott authorisation form has been reviewed previously by DAAG (DAAG reference: 240412-a) for controlling access to such sensitive items. This established process ensures that access to sensitive items is restricted to authorised hospital trust staff and was found to be robust during a recent NHS Digital Audit.

The rationale for allowing PwC access to aggregate-level small-number suppressed analytics:

As some NHS organisations require additional specialist resource to deliver the benefits of using benchmarking information, therefore subscription to the HED tool is required by PwC as:

1. This enables PwC to have people equipped to provide immediate support to NHS organisations.

2. Providing PwC with aggregate-level information via the tool is the most efficient way of disseminating information in support of this work – the alternative described directly below would clearly create large inefficiencies.

3. It allows such organisations to be autonomous in undertaking work that requires a level of independence and is beneficial to the NHS e.g. the Keogh review. In this instance PwC were commissioned to complete this review independently of any engagement of NHS Trusts involved. It would therefore have been inappropriate for them to ask the Hospitals for the information required to undertake this review.

The rationale for allowing Carnall Farrar access to aggregate-level small-number-supressed analytics:

Carnall Farrar is a management consultancy dedicated to improving health, care and public services. They identify where clinical improvements can be made and the best ways to make change happen. This leads to better use of the scarce NHS resources of workforce, facilities and beds. Carnall Farrar’s objective is to look for clinical solutions to streamline and improve patient care, allowing more people access to a quality service.

Historically, NHS clients of Carnall Farrar have to meet the costs associated with collecting, processing and analysing that data. The ability for Carnall Farrar to access analysis directly within HED would streamline the data collection process and save time, therefore lowering the cost for the NHS organisation and saving NHS management teams the time it takes to respond to data requests. The ability to undertake such clinical improvement projects allows patient care to be streamlined and improved so allowing more people to receive the best quality clinical care.

Please note: The level of access given to PwC and Carnall Farrar will be the same i.e. same levels of security and censoring.

The alternative would be for NHS organisations working with PwC and Carnall Farrar to provide data directly to the non-NHS organisations. This arrangement would have the following detrimental effect on the NHS:

1. It would actively be encouraging NHS-organisations to export data at varying levels (while only aggregate-level small-number-supressed analytics will be provided) from the HED system and send it to non-NHS organisations. By these two non-NHS organisations having direct access UHB can monitor which modules are accessed when and by whom. This negates the need for NHS organisations to export isolated aggregate data and email it outside the NHS.

2. It would introduce a longer lead time for projects which would ultimately cost the NHS more.

Expected output

The sole outputs are benchmarked or standardised healthcare indicators such as measures of mortality, survival, discharge and admission trends, readmissions, length of stay, patient safety etc.

Such outputs are solely provided either via:

• the range of Dashboards and Modules made available within the HED system, or

• aggregate small number censored reports

Within the HED system:

Dashboards will only contain aggregate level information. Modules can contain aggregate level information and low-level information. As explained, the level of data that can be viewed within a module depends on the access level of the named individual user and which organisation they are working for. As such, access to low-level information, including small numbers, is strictly controlled in line with the access controls outlined in the above section on ‘Processing activities’.

Outputs are to be used solely for the purpose of assisting the NHS.

Outputs will be used by NHS Clinicians and Managers to:

• Assure and manage clinical quality and patient safety within NHS Organisations

• Identify trends requiring a clinical review of patient pathways. (Hospital based users with Caldicott approval are able to investigate nationally standardised metrics and ‘drill-down’ to patient level information for patients treated at that trust, including local patient identifiers, in order to conduct clinical case note review and route cause analysis)

• Increase the understanding of patient outcomes

• Identify potential areas for improvement in clinical quality or operational efficiency either within a Hospital or a local healthcare economy

• Identify areas of best practice either within hospital trusts or local healthcare economies

• Provide consultants with the information necessary for consultant revalidation

All of the above will serve to increase the understanding of patient outcomes in regard to quality, safety, productivity and efficiency benchmarking within the NHS.

