LAPH Standard Extract

Norfolk County Council · Local Authority

In term In term in the September 2026 edition: the latest version runs to 11 January 2027.

Reference: DARS-NIC-371828-D2W1R
Current version: v7.5
Term of current version: 12 January 2024 to 11 January 2027
Start date: Before 1 April 2019
Data controller: Sole Data Controller
Commercial purposes: No
Sublicensing: No
Files released to date: 554

Why the data was released

Objective for processing

The data provided by the Pseudonymised HES Extract Service will be used by the Local Authority in fulfilment of its public health function, specifically to support and improve:

1. the local responsiveness, targeting and value for money of commissioned public health services;

2. the statutory ‘core offer’ public health advice and support provided to local NHS commissioners;

3. the local specificity and relevance of the Joint Strategic Needs Assessments and Health and Wellbeing Strategies produced in collaboration with NHS and voluntary sector partners on the Health and Wellbeing Board;

4. the local focus, responsiveness and timeliness of health impact assessments; and, among other benefits

5. the capability of the local public health intelligence service to undertake comparative longitudinal analyses of patterns of and variations in:

a) the incidence and prevalence of disease and risks to public health;

b) demand for and access to treatment and preventative care services;

c) variations in health outcomes between groups in the population;

d) the level of integration between local health and care services; and

e) the local associations between causal risk factors and health status and outcomes.

The main statutory duties and wider public health responsibilities supporting these processing objectives are as follows:

1. Statutory public health duties that the data will be used to support

a) Duty to improve public health: Analyses of the data will be used to support the duty of the Local Authority under Section 12 of the Health and Social Care Act 2012 to take appropriate steps to improve the health of the population, for example by providing information and advice, services and facilities, and incentives and assistance to encourage and enable people to lead healthier lives;

b) Duty to support Health and Wellbeing Boards: Analyses of the data will be used to support the duty of the Local Authority and the Integrated Care Board (ICB)- led Health and Wellbeing Board under Section 194 of the 2012 Act to improve health and wellbeing, reduce health inequalities, and promote the integration of health and care services; the data will also be used to support the statutory duty of Health and Wellbeing Boards under Section 206 of the 2012 Act to undertake Pharmaceutical Needs Assessments;

c) Duty to produce Joint Strategic Needs Assessments (JSNAs) and Joint Health and Wellbeing Strategies (JHWBs): Analyses of the data will be used to support the duty of the Local Authority under Sections 192 and 193 of the 2012 Act to consult on and publish JSNAs and JHWSs that assess the current and future health and wellbeing needs of the local population;

d) Duty to commission specific public health services: Analyses of the data will be used to support the Local Authority to discharge its duty under the Local Authorities Regulations 2013 to plan and provide NHS Health Check assessments, the National Child Measurement Programme, and open access sexual health services;

e) Duty to provide public health advice to NHS commissioners: Analyses of the data will be used by Local Authorities to discharge its duty under the 2013 Regulations to provide a public health advice service to NHS commissioners;

f) Duty to publish an annual public health report: Analyses of the data will be used by Directors of Public Health to support their duty to prepare and publish an annual report on the health of the local population under Section 31 the 2012 Act;

g) Public Health responses on behalf of the Local Authority to licensing applications and other statutory Local Authority functions requiring public health input: Analyses of the data will be used by the Director of Public Health to support their duty under Part 3 of the National Health Services Act 2006 (as amended by Section 30 of the Health and Social Care Act 2012) to provide the Local Authority’s public health response (as the responsible authority under the Licensing Act 2003, as amended by the Health and Social Care Act 2012 Schedule 5 – Part 1) to licensing applications.

2. Wider public health responsibilities supported by analysis of the data

a) Health impact assessments and equity audits: Analyses of the data will be used to assess the potential impacts on health and the wider social economic and environmental determinants of health of Local Authority strategic plans, policies and services;

b) Local health profiles: Analyses of the data will be used to support the production of locally-commissioned health profiles to improve understanding of the health priorities of local areas and guide strategic commissioning plans by focusing, for example, on:

i. bespoke local geographies (based on the non-standard aggregation of LSOAs);

ii. specific demographic, geographic, ethnic and socio-economic groups in the population;

iii. inequalities in health status, access to treatment and treatment outcomes;

c) Surveillance of trends in health status and health outcomes: Analyses of the data will be used for the longitudinal monitoring of trends in the incidence, prevalence, treatment and outcomes for a wide range of diseases and other risks to public health;

d) Responsive and timely local health intelligence service: Analyses of the data will be used to respond to ad hoc internal and external requests for information and intelligence on the health status and outcomes of the local population generated and received by the Director of Public Health and their team.

These lists of the statutory duties and wider public health responsibilities of the Local Authority are not exhaustive but set the broad parameters for how the data will be used by the Local Authority to help improve and protect public health, and reduce health inequalities. All such use would be in fulfilment of the public health function of the Local Authority.

No Identifiable data is requested under this agreement. The data provided would include derived demographic and geographic fields, the standard non-sensitive HES diagnostic and operative fields, and a common (across all Local Authorities) pseudo ID to enable admissions to be linked over time.

Legal Basis - Common Law Duty of Confidentiality:

The Data disseminated under this agreement is not considered confidential under the Health and Social Care Act 2012 and therefore is not owed a duty of confidence.