As mentioned, aggregate-level small-number-suppressed analytics produced for the HED tool are being made available to two non-NHS organisations.

In the case of PwC, UHB are working with this subscriber to support NHS organisations. Some examples of the specific outcomes of this access are:

• Aggregate-level analytics have been used to undertake due diligence for both Monitor and CQC. A good example being production of the Keogh review information packs. This information was vital to the extensive work undertaken as part of the Keogh review which has culminated in the majority of the hospitals originally identified being taken out of special measures by the CQC.

• A further example is use of aggregate level analytics on elderly care readmissions with a CCG in order to support work helping them to understand how they could reduce avoidable readmissions within their region.

In the case of Carnall Farrar, the specific output is continuation of the development and implementation of local solutions that address long-standing challenges within clinical service delivery and the achievement of financial targets. This support is provided to STPs, hospital trusts and CCGs.

It is not appropriate to set a target date for this work as the work streams are ongoing and the outputs already form part of various NHS organisations’ monthly reporting and governance assurance processes.

Benefits reported

Each month a range of modules are produced which allow NHS hospitals to identify areas of potential concern within their organisation. Such areas are then investigated further. When appropriate & authorised, the ability to identify a cohort of patients within the organisation and undertake appropriate clinical case note review is invaluable as a part of ensuring good hospital governance.

• University Hospitals Birmingham (UHB) NHS Foundation Trust’s Clinical Quality Monitoring Group use the HED CUSUM model as a continual assessment of mortality. Diagnosis groups are identified that demonstrate persistent deviation from the expected mortality levels and reach a pre-set trigger point. Consequently, the trust approach to mortality is proactive rather than reactive and enables UHB to review the deaths and share the outcome with CQC considerably before the official regulatory notification. Former NHS Medical Director Sir Bruce Keogh described mortality statistics as “smoke signals” for potential problems with care. Using Statistical Process Control (SPC) techniques, these signals are only generated by ‘out-of control’ organisations, both significantly higher or lower than expected. As such, the benefit is derived from the ability to effectively use the numbers to highlight and investigate potential areas for further clinical review.

• George Eliot Hospital NHS Trust have used HED mortality modules to undertake root cause analysis of patients which has ultimately seen them move from special measures to a CQC rating of ‘Good’.

• Royal Liverpool and Broadgreen University Hospital NHS Trust uses HED to report benchmarking and mortality to their Trust Board. A measurable benefit they have observed, and that is echoed in other trusts, is the significant amount of time they have saved with HED automatically producing these reports for them, freeing their time for other hospital priorities.

• Calderdale and Huddersfield have used HED to look at their clinical coding to evidence areas of improvement in data quality and ensure they are not over- or under-coding compared to local and national peers. The system has provided reassurance to the Calderdale and Huddersfield NHS Outpatients (CHFT) Exec Board and Local Commissioning Groups while providing benchmarking insight into coding within different specialty areas.

• HED provides direct intelligent feedback to service areas that can change hospital performance for the better. However, this is not the only tool that will influence behaviour in a hospital so it is difficult to attribute changes solely to HED. As a marker of the sizeable impact it would have were HED not able to provide this information, Derby Teaching Hospitals NHS Foundation Trust, Royal Cornwall Hospital NHS Trust, Bradford Teaching Hospitals NHS Foundation Trust and The Royal Wolverhampton NHS Trust are just a few examples of the many trusts that have contacted HED over the last few months unable to access LOPATID information for case note reviews. Hospitals who are unable to access LOPATID have noticed instantly the impact this missing data is having on their ability to interrogate and improve their trust’s mortality levels.

• Plymouth Hospitals NHS Trust have used HED to generate Service Line Benchmarking packs for clinicians and service managers to help inform decisions about transformation. The packs bring together data on finances, operational efficiency, safety and quality indicators benchmarked against relevant peers. This allows service lines to examine their data and highlight potential financial opportunities. A measurable benefit from this was that the trauma and orthopaedic team were surprised to find 50% of local activity was being carried out by other providers outside of the main NHS teaching hospital. Consequently, referral to treatment times were targeted by the orthopaedic team working with radiology to develop a one-stop outpatient service where patients referred by their GPs can have their imaging and initial discussions on one day – and receive a same-day decision about whether they are suitable for surgery.

• Sherwood Forest Hospitals NHS Foundation Trust predominantly use HED for market share and benchmarking of length of stay, day case rates, readmissions, DNA rates and new to follow up ratios against peers. HED is also used to provide assurances around the HSMR/SHMI and highlight areas of focus to the Mortality Surveillance group. Specific measurable benefits have been the delivery of information to service line meetings and to the business unit. This has been used to set targets, interpret meaningful information and provide context by measuring against local peers and nationally – which the trust had not otherwise been able to do for a number of years. Furthermore, HED delivers the ability for this information to be available to all staff groups – without the reliance on the individual trust’s Information Team.

• One acute trust specifically used HED to investigate their performance of non-elective maternity re-admissions within 42 days of delivery as raised by the CQC. Analysis of clinical coding using HED identified that they had poor recording practices and evidenced that their subsequent change in coding more accurately represented their re-admission rate.

• A specialist acute hospital was finding it difficult to analyse market share for one of their sites. As a specialist provider they required a specific set of hospitals to benchmark against. Using HED they have been able to isolate the trusts and sites so they are true peers. HED has helped them drive up their marketshare, thus promoting competition between hospitals, which in turn drives better care and service across the geographical area.

This key reporting and case note review process is used by hospitals up and down the country, most commonly in the areas of mortality and readmissions management. Without using the HES data it would be impossible to deliver these sorts of benefits to the NHS.

The yielded benefit of HED is the continual feedback process to trusts that, through benchmarking, enables best practice, clinical excellence, efficiency and financial savings. Most outcomes are intertwined with other ongoing hospital monitoring programmes and initiatives.

DARS-NIC-06605-X1L9Z-v9.10 1 December 2019 to 30 November 2020
Title
Benchmarking Service to NHS organisations
Commercial
Yes
Sublicensing
No
Datasets
7
Files released
78

Datasets: Civil Registrations of Death - Secondary Care Cut; Emergency Care Data Set (ECDS); HES:Civil Registration (Deaths) bridge; Hospital Episode Statistics Accident and Emergency (HES A and E); Hospital Episode Statistics Admitted Patient Care (HES APC); Hospital Episode Statistics Critical Care (HES Critical Care); Hospital Episode Statistics Outpatients (HES OP)

Objective for processing

The objective is to provide quality and benchmarking analysis that will enable NHS organisations to deliver better services for patients.

Such analysis is solely provided either: via the online Healthcare Evaluation Data (HED) tool, or via bespoke reports.

This work is commissioned and funded on an ongoing basis by the data controller, University Hospitals Birmingham NHS Foundation Trust (UHB) and produced by the data processor, Health Informatics Department within the Hospital.

The sole objective of this work it is to support both UHB and other NHS Trusts and commissioners in the ongoing monitoring of clinical quality and organisational effectiveness. This purpose is fulfilled either:

a) Directly, the NHS Trust holds a subscription to use the HED system,

b) Indirectly, analytics are provided via a non-NHS organisation, e.g.. Pricewaterhouse Coopers (PwC), who hold a subscription to use aggregate small number suppressed data within the system only with NHS organisations. UHB has reviewed the NHS standard (ISB 1523) relating to anonymisation and can confirm the systems are compliant with this.

c) through clinically-led bespoke reports based on retrospective, pseudonymised data which if requested are published in peer review journals with small numbers suppressed.