Legal Basis for Processing Data:

Article 6(1)(e)

(processing is necessary for the performance of a task in the public interest or in the exercise of official authority vested in the controller)

Public Authority: The Data Protection Act 2018 s7(1)(a) defines ‘public bodies’ for the purpose of the GDPR as “a public authority as defined by the Freedom of Information Act 2000”.

The FOI Act 2000 Part 1, section 3 (1)(a)(i) specifies that a public authority means any body which is listed in Schedule 1.

Schedule 1 of the FOI Act 2000 lists Local authorities within the meaning of the Local Government Act 1972 as public authorities.

‘Public Task’

Local Authorities have a legal responsibility under Section (1)(2)(3)(4)(5)(6)(7) of the Care Act 2014 to conduct tasks that are in the public interest to:

(1) Promoting individual well-being

(2) Preventing needs for care and support

(3) Promoting integration of care and support with health services etc.

(4) Providing information and advice

(5) Promoting diversity and quality in provision of services

(6) Co-operating generally

(7) Co-operating in specific cases

(8) Duty to meet needs for care and support

The task(s) are necessary (but are by no means an exhaustive list), but provides an indication of the many tasks required under Part 1 of the Care Act 2014 as the council has an obligation to the public to deliver services that are a necessity to the local population - from whom funding is provided to deliver these services/tasks in the form of Council Tax.

Local Authorities have a duty under Section 74 (1)(2)(3)(4) of the NHS Act 2006 to supply goods and services:

(1) In the Local Authorities (Goods and Services) Act 1970 (c. 39) the expression “public body” includes—

(a) any Strategic Health Authority, Special Health Authority or Primary Care Trust, and

(b) so far as relates to his functions under this Act, the Secretary of State.

(2) Subsection (1) has effect as if made by an order under section 1(5) of the Local Authorities (Goods and Services) Act 1970 and may be varied or revoked by such an order.

(3) Each local authority must make services available to each NHS body acting in its area, so far as is reasonably necessary and practicable to enable the NHS body to discharge its functions under this Act.

(4) “Services” means the services of persons employed by the local authority for the purposes of its functions under the Local Authority Social Services Act 1970 (c. 42).

As part of the application process, the requirement for the data requested has been assessed and NHS England is content that it is appropriate, necessary and proportionate for the performance of the task described in the Purpose statement.

‘Necessity’: Throughout the application process, the necessity of the processing for the performance of the task has been assessed. This included but was not limited to ensuring appropriate minimisation of the data to ensure that only the minimum amount of data required are processed. During the application process it has been considered whether the information that the processing aims to determine is already available from other sources or whether the task could be performed using publicly available data or data from alternative sources than NHS England. Consideration has been given to whether the volume of data being requested is proportionate to the expected benefit and, through examination of the expected benefits consideration has been given to whether the task is itself necessary.

Therefore, we are satisfied that this request is appropriate, necessary and proportionate for the performance of the task described in the Purpose statement and that there is no other reasonable means for the data processor to achieve their purpose that is less intrusive to the data subjects.

Article 9(2)(h)

(processing is necessary for the purposes of preventive or occupational medicine, for the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services on the basis of Union or Member State law or pursuant to contract with a health professional and subject to the conditions and safeguards referred to in paragraph 3)

• The data are required for the purpose of commissioning.

• The data required by the data controllers is the least intrusive to the data subject possible to be able to conduct their functions.

• The data required for commissioning purposes is pseudonymised by NHS England to minimise the risk of identification.

As part of the standard Data Access Request Service application process:

• the applicant’s technical and organisational measures to safeguard the data have been assessed and meets NHS England’s acceptance criteria;

• the requested data has been assessed as proportionate to the aim pursued;

• respect to the essence of the right to data protection has been assessed (e.g. security assurance, data retention, controls and processing activities, etc.);

• measures to protect the rights and freedoms of data subjects have been assessed including transparency (fair processing) publishing subject’s rights to withdraw consent and/or have their data erased or rectified, etc.

Article 9(3)

(Personal data referred to in paragraph 1 may be processed for the purposes referred to in point (h) of paragraph 2 when those data are processed by or under the responsibility of a professional subject to the obligation of professional secrecy under Union or Member State law or rules established by national competent bodies or by another person also subject to an obligation of secrecy under Union or Member State law or rules established by national competent bodies.)

Processing activities

The Pseudonymised HES Extract Service will enable the Local Authority to undertake a wide range of locally-determined and locally-specific analyses to support the effective and efficient discharge of its statutory duties in relation to health, and wider public health responsibilities.

Access to the data is provided to the Local Authority only, and will only be used for the health purposes outlined above. The data will only be processed by Local Authority employees in fulfilment of their public health function, and will not be transferred, shared, or otherwise made available to any third party, including any organisations processing data on behalf of the Local Authority or in connection with their legal function. Such organisations may include Commissioning Support Units, Data Services for Commissioners Regional Offices, any organisation for the purposes of health research, or any Business Intelligence company providing analysis and intelligence services (whether under formal contract or not).

Microsoft Limited is a processor acting under the instructions of Norfolk County Council.