The GDPR basis is:

a. Article 6 (lawfulness of processing):

(e) Public task: the processing is necessary for you to perform a task in the public interest or for your official functions, and the task or function has a clear basis in law.

b. Article 9 (processing of special categories of personal data):

(i) processing is necessary for reasons of public interest in the area of public health, such as protecting against serious cross-border threats to health or ensuring high standards of quality and safety of health care and of medicinal products or medical devices, on the basis of Union or Member State law which provides for suitable and specific measures to safeguard the rights and freedoms of the data subject, in particular professional secrecy.

All subscriber organisations are NHS Organisations, except for two.

The two non-NHS organisations are PwC and Carnall Farrar.

These non-NHS organisations work within the healthcare space and have access to the system solely for the purpose of assisting NHS organisations. They will only access anonymous data, i.e. aggregate level data with small numbers suppressed in line with HES Analysis guide.

For any future non-NHS subscribers, UHB would seek permission from NHS Digital first and update the DSA accordingly.

NHS organisations are limited to the below list only. The geographical range of these organisations spread across England, and are not concentrated in one region.

• NHS Trusts (between 50 to 75 hospitals)

• Clinical Commissioning Groups (CCG - Less than 10)

• Commissioning Support Units (CSU - Less than 10)

• NHS Improvement

• NHS England

• Quality Observatories (QO - Less than 10)

AQUA – legal entity is under Salford Royal NHS Foundation Trust

NEQOS – legal entity is under Northumberland Tyne and Wear and South Tees NHS Foundation Trusts

• Non-NHS Organisations - (PwC and Carnall Farrar)

Data is required for all England, for two reasons. Firstly, because when performing analyses, organisations need to be able to select peers based on case mix for more accurate benchmarking to assist with service improvement and these organisations may not be local or regional based. This is true for both UHB and customers of the UHB HED analytical tool. As an example, some HED customers are regional providers of a specific service and others are specialised hospitals which require benchmarking across the whole of the UK. Secondly, the current client base for the HED tool is spread across multiple regions of England and therefore require access to their own data. Further, data for all organisations is required in order to allow for valid peers to be selected for a given service and indicator. National data is also required in order to allow the calculation of standardised metric. The years of data required allow for organisations to perform multiple functions, such as being able to demonstrate service improvement over time and visualize trends.

To deliver the stated objective a wide range of healthcare indicators are calculated (over 100) and as such various HES data sets including Admitted Patient Care, Outpatients, Accident & Emergency as well as linked mortality data are required. This includes access to the Emergency Care Data Set (ECDS). The objective in having as wide an array of relevant indicators as possible is to give NHS managers and clinicians as complete a picture of hospital performance as possible. Therefore, the whole dataset is needed and cannot be compressed to certain fields.

HES-Civil registration mortality linked data specifically will be used within this work to look at outcomes analysis and form analytical overviews relating to post-discharge mortality. Such overviews relate to standardised post-discharge mortality monitoring within distinct clinical cohorts and bespoke long-term survival monitoring. This work will increase the understanding of complete pathways of care. Any analysis produced using Civil Registration mortality data will not be made available to non-NHS organisations.

Local patient identifier (LOAPTID) is required within the HED system for direct patient care and there is a legal basis in place under Section 251 of the National Health Service Act 2006. Subscribers will only be able to access this record level Identifiable data for their own patient records (i.e. patients within their Trust).

HED delivers a national benchmarking system that can provide assurance to hospitals they are providing safe and high-quality care and treatment, or signpost areas of concern. The HED system enables trusts to easily identify particular patient cohorts that are statistical outliers and warrant further examination. Local patient identifiers are an essential requirement linking areas that require investigation, to hospital records. Without them trusts would not be able to identify their patients and conduct root-cause analyses both for internal governance and also to provide assurance to external regulatory authorities across a range of key indicators i.e. HSMR, SHMI. Historically, the Secretary of State for Health had ordered a review of avoidable deaths. Ensuring trusts have access to their local patient identifiers through HED enables them to conduct these audits and therefore focuses attention on eradicating mortalities that could have been prevented.