The Local Authority will use the data to produce a range of quantitative measures (counts, crude and standardised rates and ratios) that will form the basis for a range of statistical analyses of the fields contained in the supplied data. Typical uses will include:

1. Analyses of disease incidence, prevalence and trends: The age, sex, LSOA, ethnic group, Indices of Deprivation and diagnosis fields typically will be used to produce directly standardised coronary heart disease admission rates for the Local Authority, and for appropriate benchmark and comparator areas. Confidence intervals will then be produced for these rates, and the rates analysed using statistical process control methods, to determine whether there are any significant variations in the prevalence of heart disease with the Local Authority. The data will also be used to analyse changes over time in the prevalence of heart disease. The results of these analyses will then be used to inform the production of local health profiles, JSNAs and JHWSs; support the ‘core offer’ public health advice provided by the Director of Public Health to NHS commissioners; and advise any enquiries into health inequalities requested by the Health and Wellbeing Board.

2. Analyses of hospital admission rates: The data will also be used, for example, to produce comparative and longitudinal hospital admission rates among children and young people, particularly for injury and self-harm, to support the overarching responsibility of the Local Authority to safeguard and promote the health and welfare of all children and young people under the 1989 and 2004 Children Acts. Statistics based on these analyses will be used by the Director of Public Health to advise the Director of Children’s Services and Lead Member for Children’s Services, and inform and guide the provision of safeguarding services by the Local Authority.

Conditions of supply and controls on use

In addition to those outlined elsewhere within this application, the Local Authorities will:

1. only use the HES/ECDS data for the purposes as outlined in this agreement;

2. comply with the requirements of the Code of Practice on Confidential Information, the Caldicott Principles and other relevant statutory requirements and guidance to protect confidentiality;

3. not attempt any record-level linkage of HES data with other data sets held by the Local Authority, or attempt to identify any individuals from the HES data;

4. not transfer and disseminate record-level HES data to anyone outside the Local Authority;

5. not publish the results of any analyses of the HES data unless safely de-identified in line with the anonymisation standard; and

6. comply with the guidelines set out in the HES Analysis Guide;

7. ensure role-based control access is in place to manage access to the HES data within the Local Authority.

The Director of Public Health will be the Information Asset Owner for the HES data and be responsible on behalf of the Local Authority to NHS England for ensuring that the data supplied is only used in fulfilment of the approved public health purposes as set out in this application. The Local Authority confirms that the Director of Public Health is a contracted employee to the permanent role within the Local Authority, accountable to the Chief Executive.

Data retention

A maximum of ten years data will be retained at any point, such that as each new data year is received, the oldest year will be deleted (i.e. at any point in time only ten historic years of data plus the current year may be held). The Local Authority will securely destroy the year’s data within six weeks of receiving the latest annual dataset and provide a data destruction certificate to NHS England.

The historic data will be used by the Local Authority in fulfilment of its public health function, and specifically to:

a) recognise and monitor trends in disease incidence and prevalence and other risks to public health;

b) recognise and monitor trends in treatment patterns, particularly hospital readmissions, and outcomes;

c) recognise and monitor trends in access to treatment and care between demographic, geographic, ethnic and socio-economic groups in the population; and

d) recognise and monitor trends in the association between the wider social, economic and environmental determinants of health and health outcomes for the purpose of informing the planning, commissioning and provision of effective health and care services at a local level.

Expected output

The results of the analyses of the data will be used by the Local Authority to support the discharge of its statutory duties in relation to public health, and wider public health responsibilities. Outputs will include (but not be limited to) the routine and ad hoc production of:

a) Joint Strategic Needs Assessments;

b) Joint Health and Wellbeing Strategies;

c) the annual report of the Director of Public Health;

d) reports commissioned by the Health and Wellbeing Board;

e) public health and wider Local Authority health and wellbeing commissioning strategies and plans;

f) public health advice to NHS commissioners;

g) responses to licensing applications and other statutory Local Authority functions requiring public health input;

h) local health profiles;

i) health impact assessments and equity audits; and, among other outputs

j) responses to internal and external requests for information and intelligence on the health and wellbeing of the population.

The specific content of and target dates for these outputs will be for the Local Authority to determine, although it is required to comply with national guidance published by the Department of Health, UKHSA and others as appropriate, for example, on the timetable for publishing refreshed JSNAs.

All outputs will be of aggregated data with small numbers suppressed in line with the HES Analysis Guide.

Expected measurable benefits

Access to the data will enable the Local Authority to undertake locally-focused and locally-responsive analyses of health status and health outcomes. For example, the data will be used to produce analyses of health inequalities for non-standard geographies and for specific social or ethnic groups in the local population to help ensure that the health challenges facing the local population – particularly the most disadvantaged – have been identified and responded to appropriately by the Local Authority and its partners.

It is recognised that in fulfilling its public health duties using HES data, the Local Authority will deliver significant benefits. The Local Authority therefore commits in any renewal request to providing additional detail on benefits that relate to their local use of the data.

Benefits reported so far

In addition to what was mentioned in the previous expected benefits, The HES data has been used to:

1. Refresh several HES indicators outlined in the previous expected benefits section

2. Development of indicators for a local vulnerability hub to understand the communities and groups that might be more vulnerable to COVID19 than others

3. Continued measurement of inequalities in A&E attendances, emergency admissions and elective admissions

4. Planning for COVID19 recovery to understand if certain groups and areas should be prioritised above others e.g. cancer services and inequalities in access

5. Understand priorities for addressing inequalities and variation in secondary care utilisation across the system

6. Developing machine learning models to predict planned admissions to Norfolk & Waveney hospitals. Then using those models to determine the inequity in access across due to deprivation.