HED does not just include HES and Mortality datasets. Other data sources used within the HED system are Healthcare Resource Group (HRG) National Tariff, Venous Thromboembolism Risk Assessment data, publicly available NHS England datasets, National Reporting and Learning System (NRLS) patient safety incident reports, PROMS, Safety Thermometer and Infection Control. There is no international data within HED. Furthermore, HES/ECDS/Civil Registration mortality data is not linked to international data and is not used outside of England/Wales.

It is essential for root-cause analysis that patients can be considered on a case-by-case basis. The ability to be able to identify patients via HED and then subsequently interact with other datasets and clinical notes held locally is vital to detect required clinical quality improvements. A specific example of this is via Mortality reviews, where HED directly enables organisations to monitor and manage services so that no avoidable harm comes to patients whilst in their care.

HED specifically empowers healthcare managers and clinicians to measure patient experience and outcomes benchmarked against their peers (both local and nationally) e.g. Length of stay, Mortality, Readmissions. This information is not available locally and delivers clinically relevant outcome data and comparative information to clinicians. Access to local patient identifiers is critical to enable health care professionals to audit their data and clinical practice. This review of individual patient outcomes and experience can evidence the care provided is of a good quality and safe, and also provide assurance to trust boards. In addition, access to identifiers will also enable clinicians to review and audit deaths attributed to them in national mortality models.

Record-level patient information is only available to organisations who deliver the care. A protocol including Caldicott authorisation form has been reviewed previously by DAAG (DAAG reference: 240412-a) for controlling access to such sensitive items. This established process ensures that access to sensitive items is restricted to authorised hospital trust staff and was found to be robust during a recent NHS Digital Audit.

The rationale for allowing PwC access to aggregate-level small-number suppressed analytics:

As some NHS organisations require additional specialist resource to deliver the benefits of using benchmarking information, therefore subscription to the HED tool is required by PwC as:

1. This enables PwC to have people equipped to provide immediate support to NHS organisations.

2. Providing PwC with aggregate-level information via the tool is the most efficient way of disseminating information in support of this work – the alternative described directly below would clearly create large inefficiencies.

3. It allows such organisations to be autonomous in undertaking work that requires a level of independence and is beneficial to the NHS e.g. the Keogh review. In this instance PwC were commissioned to complete this review independently of any engagement of NHS Trusts involved. It would therefore have been inappropriate for them to ask the Hospitals for the information required to undertake this review.

The rationale for allowing Carnall Farrar access to aggregate-level small-number-supressed analytics:

Carnall Farrar is a management consultancy dedicated to improving health, care and public services. They identify where clinical improvements can be made and the best ways to make change happen. This leads to better use of the scarce NHS resources of workforce, facilities and beds. Carnall Farrar’s objective is to look for clinical solutions to streamline and improve patient care, allowing more people access to a quality service.

Historically, NHS clients of Carnall Farrar have to meet the costs associated with collecting, processing and analysing that data. The ability for Carnall Farrar to access analysis directly within HED would streamline the data collection process and save time, therefore lowering the cost for the NHS organisation and saving NHS management teams the time it takes to respond to data requests. The ability to undertake such clinical improvement projects allows patient care to be streamlined and improved so allowing more people to receive the best quality clinical care.

Please note: The level of access given to PwC and Carnall Farrar will be exactly the same i.e. same levels of security and censoring.

The alternative would be for NHS organisations working with PwC and Carnall Farrar to provide data directly to the non-NHS organisations. This arrangement would have the following detrimental effect on the NHS:

1. It would actively be encouraging NHS-organisations to export data at varying levels (while only aggregate-level small-number-supressed analytics will be provided) from the HED system and send it to non-NHS organisations. By these two non-NHS organisations having direct access UHB are able to monitor which modules are accessed when and by whom. This negates the need for NHS organisations to export isolated aggregate data and email it outside the NHS.

2. It would introduce a longer lead time for projects which would ultimately cost the NHS more.

Expected output

The sole outputs are benchmarked or standardised healthcare indicators such as measures of mortality, survival, discharge and admission trends, readmissions, length of stay, patient safety etc.

Such outputs are solely provided either via:

• the range of Dashboards and Modules made available within the HED system, or

• aggregate small number censored reports

Within the HED system:

Dashboards will only contain aggregate level information. Modules can contain aggregate level information and low-level information. As explained, the level of data that can be viewed within a module depends on the access level of the named individual user and which organisation they are working for. As such, access to low-level information, including small numbers, is strictly controlled in line with the access controls outlined in the above section on ‘Processing activities’.

Outputs are to be used solely for the purpose of assisting the NHS.

Outputs will be used by NHS Clinicians and Managers to:

• Assure and manage clinical quality and patient safety within NHS Organisations

• Identify trends requiring a clinical review of patient pathways. (Hospital based users with Caldicott approval are able to investigate nationally standardised metrics and ‘drill-down’ to patient level information for patients treated at that trust, including local patient identifiers, in order to conduct clinical case note review and route cause analysis)

• Increase the understanding of patient outcomes

• Identify potential areas for improvement in clinical quality or operational efficiency either within a Hospital or a local healthcare economy

• Identify areas of best practice either within hospital trusts or local healthcare economies

• Provide consultants with the information necessary for consultant revalidation

All of the above will serve to increase the understanding of patient outcomes in regard to quality, safety, productivity and efficiency benchmarking within the NHS.

As mentioned, aggregate-level small-number-suppressed analytics produced for the HED tool are being made available to two non-NHS organisations.

In the case of PwC, UHB are working with this subscriber to support NHS organisations. Some examples of the specific outcomes of this access are:

• Aggregate-level analytics have been used to undertake due diligence for both Monitor and CQC. A good example being production of the Keogh review information packs. This information was vital to the extensive work undertaken as part of the Keogh review which has culminated in the majority of the hospitals originally identified being taken out of special measures by the CQC.

• A further example is use of aggregate level analytics on elderly care readmissions with a CCG in order to support work helping them to understand how they could reduce avoidable readmissions within their region.

In the case of Carnall Farrar, the specific output is continuation of the development and implementation of local solutions that address long-standing challenges within clinical service delivery and the achievement of financial targets. This support is provided to STPs, hospital trusts and CCGs.

It is not appropriate to set a target date for this work as the work streams are ongoing and the outputs already form part of various NHS organisations’ monthly reporting and governance assurance processes.

Benefits reported

Each month a range of modules are produced which allow NHS hospitals to identify areas of potential concern within their organisation. Such areas are then investigated further. When appropriate & authorised, the ability to identify a cohort of patients within the organisation and undertake appropriate clinical case note review is invaluable as a part of ensuring good hospital governance.

• University Hospitals Birmingham (UHB) NHS Foundation Trust’s Clinical Quality Monitoring Group use the HED CUSUM model as a continual assessment of mortality. Diagnosis groups are identified that demonstrate persistent deviation from the expected mortality levels and reach a pre-set trigger point. Consequently, the trust approach to mortality is proactive rather than reactive and enables UHB to review the deaths and share the outcome with CQC considerably before the official regulatory notification. Former NHS Medical Director Sir Bruce Keogh described mortality statistics as “smoke signals” for potential problems with care. Using Statistical Process Control (SPC) techniques, these signals are only generated by ‘out-of control’ organisations, both significantly higher or lower than expected. As such, the benefit is derived from the ability to effectively use the numbers to highlight and investigate potential areas for further clinical review.

• George Eliot Hospital NHS Trust have used HED mortality modules to undertake root cause analysis of patients which has ultimately seen them move from special measures to a CQC rating of ‘Good’.