Significant benefit additional details:

HES is proving to be invaluable to answer questions to help with system wide strategic planning, modelling future usage scenarios and understanding unwarranted variation. The local authority has been able to respond quickly and comprehensively to requests to understand unwarranted variation for various conditions across the health and social care system in Norfolk and Waveney. This has been used to show variation at CCG, lower tier local authority, electoral division and GP practice giving a single version of the truth across the system and where different organisations could make a difference. For example; self-harm, injury and poisoning to children, falls, dementia & mental health, respiratory conditions and others. HES has also enabled us to start to understand if schemes to reduce emergency admissions as part of the BCF are having the impact at scale across the system.

A summary of the benefits Norfolk County Council have achieved using the HES data set so far:

1. Develop our understanding of multi-morbidity and long term conditions across Norfolk and Waveney to create a single view of multi-morbidity at electoral division, GP practice, ICS, and local authority district. This helps to highlight areas of need and gaps in service provision that could be addressed through different service delivery models

2. Development of indicators for electoral division profiles so that elected members can engage more effectively with the health and wellbeing of their electorate

3. Various needs assessments (e.g. Homelessness, Mental Health)

4. Development of a falls dashboard for the Norfolk and Waveney system that brings together community services, acute providers, ambulance, social care and third sector

5. Answering various adhoc queries relating to variation across the Norfolk and Waveney system for the STP

6. Updated electoral division profiles (http://www.norfolkinsight.org.uk/jsna/profiles/health-wellbeing-profiles/electoral-division-profiles)

7. A deeper understanding of the variation in acute activity across the system for RightCare priorities as part of the STP (respiratory, chd, cancer)

8. Development of a tool to support alcohol licensing decisions understanding the wider context in an area. This used A&E and inpatient datasets.

9. A detailed look at the reasons for injury and poisoning A&E attendances and inpatient admissions by children and young people. Norfolk is an outlier for this.

10. HES data has been used in the development of social prescribing need index for Norfolk

11. Produce various indicators that contribute to a resource allocation / need index to support the development of the county wide local service strategy

12. Develop a community frailty index using HES and applying the methodology developed by Gibert et al. 2018

13. Benchmark A&E attendances across Norfolk and Waveney to understand how much scope there is for improvement given the age, sex, deprivation and attendance category - would be interesting to extend this to include access to A&E (distance / rurality etc.)

14. Continue to monitor emergency admissions for children and young people

15. Continue to look at variation in A&E and emergency admissions by small area and GP practice (High Intensity Users)

16. Support the local STP cancer programme to improve outcomes for cancer patients across the local STP footprint

17. In the development of ICS Primary Care Network profiles

18. Collaborate with Suffolk PH to produce place based needs assessments for their integrated neighbourhood team areas

19. Model the impact of different options for the Norfolk healthy lifestyle service

20. Develop indicators for the local inclusive growth framework and the early childhood and family service dashboard

21. Forecast stroke admissions as part of the Norfolk and Waveney system plan for stroke

22. Further develop resource allocation approaches to understand the potential distribution of community workforce required to meet need

Having HES available locally continues to deliver benefit to the local system, it is proving to be a valuable resource.

Datasets on the current version

Legal basis for provision: Health and Social Care Act 2012 – s261(2)(a)

Datasets approved under DARS-NIC-371828-D2W1R-v7.5
Dataset	Type of data	Sensitivity	Frequency	Confidential data
Emergency Care Data Set (ECDS)	Anonymised - ICO Code Compliant	Sensitive	Ongoing	Does not include the flow of confidential data
HES-ID to MPS-ID HES Accident and Emergency	Anonymised - ICO Code Compliant	Non-Sensitive	One-Off	Does not include the flow of confidential data
HES-ID to MPS-ID HES Admitted Patient Care	Anonymised - ICO Code Compliant	Non-Sensitive	One-Off	Does not include the flow of confidential data
HES-ID to MPS-ID HES Outpatients	Anonymised - ICO Code Compliant	Non-Sensitive	One-Off	Does not include the flow of confidential data
Hospital Episode Statistics Accident and Emergency (HES A and E)	Anonymised - ICO Code Compliant	Non-Sensitive	Ongoing	Does not include the flow of confidential data
Hospital Episode Statistics Admitted Patient Care (HES APC)	Anonymised - ICO Code Compliant	Non-Sensitive	Ongoing	Does not include the flow of confidential data
Hospital Episode Statistics Critical Care (HES Critical Care)	Anonymised - ICO Code Compliant	Non-Sensitive	Ongoing	Does not include the flow of confidential data
Hospital Episode Statistics Outpatients (HES OP)	Anonymised - ICO Code Compliant	Non-Sensitive	Ongoing	Does not include the flow of confidential data

Files released

Files released counts only files released externally by DARS. Access granted in NHS England's own systems, such as its Secure Data Environment, is not included.

Patient opt-outs were not applied to any of the 554 files released under this agreement, across every version. About opt-outs

Files released against version 7.5 of this agreement, summarised by dataset.

Files released under DARS-NIC-371828-D2W1R-v7.5
Dataset	Files	First released	Last released	Opt-outs applied
Hospital Episode Statistics Admitted Patient Care (HES APC)	33	February 2024	August 2026	No
Hospital Episode Statistics Critical Care (HES Critical Care)	33	February 2024	August 2026	No
Hospital Episode Statistics Outpatients (HES OP)	33	February 2024	August 2026	No
Emergency Care Data Set (ECDS)	31	February 2024	August 2026	No

Version history

The register lists each renewal of this agreement as a separate row. This site has 4 versions — earlier versions existed before this site's records begin.