• Royal Liverpool and Broadgreen University Hospital NHS Trust uses HED to report benchmarking and mortality to their Trust Board. A measurable benefit they have observed, and that is echoed in other trusts, is the significant amount of time they have saved with HED automatically producing these reports for them, freeing their time for other hospital priorities.

• Calderdale and Huddersfield have used HED to look at their clinical coding to evidence areas of improvement in data quality and ensure they are not over- or under-coding compared to local and national peers. The system has provided reassurance to the Calderdale and Huddersfield NHS Outpatients (CHFT) Exec Board and Local Commissioning Groups while providing benchmarking insight into coding within different specialty areas.

• HED provides direct intelligent feedback to service areas that can change hospital performance for the better. However, this is not the only tool that will influence behaviour in a hospital so it is difficult to attribute changes solely to HED. As a marker of the sizeable impact it would have were HED not able to provide this information, Derby Teaching Hospitals NHS Foundation Trust, Royal Cornwall Hospital NHS Trust, Bradford Teaching Hospitals NHS Foundation Trust and The Royal Wolverhampton NHS Trust are just a few examples of the many trusts that have contacted HED over the last few months unable to access LOPATID information for case note reviews. Hospitals who are unable to access LOPATID have noticed instantly the impact this missing data is having on their ability to interrogate and improve their trust’s mortality levels.

• Plymouth Hospitals NHS Trust have used HED to generate Service Line Benchmarking packs for clinicians and service managers to help inform decisions about transformation. The packs bring together data on finances, operational efficiency, safety and quality indicators benchmarked against relevant peers. This allows service lines to examine their data and highlight potential financial opportunities. A measurable benefit from this was that the trauma and orthopaedic team were surprised to find 50% of local activity was being carried out by other providers outside of the main NHS teaching hospital. Consequently, referral to treatment times were targeted by the orthopaedic team working with radiology to develop a one-stop outpatient service where patients referred by their GPs can have their imaging and initial discussions on one day – and receive a same-day decision about whether they are suitable for surgery.

• Sherwood Forest Hospitals NHS Foundation Trust predominantly use HED for market share and benchmarking of length of stay, day case rates, readmissions, DNA rates and new to follow up ratios against peers. HED is also used to provide assurances around the HSMR/SHMI and highlight areas of focus to the Mortality Surveillance group. Specific measurable benefits have been the delivery of information to service line meetings and to the business unit. This has been used to set targets, interpret meaningful information and provide context by measuring against local peers and nationally – which the trust had not otherwise been able to do for a number of years. Furthermore, HED delivers the ability for this information to be available to all staff groups – without the reliance on the individual trust’s Information Team.

This key reporting and case note review process is used by hospitals up and down the country, most commonly in the areas of mortality and readmissions management. Without using the HES data it would be impossible to deliver these sorts of benefits to the NHS.

Register history

When this agreement appeared in, or was edited in, each monthly edition of the register. Built by comparing every edition this site holds, the earliest of which is July 2021.

"Amended in place" means NHS England changed the record without issuing a new version number. The register publishes no changelog for those edits; this site infers them by comparing editions. An edit is attributed to the edition it first appears in, not to the date it was made.

Cite this page

NHS England (2026) Data Uses Register, September 2026 edition, agreement DARS-NIC-06605-X1L9Z, “Benchmarking Service to NHS organisations”. Read via NHS Data Access Explorer (unofficial), https://healthdatauses.uk/agreements/dars-nic-06605-x1l9z/ (accessed [date]).

This address stays the same, but the page is rebuilt with each monthly edition, so the citation names the edition it shows. Every edition's data is kept in the facts store.

Source: datausesregister_september2026.xlsx, September 2026 edition of the NHS England Data Uses Register. Search that workbook for DARS-NIC-06605-X1L9Z to see the original rows.