DARS-NIC-371828-D2W1R-v7.5 12 January 2024 to 11 January 2027

Title: LAPH Standard Extract
Commercial: No
Sublicensing: No
Datasets: 8
Files released: 130

Datasets: Emergency Care Data Set (ECDS); HES-ID to MPS-ID HES Accident and Emergency; HES-ID to MPS-ID HES Admitted Patient Care; HES-ID to MPS-ID HES Outpatients; Hospital Episode Statistics Accident and Emergency (HES A and E); Hospital Episode Statistics Admitted Patient Care (HES APC); Hospital Episode Statistics Critical Care (HES Critical Care); Hospital Episode Statistics Outpatients (HES OP)

What changed from DARS-NIC-371828-D2W1R-v6.4

Text removed is ~~struck through~~; text added is underlined. Unchanged paragraphs are summarised rather than repeated.

Fields changed from DARS-NIC-371828-D2W1R-v6.4
Field	Was	Became
Start date	~~2021-04-01~~	2024-01-12
End date	~~2023-11-30~~	2027-01-11
Emergency Care Data Set (ECDS): legal basis	~~Health and Social Care Act 2012 - s261 - 'Other dissemination of information'~~	Health and Social Care Act 2012 – s261(2)(a)
HES-ID to MPS-ID HES Accident and Emergency: legal basis	~~Health and Social Care Act 2012 - s261 - 'Other dissemination of information'~~	Health and Social Care Act 2012 – s261(2)(a)
HES-ID to MPS-ID HES Admitted Patient Care: legal basis	~~Health and Social Care Act 2012 - s261 - 'Other dissemination of information'~~	Health and Social Care Act 2012 – s261(2)(a)
HES-ID to MPS-ID HES Outpatients: legal basis	~~Health and Social Care Act 2012 - s261 - 'Other dissemination of information'~~	Health and Social Care Act 2012 – s261(2)(a)
Hospital Episode Statistics Accident and Emergency (HES A and E): legal basis	~~Health and Social Care Act 2012 - s261 - 'Other dissemination of information'~~	Health and Social Care Act 2012 – s261(2)(a)
Hospital Episode Statistics Admitted Patient Care (HES APC): legal basis	~~Health and Social Care Act 2012 - s261 - 'Other dissemination of information'~~	Health and Social Care Act 2012 – s261(2)(a)
Hospital Episode Statistics Critical Care (HES Critical Care): legal basis	~~Health and Social Care Act 2012 - s261 - 'Other dissemination of information'~~	Health and Social Care Act 2012 – s261(2)(a)
Hospital Episode Statistics Outpatients (HES OP): legal basis	~~Health and Social Care Act 2012 - s261 - 'Other dissemination of information'~~	Health and Social Care Act 2012 – s261(2)(a)

Objective for processing

The data provided by the Pseudonymised HES Extract Service will be used by the Local ~~Authorities~~ Authority in fulfilment of its public health function, specifically to support and improve: [13 paragraphs unchanged] b) Duty to support Health and Wellbeing Boards: Analyses of the data will be used to support the duty of the Local Authority and the ~~Clinical Commissioning Group (CCG)-led~~ Integrated Care Board (ICB)- led Health and Wellbeing Board under Section 194 of the 2012 Act to [32 words unchanged] under Section 206 of the 2012 Act to undertake Pharmaceutical Needs Assessments; [7 paragraphs unchanged] b) Local health profiles: Analyses of the data will be used to support the production of locally-commissioned health profiles to improve ~~understand~~ understanding of the health priorities of local areas and guide strategic commissioning plans by focusing, for example, on: [6 paragraphs unchanged] No ~~sensitive~~ Identifiable data is requested under this ~~application.~~ agreement. The data provided would include derived demographic and geographic fields, the standard non-sensitive HES diagnostic and operative fields, and a common (across all Local Authorities) ~~pseudoHESID~~ pseudo ID to enable admissions to be linked over time. Legal Basis - Common Law Duty of Confidentiality: The Data disseminated under this agreement is not considered confidential under the Health and Social Care Act 2012 and therefore is not owed a duty of confidence. Legal Basis for Processing Data: Article 6(1)(e) (processing is necessary for the performance of a task in the public interest or in the exercise of official authority vested in the controller) Public Authority: The Data Protection Act 2018 s7(1)(a) defines ‘public bodies’ for the purpose of the GDPR as “a public authority as defined by the Freedom of Information Act 2000”. The FOI Act 2000 Part 1, section 3 (1)(a)(i) specifies that a public authority means any body which is listed in Schedule 1. Schedule 1 of the FOI Act 2000 lists Local authorities within the meaning of the Local Government Act 1972 as public authorities. ‘Public Task’ Local Authorities have a legal responsibility under Section (1)(2)(3)(4)(5)(6)(7) of the Care Act 2014 to conduct tasks that are in the public interest to: (1) Promoting individual well-being (2) Preventing needs for care and support (3) Promoting integration of care and support with health services etc. (4) Providing information and advice (5) Promoting diversity and quality in provision of services (6) Co-operating generally (7) Co-operating in specific cases (8) Duty to meet needs for care and support The task(s) are necessary (but are by no means an exhaustive list), but provides an indication of the many tasks required under Part 1 of the Care Act 2014 as the council has an obligation to the public to deliver services that are a necessity to the local population - from whom funding is provided to deliver these services/tasks in the form of Council Tax. Local Authorities have a duty under Section 74 (1)(2)(3)(4) of the NHS Act 2006 to supply goods and services: (1) In the Local Authorities (Goods and Services) Act 1970 (c. 39) the expression “public body” includes— (a) any Strategic Health Authority, Special Health Authority or Primary Care Trust, and (b) so far as relates to his functions under this Act, the Secretary of State. (2) Subsection (1) has effect as if made by an order under section 1(5) of the Local Authorities (Goods and Services) Act 1970 and may be varied or revoked by such an order. (3) Each local authority must make services available to each NHS body acting in its area, so far as is reasonably necessary and practicable to enable the NHS body to discharge its functions under this Act. (4) “Services” means the services of persons employed by the local authority for the purposes of its functions under the Local Authority Social Services Act 1970 (c. 42). As part of the application process, the requirement for the data requested has been assessed and NHS England is content that it is appropriate, necessary and proportionate for the performance of the task described in the Purpose statement. ‘Necessity’: Throughout the application process, the necessity of the processing for the performance of the task has been assessed. This included but was not limited to ensuring appropriate minimisation of the data to ensure that only the minimum amount of data required are processed. During the application process it has been considered whether the information that the processing aims to determine is already available from other sources or whether the task could be performed using publicly available data or data from alternative sources than NHS England. Consideration has been given to whether the volume of data being requested is proportionate to the expected benefit and, through examination of the expected benefits consideration has been given to whether the task is itself necessary. Therefore, we are satisfied that this request is appropriate, necessary and proportionate for the performance of the task described in the Purpose statement and that there is no other reasonable means for the data processor to achieve their purpose that is less intrusive to the data subjects. Article 9(2)(h) (processing is necessary for the purposes of preventive or occupational medicine, for the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services on the basis of Union or Member State law or pursuant to contract with a health professional and subject to the conditions and safeguards referred to in paragraph 3) • The data are required for the purpose of commissioning. • The data required by the data controllers is the least intrusive to the data subject possible to be able to conduct their functions. • The data required for commissioning purposes is pseudonymised by NHS England to minimise the risk of identification. As part of the standard Data Access Request Service application process: • the applicant’s technical and organisational measures to safeguard the data have been assessed and meets NHS England’s acceptance criteria; • the requested data has been assessed as proportionate to the aim pursued; • respect to the essence of the right to data protection has been assessed (e.g. security assurance, data retention, controls and processing activities, etc.); • measures to protect the rights and freedoms of data subjects have been assessed including transparency (fair processing) publishing subject’s rights to withdraw consent and/or have their data erased or rectified, etc. Article 9(3) (Personal data referred to in paragraph 1 may be processed for the purposes referred to in point (h) of paragraph 2 when those data are processed by or under the responsibility of a professional subject to the obligation of professional secrecy under Union or Member State law or rules established by national competent bodies or by another person also subject to an obligation of secrecy under Union or Member State law or rules established by national competent bodies.)

Processing activities

The Pseudonymised HES Extract Service will enable the Local Authority to undertake [10 words unchanged] the effective and efficient discharge of its statutory duties in relation to ~~public~~ health, and wider public health responsibilities. Access to the data is provided to the Local Authority only, and will only be used for the ~~public~~ health purposes outlined above. The data will only be processed by Local [66 words unchanged] company providing analysis and intelligence services (whether under formal contract or not). Microsoft Limited is a processor acting under the instructions of Norfolk County Council. [5 paragraphs unchanged] 1. only use the ~~HES~~ HES/ECDS data for the purposes as outlined in this agreement; 2. comply with the requirements of ~~NHS Digital~~ the Code of Practice on Confidential Information, the Caldicott Principles and other relevant statutory requirements and guidance to protect confidentiality; [5 paragraphs unchanged] The Director of Public Health will be the Information Asset Owner for the HES data and be responsible on behalf of the Local Authority to NHS ~~Digital~~ England for ensuring that the data supplied is only used in fulfilment of [26 words unchanged] the permanent role within the Local Authority, accountable to the Chief Executive. [1 paragraph unchanged] A maximum of ten years data will be retained at any point, [48 words unchanged] the latest annual dataset and provide a data destruction certificate to NHS ~~Digital.~~ England. [4 paragraphs unchanged] d) recognise and monitor trends in the association between the wider social, economic and environmental determinants of health and health outcomes for the purpose of informing the planning, commissioning and provision of effective health and care services at a local level. ~~for the purpose of informing the planning, commissioning and provision of effective health and care services at a local level.~~

Expected output

[6 paragraphs unchanged] ~~f) Relevant Needs Assessments;~~ f) public health advice to NHS commissioners; ~~g) public health advice to NHS commissioners;~~ g) responses to licensing applications and other statutory Local Authority functions requiring public health input; ~~h) responses to licensing applications and other statutory Local Authority functions requiring public health input;~~ h) local health profiles; ~~i) local health profiles;~~ i) health impact assessments and equity audits; and, among other outputs ~~j) health impact assessments and equity audits; and, among other outputs;~~ j) responses to internal and external requests for information and intelligence on the health and wellbeing of the population. ~~k) responses to internal and external requests for information and intelligence on the health and wellbeing of the population;~~ The specific content of and target dates for these outputs will be for the Local Authority to determine, although it is required to comply with national guidance published by the Department of Health, UKHSA and others as appropriate, for example, on the timetable for publishing refreshed JSNAs. ~~l) health surveillance.~~ The specific content of and target dates for these outputs will be for the Local Authority to determine, although it is required to comply with national guidance published by the Department of Health, Public Health England and others as appropriate, for example, on the timetable for publishing refreshed JSNAs. [1 paragraph unchanged]

Benefits reported

~~Feb 2021~~ [5 paragraphs unchanged] 5. Understand priorities for addressing inequalities and variation in secondary care utilisation across the system 6. Developing machine learning models to predict planned admissions to Norfolk & Waveney hospitals. Then using those models to determine the inequity in access across due to deprivation. [5 paragraphs unchanged] 1. Develop our understanding of multi-morbidity and long term conditions across Norfolk and Waveney to create a single view of multi-morbidity at electoral division, GP practice, ~~CCG,~~ ICS, and local authority district. This helps to highlight areas of need and gaps in service provision that could be addressed through different service delivery models [22 paragraphs unchanged]

Unchanged: Expected measurable benefits.

DARS-NIC-371828-D2W1R-v6.4 1 April 2021 to 30 November 2023

Title: LAPH Standard Extract
Commercial: No
Sublicensing: No
Datasets: 8
Files released: 246

What changed from DARS-NIC-371828-D2W1R-v5.2

Text removed is ~~struck through~~; text added is underlined. Unchanged paragraphs are summarised rather than repeated.

Fields changed from DARS-NIC-371828-D2W1R-v5.2
Field	Was	Became
Start date	~~2020-04-01~~	2021-04-01
End date	~~2021-03-31~~	2023-11-30
Emergency Care Data Set (ECDS): legal basis	~~Health and Social Care Act 2012 – s261(2)(b)(ii)~~	Health and Social Care Act 2012 - s261 - 'Other dissemination of information'
Hospital Episode Statistics Accident and Emergency (HES A and E): legal basis	~~Health and Social Care Act 2012 – s261(2)(b)(ii)~~	Health and Social Care Act 2012 - s261 - 'Other dissemination of information'
Hospital Episode Statistics Admitted Patient Care (HES APC): legal basis	~~Health and Social Care Act 2012 – s261(2)(b)(ii)~~	Health and Social Care Act 2012 - s261 - 'Other dissemination of information'
Hospital Episode Statistics Critical Care (HES Critical Care): legal basis	~~Health and Social Care Act 2012 – s261(2)(b)(ii)~~	Health and Social Care Act 2012 - s261 - 'Other dissemination of information'
Hospital Episode Statistics Outpatients (HES OP): legal basis	~~Health and Social Care Act 2012 – s261(2)(b)(ii)~~	Health and Social Care Act 2012 - s261 - 'Other dissemination of information'

Datasets: + HES-ID to MPS-ID HES Accident and Emergency; + HES-ID to MPS-ID HES Admitted Patient Care; + HES-ID to MPS-ID HES Outpatients

Expected measurable benefits

[2 paragraphs unchanged] ~~Significant benefit additional details:~~ HES is proving to be invaluable to answer questions to help with system wide strategic planning, modelling future usage scenarios and understanding unwarranted variation. The local authority has been able to respond quickly and comprehensively to requests to understand unwarranted variation for various conditions across the health and social care system in Norfolk and Waveney. This has been used to show variation at CCG, lower tier local authority, electoral division and GP practice giving a single version of the truth across the system and where different organisations could make a difference. For example; self-harm, injury and poisoning to children, falls, dementia & mental health, respiratory conditions and others. HES has also enabled us to start to understand if schemes to reduce emergency admissions as part of the BCF are having the impact at scale across the system. ~~A summary of the benefits we have achieved using the HES data set so far:~~ 1. Develop our understanding of multi-morbidity and long term conditions across Norfolk and Waveney to create a single view of multi-morbidity at electoral division, GP practice, CCG, and local authority district. This helps to highlight areas of need and gaps in service provision that could be addressed through different service delivery models ~~2. Development of indicators for electoral division profiles so that elected members can engage more effectively with the health and wellbeing of their electorate~~ ~~3. Various needs assessments (e.g. Homelessness, Mental Health)~~ ~~4. Development of a falls dashboard for the Norfolk and Waveney system that brings together community services, acute providers, ambulance, social care and third sector~~ ~~5. Answering various adhoc queries relating to variation across the Norfolk and Waveney system for the STP~~ ~~6. Updated electoral division profiles (http://www.norfolkinsight.org.uk/jsna/profiles/health-wellbeing-profiles/electoral-division-profiles)~~ ~~7. A deeper understanding of the variation in acute activity across the system for RightCare priorities as part of the STP (respiratory, chd, cancer)~~ ~~8. Development of a tool to support alcohol licensing decisions understanding the wider context in an area. This used A&E and inpatient datasets.~~ ~~9. A detailed look at the reasons for injury and poisoning A&E attendances and inpatient admissions by children and young people. Norfolk is an outlier for this.~~ ~~10. HES data has been used in the development of social prescribing need index for Norfolk~~ ~~11. Produce various indicators that contribute to a resource allocation / need index to support the development of the county wide local service strategy~~ ~~12. Develop a community frailty index using HES and applying the methodology developed by Gibert et al. 2018~~ 13. Benchmark A&E attendances across Norfolk and Waveney to understand how much scope there is for improvement given the age, sex, deprivation and attendance category - would be interesting to extend this to include access to A&E (distance / rurality etc.) ~~14. Continue to monitor emergency admissions for children and young people~~ ~~15. Continue to look at variation in A&E and emergency admissions by small area and GP practice (High Intensity Users)~~ ~~16. Support the local STP cancer programme to improve outcomes for cancer patients across the local STP footprint~~ ~~17. In the development of ICS Primary Care Network profiles~~ ~~Having HES available locally continues to deliver benefit to the local system, it is proving to be a valuable resource.~~

Benefits reported

Feb 2021 [2 paragraphs unchanged] ~~2. Collaborate with Suffolk PH to produce place based needs assessments for their integrated neighbourhood team areas~~ 2. Development of indicators for a local vulnerability hub to understand the communities and groups that might be more vulnerable to COVID19 than others ~~3. Model the impact of different options for the Norfolk healthy lifestyle service~~ 3. Continued measurement of inequalities in A&E attendances, emergency admissions and elective admissions ~~4. Develop indicators for the local inclusive growth framework and the early childhood and family service dashboard~~ 4. Planning for COVID19 recovery to understand if certain groups and areas should be prioritised above others e.g. cancer services and inequalities in access ~~5. Forecast stroke admissions as part of the Norfolk and Waveney system plan for stroke~~ Access to the data will enable the Local Authority to undertake locally-focused and locally-responsive analyses of health status and health outcomes. For example, the data will be used to produce analyses of health inequalities for non-standard geographies and for specific social or ethnic groups in the local population to help ensure that the health challenges facing the local population – particularly the most disadvantaged – have been identified and responded to appropriately by the Local Authority and its partners. ~~6. Further develop resource allocation approaches to understand the potential distribution of community workforce required to meet need~~ It is recognised that in fulfilling its public health duties using HES data, the Local Authority will deliver significant benefits. The Local Authority therefore commits in any renewal request to providing additional detail on benefits that relate to their local use of the data. Significant benefit additional details: HES is proving to be invaluable to answer questions to help with system wide strategic planning, modelling future usage scenarios and understanding unwarranted variation. The local authority has been able to respond quickly and comprehensively to requests to understand unwarranted variation for various conditions across the health and social care system in Norfolk and Waveney. This has been used to show variation at CCG, lower tier local authority, electoral division and GP practice giving a single version of the truth across the system and where different organisations could make a difference. For example; self-harm, injury and poisoning to children, falls, dementia & mental health, respiratory conditions and others. HES has also enabled us to start to understand if schemes to reduce emergency admissions as part of the BCF are having the impact at scale across the system. A summary of the benefits Norfolk County Council have achieved using the HES data set so far: 1. Develop our understanding of multi-morbidity and long term conditions across Norfolk and Waveney to create a single view of multi-morbidity at electoral division, GP practice, CCG, and local authority district. This helps to highlight areas of need and gaps in service provision that could be addressed through different service delivery models 2. Development of indicators for electoral division profiles so that elected members can engage more effectively with the health and wellbeing of their electorate 3. Various needs assessments (e.g. Homelessness, Mental Health) 4. Development of a falls dashboard for the Norfolk and Waveney system that brings together community services, acute providers, ambulance, social care and third sector 5. Answering various adhoc queries relating to variation across the Norfolk and Waveney system for the STP 6. Updated electoral division profiles (http://www.norfolkinsight.org.uk/jsna/profiles/health-wellbeing-profiles/electoral-division-profiles) 7. A deeper understanding of the variation in acute activity across the system for RightCare priorities as part of the STP (respiratory, chd, cancer) 8. Development of a tool to support alcohol licensing decisions understanding the wider context in an area. This used A&E and inpatient datasets. 9. A detailed look at the reasons for injury and poisoning A&E attendances and inpatient admissions by children and young people. Norfolk is an outlier for this. 10. HES data has been used in the development of social prescribing need index for Norfolk 11. Produce various indicators that contribute to a resource allocation / need index to support the development of the county wide local service strategy 12. Develop a community frailty index using HES and applying the methodology developed by Gibert et al. 2018 13. Benchmark A&E attendances across Norfolk and Waveney to understand how much scope there is for improvement given the age, sex, deprivation and attendance category - would be interesting to extend this to include access to A&E (distance / rurality etc.) 14. Continue to monitor emergency admissions for children and young people 15. Continue to look at variation in A&E and emergency admissions by small area and GP practice (High Intensity Users) 16. Support the local STP cancer programme to improve outcomes for cancer patients across the local STP footprint 17. In the development of ICS Primary Care Network profiles 18. Collaborate with Suffolk PH to produce place based needs assessments for their integrated neighbourhood team areas 19. Model the impact of different options for the Norfolk healthy lifestyle service 20. Develop indicators for the local inclusive growth framework and the early childhood and family service dashboard 21. Forecast stroke admissions as part of the Norfolk and Waveney system plan for stroke 22. Further develop resource allocation approaches to understand the potential distribution of community workforce required to meet need Having HES available locally continues to deliver benefit to the local system, it is proving to be a valuable resource.

Unchanged: Objective for processing, Processing activities, Expected output.

Objective for processing

The data provided by the Pseudonymised HES Extract Service will be used by the Local Authorities in fulfilment of its public health function, specifically to support and improve: