DSfC - NHS Greater Manchester Integrated Care Board - Commissioning / Invoice Validation / Risk Stratification and Research
NHS Greater Manchester Integrated Care Board · ICB - Integrated Care Board
In term In term in the September 2026 edition: the latest version runs to 4 June 2029.
- Reference
- DARS-NIC-616054-M4C8K
- Current version
- v6.3
- Term of current version
- 5 June 2026 to 4 June 2029
- Start date
- 18 November 2022
- Data controller
- Sole Data Controller
- Commercial purposes
- No
- Sublicensing
- Yes
- Files released to date
- 0
Why the data was released
Objective for processing
The Health and Social Care Act 2022 created 42 Integrated Care Boards (ICB). These are legal entities which have replaced CCGs. The ICB has taken on the NHS commissioning functions of CCGs as well as some of NHS England’s commissioning functions. It is accountable for NHS spend and performance within the system. Within each ICB geographical area, there will also be an Integrated Care Partnership (ICP), a joint committee which brings together the ICB and their partner local authorities, and other locally determined representatives (for example from health, social care, public health; and potentially others, such as social care or housing providers) to set local priorities and develop an integrated health and social care strategy.
ICP constituent members (other than the ICB) do not carry out data controllership activities and do not make decisions on sub-licensing.
INVOICE VALIDATION
Invoice validation is part of a process by which providers of care or services get paid for the work they do.
Invoices are submitted to the Integrated Care Board (ICB) so the ICB is able to ensure that the patient is their responsibility and the activity claimed is correct. This is done by processing and analysing Invoice Validation Datasets, which are received into a secure Controlled Environment for Finance (CEfF). The identifiers included are in line with the CAG approval. The identifiers are only used to link and confirm the accuracy of backing-data sets (data from providers).
The ICB are advised by the appointed CEfF whether payment for invoices can be made or not.
RISK STRATIFICATION
Risk stratification is a tool for identifying and predicting which patients are at high risk (of health deterioration and using multiple services) or are likely to be at high risk and prioritising the management of their care in order to prevent worse outcomes.
In order to conduct, Risk Stratification Datasets, identifiable at the level of NHS number are linked with Primary Care data (from GPs) and an algorithm is applied to produce risk scores. Risk Stratification provides focus for future demands by enabling commissioners to prepare plans for both individual and groups of vulnerable patients. Commissioners can then prepare plans for cohorts of patients who may require high levels of care. Risk Stratification also enables General Practitioners (GPs) to better target intervention in Primary Care.
COMMISSIONING
To use pseudonymised Commissioning Datasets to provide intelligence to support the commissioning of health services. The data (containing both clinical and financial information) is analysed so that health care provision can be planned to support the needs of the population within the ICB area.
The ICBs commission services from a range of providers covering a wide array of services. Each of the data flow categories requested supports the commissioned activity of one or more providers.
The pseudonymised data is required for the following purposes:
Population health management
Data Quality and Validation – allowing data quality checks on the submitted data
Thoroughly investigating the needs of the population, to inform the commissioning or appropriate services for that population’s health needs
Understanding cohorts of residents who are at risk of becoming users of some of the more expensive services, to better understand and manage those needs
Monitoring population health and care interactions to understand where people may slip through the net, or where the provision of care may be being duplicated
Modelling activity across all data sets to understand how services interact with each other, and to understand how changes in one service may affect flows through another
Service redesign
Health Needs Assessment – identification of disease prevalence within the local population
Patient stratification and predictive modelling - to highlight cohorts of patients at risk of requiring hospital admission and other avoidable factors such as risk of falls, computed using algorithms executed against linked de-identified data, and identification of future service delivery models
Demand Management – ensuring enough capacity to manage the demand by predicting the impact on certain care pathways.
Support measuring the health and care needs of the total local population.
Provide intelligence about the safety and effectiveness of medicines.
Allow analysis of patient pathways across healthcare and social care.
DIRECT CARE
In the development of cohorts of pseudonymised patients considered to be at risk, the data controllers may need the facility to provide identifiable results back to direct health or care professionals for the purpose of direct care. Additionally clinicians, made aware of a number of cases that they believe would need intervention may request re-identification for that direct care purpose. These instances of re-identification will generally be carried out as programmes of work or, separately, on an individual/small group basis as a result of coincidental findings. The ICB does not have a statutory function to provide direct care and as such, does not see the identifiable data.
NHS England provides a re-identification service for this process. All re-id requests will be processed and authorised by NHS England on a case by case basis, including requests under a sub-licence. National data opt outs are not applied in these cases as they are for the purposes of direct care which follows the legal basis of implied consent. It is anticipated that this re-id ability in the future will allow risk stratification to be conducted under a single flow of pseudonymised data.
The following is a typical example of an instance where an ICB might want to use the re-identification process:
A&E High Attendance usage
The ICB can filter data to show for example the number of A&E attendances in a given period for each patient. The ICB can then flag to the relevant GP of the patient any patients that require intervention. An outcome of this is earlier intervention in the patient(s) care thus potentially reducing future costs and minimising future risk.
RESEARCH
This use is permitted where the research relates to commissioning activities for the health and care benefit of the ICS (and other ICS footprints under the appropriate governance arrangements).
Each ICB in law is required in the exercise of its functions, to facilitate otherwise promote
(a) research on matters relevant to the health service, and
(b) the use in the health service of evidence obtained from research.
The data controller may only use the data for research for one or more of the following purposes, which align with the advantages of evidence-based commissioning:
• lead to innovation in service design and delivery,
• enhance the quality of health and care provision,
• reduce clinical variation between locations and providers,
• improve equity of access to services,
• improve patient and population outcomes.
Research can only be undertaken by the data controller(s),or a sub-licensee(s) who is permitted by the data controller(s) to undertake research, which must:
• be for the benefit of health or social care within the ICS footprint area; and
• assist health and social care commissioning objectives, and allow the ICB to extend benefits to other ICS footprints under Board review governance arrangements; and
• support one or more of the purposes listed above; and
• a sub-licence cannot be granted where the research only requires data supplied by NHS England. A sub-licence is needed where additional, non-NHS England supplied, data sets are required from the controller for the research to be undertaken
Processing activities
PROCESSING CONDITIONS
Data must only be used for the purposes stipulated within this Data Sharing Agreement. Any additional disclosure / publication will require further approval from NHS England. All access to data is auditable by NHS England.
The Data Controller must keep a record of locations the data is processed and stored. These addresses must be within the UK. The Data Controller should minimise the number of processing and storage locations to prevent excessive processing. NHS England may request a record of processing and storage locations at any time.
All access to data is managed under Role-Based Access Controls. Users can only access data authorised by their role and the tasks that they are required to undertake.
Data may only be processed and held as long as is required to carry out the purposes listed within this agreement.
Patient level data will not be linked other than as specifically detailed within this Data Sharing Agreement. Data released will only be used for the purposes laid out in the application/agreement.
DATA PROCESSORS
Data Processors must be listed in section 5b of this Data Sharing Agreement. These include Cloud and IT infrastructure providers
The Data Controller should ensure appropriate data processing agreements with all data processors contracted to undertaking work referenced within this Agreement.
Palantir Technologies UK Limited support the Local FDP instance for the ICB and so are therefore listed as a data processor. Palantir Technologies UK Limited support the system and so will have access to personal data for support purposes.
Amazon Web Services supply Cloud Services for Palantir Technologies UK Limited so are therefore listed as a data processor, the supply support to the system but do not access data. Therefore, any access to data held under this agreement would be considered a breach of the agreement. This includes granting of access to the database(s) containing the data.
Tameside and Glossop Integrated Care NHS Foundation Trust supply IT infrastructure for NHS Greater Manchester Integrated Care Board and are therefore listed as a data processor. They supply support to the system, but do not access data. Therefore, any access to the data held under this agreement would be considered a breach of the agreement. This includes granting of access to the database[s] containing the data.
Bolton NHS Foundation Trust supply IT infrastructure for NHS Greater Manchester Integrated Care Board and are therefore listed as a data processor. They supply support to the system, but do not access data. Therefore, any access to the data held under this agreement would be considered a breach of the agreement. This includes granting of access to the database[s] containing the data.
Boehringer Ingelheim Ltd is supporting NHS Greater Manchester Integrated Care Board to identify opportunities to improve and optimise care pathways for patients with long term conditions. The work will focus on patients with cardiovascular disease to support better self-management and reduce pressure on primary and secondary care services
Agilisys supply IT infrastructure for NHS Greater Manchester Integrated Care Board and are therefore listed as a data processor. They supply support to the system, but do not access data. Therefore, any access to the data held under this agreement would be considered a breach of the agreement. This includes granting of access to the database(s) containing the data.
Salford City Council IT infrastructure for NHS Greater Manchester Integrated Care Board and are therefore listed as a data processor. They supply support to the system, but do not access data. Therefore, any access to the data held under this agreement would be considered a breach of the agreement. This includes granting of access to the database(s) containing the data.
Microsoft Limited supply provide Cloud Services for NHS Arden and Greater East Midlands Commissioning Support Unit, Liaison Financial Services Ltd and Midlands and Lancashire Commissioning Support Unit and are therefore listed as a data processor. They supply support to the system, but do not access data. Therefore, any access to the data held under this agreement would be considered a breach of the agreement. This includes granting of access to the database[s] containing the data.
Google UK Limited provide Cloud Services for Snowflake Computing U.K. Limited and are therefore listed as a data processor. They supply support to the system, but do not access data. Therefore, any access to the data held under this agreement would be considered a breach of the agreement. This includes granting of access to the database[s] containing the data
Snowflake Computing U.K. Limited data supply IT infrastructure for NHS Greater Manchester Integrated Care Board and are therefore listed as a data processor. They supply support to the system, but do not access data. Therefore, any access to the data held under this agreement would be considered a breach of the agreement. This includes granting of access to the database(s) containing the data.
Liaison Financial Services Limited support the ICB with Continuing Health Care Reviews and invoice validation processes, working with providers to agree and recover any overcharges or overpayments on behalf of the Integrated Care Board (ICB).
NHS Arden and GEM CSU act as the Data Services for Commissioners Regional Office (DSCRO) for the ICB. They process data and make it available to the ICB in a pseudonymised form.
They also provide NHS GM Microsoft Azure tenancy and undertake the following tasks:
• Data back up for disaster recovery
• Regular consumption cost breakdown
• Performance monitoring / tuning
• System audit
• Availability and up time of Cloud environment
Newton Consulting Limited is supporting the ICB with it's Urgent Care Transformation Programmes, as part of the support Newton Consulting Limited will use national and local commissioning datasets to build a suite of System Visibility dashboards to support strategic and operational decision making by commissioners and Service Leads. In addition, they will be working closely with operational leads to support process redesign and change across the hospital front door, acute inpatients & discharge, and intermediate care services.
Carnall Farrar are supporting the ICB with the development of a Strategic Financial Framework.
Health Innovation Manchester (HINM) hosted by Manchester University NHS Foundation Trust supports the ICB with the deployment and evaluation of innovation projects across Greater Manchester. HINM process data to understand current service pathways and models of care, that can be reimagined to promote improved patient outcomes, and deliver efficiency and effectiveness through the deployment of innovation, and to effectively evaluate the impact of innovation back to the system.
NHS Greater Manchester ICB is working closely with its provider colleagues and clinical networks to ensure goal congruence and effective integration for collaborative programmes. As such the ICB Hospital Care Intelligence Team has a hybrid diagnostics sub team that includes individuals working for the ICB directly and also staff working for the Diagnostics Network (hosted by the Northern Care Alliance -NCA). To enable this, all members of the Hospital Care Intelligence Team, including those employed by partner NHS GM Trusts require access to the NHS GM data infrastructure and associated applications and services to facilitate integrated working within the team
The Christie host the GM Cancer Alliance Intelligence Service. The Cancer Alliance aims to improve the lives of people affected by cancer in Greater Manchester. The ICB works in collaboration with Cancer Alliance and other organisations across the region to help people get diagnosed earlier, provide better treatment and support people to live well with and beyond cancer.
Salesforce UK Limited and Amazon Web Services (AWS) provide cloud services to NHS Greater Manchester Integrated Care Board. Salesforce UK Limited provide NHS Greater Manchester Integrated Care Board with Tableau Cloud platform, the data on this cloud platform (Tableau dashboard visualisations) is backed up to AWS.
Commissioners in this region have strong analytical relationships with local universities. In addition to university led projects, the ICB plans to commission universities to deliver carefully controlled data analysis on projects for commissioning purposes only. Controlled access to the pseudonymised data, minimised to each project, will allow the Universities to provide some detailed analysis to support the ICB’s commissioning function.
Any funding provided to University of Manchester for the processing carried out under this Agreement is provided by the ICB and consequently there are no commercial aspects to this Agreement.
Unless otherwise agreed for research purposes, the University of Manchester do not carry out data controllership activities, the Universities are data processors listed under this Agreement for the purposes of Commissioning only and act under instruction by the Data Controller.
NHS Greater Manchester is supporting the University of Cambridge with the UK Government’s Independent Review into the prevalence of autism, ADHD and mental health conditions. The focus is on understanding administrative prevalence and real-world service pathways. Specifically, the analysis aims to describe how individuals access and move through NHS autism, ADHD and mental health services across the life course, and how these pathways have changed over time.
ONWARD SHARING:
Patient level data can only be shared outside the Data Controller / Processor in the following circumstances:
• For the purpose of Direct Care, where it may be re-identified and shared only with those health or care. professionals who have a legitimate relationship with the patient and a legitimate reason to access the data.
• Back to a provider to challenge data submissions. The data transferred to the provider is only that which relates directly to the data previously submitted by that particular provider and is limited to that being necessary to challenge the data submission.
• With members of the ICB’s Integrated Care System, under the terms of a sub-licensing agreement as detailed in this Data Sharing Agreement or is being provided for the purposes of research as set out below in the research section of this agreement, under the terms of a sub-licence agreement as detailed in this Data Sharing Agreement
Aggregated reports with small numbers suppressed (as set out within NHS England guidance applicable to each data set) may be shared externally as anonymous derived data and not subject to a sublicence.
SEGREGATION:
Where the Data Processor and/or the Data Controller hold both identifiable and pseudonymised data, the data will be held separately so data cannot be linked.
Where the Data Processor and/or the Data Controller hold identifiable data with opt outs applied and identifiable data with opt outs not applied, the data will be held separately so data cannot be linked.
INVOICE VALIDATION
Dataset:
Identifiable Invoice Validation Datasets
Data Minimisation:
• Activity for patients that are or have previously been registered to a GP practice within the responsibility of the ICB or the ICB's predecessor organisation(s).
and/or
• Activity for patients that are or have previously been resident within the ICB or the ICB's predecessor organisation(s).
and
• Data is limited to the period of time the patient was registered and/or resident and to the period of invoice validation being undertaken.
Processing:
1. The DSCRO pushes a one-way data flow of the data directly into the Controlled Environment for Finance (CEfF). Data is kept within the CEfF, and only used by staff properly trained and authorised for the activity.
2. The CEfF also receive backing data from the provider.
3. The following processing activities within the CEfF for invoice validation purposes:
a. Validating that the ICB are responsible for payment for the care of the individual by using Invoice Validation data and/or provider backing flow data.
b. Once the provider backing information is received, this will be checked against national NHS and local commissioning policies as well as being checked against system access and reports provided by NHS England to confirm the payments are:
i. In line with Payment by Results tariffs.
ii. are in relation to a patient registered with a ICB GP or resident within the ICB area.
iii. The health care provided should be paid by the ICB in line with ICB guidance.
4. The ICB are notified that the invoice has been validated and can be paid. Any discrepancies or non-validated invoices are investigated and resolved between the CEfF team and the provider. The ICB only receives notification to pay and management reporting detailing the total quantum of invoices received pending, processed etc.
Linkage will be limited to:
• Backing data as described in the NHS England “Who Pays” Guidance. The 'backing data', which are separate
from the invoice, contain evidence to justify the amount claimed.
Processors:
• Liaison Financial Services
• NHS Greater Manchester Integrated Care Board
RISK STRATIFICATION
Dataset:
Identifiable Risk Stratification Datasets
Data Minimisation:
• Activity for patients registered to GP practices within the responsibility of the ICB (Including historic activity where the patient may have been registered to another commissioner).
Processing:
1. Data quality management and standardisation of data is completed by the DSCRO and the data identifiable at the level of NHS number is transferred securely to the Data Controller / Processor, who securely hold the data.
2. Identifiable GP Data is securely sent from the GP system to the Data Controller / Processor.
3. Risk Stratification data is linked to GP data in the risk stratification tool by the Data Controller / Processor. Further linkage of data is not permitted.
4. As part of the risk stratification processing activity, GPs have access to the risk stratification tool within the data processor, which highlights patients with whom the GP has a legitimate relationship and have been classed as at risk. The only identifier available to GPs is the NHS numbers of their own patients. Any further identification of the patients will be completed by the GP on their own systems.
5. Once the Controller / Processor has completed the processing, the ICB can access the online system via a secure connection to access the data pseudonymised at patient level. The pseudonymised data is only permitted to be used to support Risk Stratification.
Linkage will be limited to:
• GP data
Processors:
• NHS Greater Manchester Integrated Care Board
COMMISSIONING
Dataset:
Pseudonymised Commissioning Datasets
Data Minimisation:
• Activity for patients registered to GP practices within the responsibility of the ICB (Including historic activity where the patient may have been registered to another commissioner); and historical activity for patients previously registered to GP practices within the responsibility of the ICB or its predecessor organisations.
and/or
• Activity for patients resident in Output Areas located in the geographic boundary of the ICB (Including historic activity where the patient may have been resident in a different Output Area); and historical activity for patients previously resident in Output Areas located in the geographic boundary of the ICB or its predecessor organisations.
and/or
• Patients under the care of a provider where ICB is the host/co-ordinating commissioner and/or has the primary responsibility for the provider services in the local health economy – this is only for commissioning and relates to both national and local flows.
and/or
• Activity identified by the provider and recorded as such within national systems (such as SUS+) as for the attention of ICB - this is only for commissioning and relates to both national and local flows.
and/or
• Patients under the care of a provider where ICB has joint responsibility for the provider services in the local health economy – this is only for Ambulance Trust data.
Processing:
1. Commissioning Datasets are pseudonymised by the DSCRO using a non disclosed SALT key.
2. Local patient identifiers are permitted to be included for the purpose of challenging data submissions with providers.
3. Pseudonymised Commissioning Datasets are securely transferred from the DSCRO to the Data Controller / Processor.
4. Data is processed for the purpose of commissioning as stipulated within this agreement.
5. Row level Pseudonymised Commissioning Data is also available in the National Federated Data Platform (FDP) ICBs are able to access national commissioning datasets that are currently received as extracts via steps 1 - 4 above within FDP to enable the testing of the platform for Population Health Management (PHM) across incubator sites for future use of the Strategic Commissioning Tool (SCT) within FDP, and the backing data for the Strategic Commissioning Tool to non-incubator ICBs for analytics on their FDP tenant. Palantir Technologies UK Limited is a data processor for the ICB for data the ICB holds in its local FDP tenant. This will eventually replace the need for data extracts to flow outside of NHSE tenant for commissioning purposes.
Relevant data that is already shared under this agreement can be shared with the ICB in its FDP tenant at row level without leaving the FDP secure boundary or aggregated on the national tenant and flowed in aggregate format to the ICB tenant. This data will then be processed on the ICB tenant and service the strategic commissioning product in Population Health Management (PHM) use case on FDP.
The ICB is permitted to link NHS England commissioning datasets with locally sourced datasets from within the ICB footprint area.
A list of the datasets approved for linkage is available on the NHS England website: https://digital.nhs.uk/services/data-services-for-commissioners/commissioning-datasets'
Additionally, the following datasets can be linked to:
• GP Data
• Adult Social Care Data
• Social Prescribing Data
• Continuing Healthcare Data
Linkage Method:
i. Identifiable data is submitted to the processor and lands in a segregated area
ii. The processor pseudonymises the data using a DSCRO provided key specific to the individual request and is then passed outside the segregated area.
iii. To enable linkage, the DSCRO sends an encrypted mapping table to the data processor. The ICB has a contract in place with the data processor to enable the use of a black box process.
iv. The black box process uses the encrypted mapping table to overwrite the organisation specific pseudonym with the DSCRO pseudonym to enable linkage to NHS England released products.
Where the data has already been pseudonymised by the provider using a separate DSCRO allocated key then a black box solution isn’t required.
Linkage may also be permitted within NHS England where NHS England acts as a data processor on behalf of a provider. There must be a valid and NHS England approved data processing contract in place.
Processors:
• NHS Greater Manchester Integrated Care Board (including hosting Greater Manchester Shared Services & Greater Manchester Health and Social Care Partnership)
• NHS Arden and Greater East Midlands Commissioning Support Unit
• Manchester University NHS Foundation Trust (Hosting Health Innovation Manchester Utilisation Management Team)
• NHS England (Hosting Greater Manchester Health and Social Care Partnership)
• University of Manchester
• The Christie NHS Foundation Trust [hosting the GM Cancer intelligence Service]
• Bury Metropolitan Borough Council
• Tameside Metropolitan Borough Council
• Carnall Farrar Limited
• Newton Consulting Limited
• Palantir Technologies UK Ltd
• Amazon Web Services
• University of Cambridge
GP and Social Care Data
i. Providers send a linkage ID and NHS Number mapping table to database 1 in NHS Greater Manchester Integrated Care Board who act as a data processor
ii. NHS Greater Manchester Integrated Care Board pseudonymise the NHS number using an open pseudo tool with a SALT key specific to this project
iii. A mapping table of linkage ID to open pseudo ID is then sent to database 2
iv. Providers also send pseudonymised patient level data with linkage ID to database 2 within NHS Greater Manchester Integrated Care Board.
v. Linkage ID is then mapped to the open pseudonym using the mapping table in point 3
vi. The linkage ID to open pseudo mapping table is then deleted
Linkage may also be permitted within NHS England where NHS England acts as a data processor on behalf of a provider. There must be a valid and NHS England approved data processing contract in place.
National Cancer Waiting Times:
In addition to the dissemination of Cancer Waiting Times Data via the DSCRO, the ICB is able to access reports held within the CWT system in NHS England directly. Access within the ICB is limited to those with a need to process the data for the purposes described in this agreement. A ICB user will be able to access the provider extracts from the portal for any provider where at least 1 patient for whom they are the registered ICB for that individuals GP practice appears in that setting. Although a ICB user may have access to pseudonymised patient information not related to that ICB, users should only process and analyse data for which they have a legitimate relationship (as described within Data Minimisation).
DIRECT CARE
The Re-identification process for direct care is as follows:
1. The ICB identifies a patient cohort to be re-identified for the purpose of direct care.
2. The ICB sends a re-id request to the DSCRO. This may be done through the ICB or CSU’s Business Intelligence (BI) Tool, or through a manual form.
3. The DSCRO assesses as to whether the request passes the specified re-identification process checks. Checks include if the requester is authorised to access identifiable data, if the number of patients in the cohort is appropriate, and that the request does not seem inappropriate or outside of expected parameters, including for example around timings and the requestor’s relationship with patients in the data. These checks are carried out either by DSCRO staff using pre-approved information (timing’s, requester’s identity etc) or via an automated system.
4. For automated systems, steps 1 - 3 wouldn’t apply in most cases as it would be the direct care professional who identifies the cohort and as long as they are an approved re-id user and have gone through security checks initially, they will be able to re-id without further checks.
5. If successful/approved, the DSCRO re-identifies the relevant data item(s) for the appropriate patients and returns the identifiable fields to Health or Care professional(s) with a legitimate relationship to the patient. The ICB does not see the identifiable record.
6. DSCROs retain an audit trail of all re-id requests.
RESEARCH
Processing Conditions:
All access to sub-licenced data for research is managed under Role-Based Access Controls (RBAC) within the ICB’s Secure Environment . Users can only access data authorised by their role and the task that requires completion.
Patient level data shared may only be used for the purposes and in the manner stipulated within this DSA and as stated under the research sub licensing agreement.
The data controller(s) must publish and maintain a publicly accessible UK GDPR compliant transparency notice that includes sharing data under sub-licensing for research.
Only the pseudonymised commissioning datasets may be used for the research purpose stipulated in the DSA and sub-licencing agreement.
Where applicable, the ICB is responsible for managing the implementation of a local data opt-out, and are accountable for ensuring that the national data opt-out is appropriately applied for any flows of non-NHSE data. The data provided by NHS England has been pseudonymised, and in line with policy is provided without the national opt-out (or any local data opt-out) being applied. The ICB must ensure that this is correctly stated within any related HRA CAG application, and any of their own documentation on opt-out implementation. If the ICB collects data locally, the ICB should follow the NDO policy and apply where applicable to that dataset
The data controller(s) by signing this DSA and sub licencing agreement for research must:
• Ensure that the appropriate ICB Board/Committee that reviews research strategies and associated research briefs, provides advice on the ICB’s sub-licencing process and individual requests for sub-licences to the ICBs Senior Information Risk Owner (SIRO) who formally approves the requests.
• Ensure representation from patients, clinical, and privacy are part of the research review Board / Committee and approval process
• Ensure that, if a sub license for research has a commercial aspect then there must be:
o Evidence of compliance with the DARS Data sharing standard 5e - Commercial Purpose.
o A process is in place that annually reviews any potential interests and conflict of interest for the organisation delivering the research project. (This including any benefits which may accrue noting that benefits may be delayed, indirect or non-financial. For example, if the organisation is commercial and holds a patent on a drug or treatment being studied or on a rival drug or treatment to that being studied.)
Auditing:
The data controller(s) must hold the sub-licensee contractually accountable to the Data Access Standards as published by NHS England. This includes the ability to audit compliance with the DSA and DSFC by the data controller and / or NHS England.
Minimisation must be applied for each research purpose so that only the necessary data is made available for that purpose.
Expected output
INVOICE VALIDATION
1. Accurate budget reports.
2. Enable a system of communication that will enable the ICB to challenge invoices and raise discrepancies and disputes.
3. Reports on the accuracy of invoices.
4. Validation of invoices for non-contracted events where a service delivered to a patient by a provider that does not have a written contract with the patient’s responsible commissioner, but does have a written contract with another NHS commissioner/s.
5. Budget control of the ICB.
RISK STRATIFICATION
1. As part of the risk stratification processing activity detailed above, GPs have access to the risk stratification tool which highlights patients for whom the GP is responsible and have been classed as at risk. The only identifier available to GPs is the NHS numbers of their own patients. Any further identification of the patients will be completed by the GP on their own systems.
2. GP Practices will be able to view the risk scores for individual patients with the ability to display the underlying SUS+ data for the individual patients when it is required for direct care purposes by someone who has a legitimate relationship with the patient.
The ICB will be provided with the pseudonymised outputs of the risk stratification tool for which they are able to:
1. Identify patient groups at risk of deterioration and providing effective care.
2. Set up capitated budgets – budgets based on care provided to the specific population.
3. Identify health determinants of risk of admission to hospital, or other adverse care outcomes.
4. Monitor vulnerable groups of patients including but not limited to frailty, COPD, Diabetes, elderly.
5. Health needs assessments – identifying numbers of patients with specific health conditions or combination of conditions.
6. Classify vulnerable groups based on: disease profiles; conditions currently being treated; current service use; pharmacy use and risk of future overall cost.
7. Production of Theographs – a visual timeline of a patients encounters with hospital providers.
8. Analyse based on specific diseases.
9. Aggregate reporting of number and percentage of population found to be at risk.
COMMISSIONING
1. Commissioner reporting on providers, finances, readmission analysis etc…
2. Production of aggregate reports for ICB Business Intelligence.
3. Production of project / programme level dashboards.
4. Monitoring of acute / community / mental health quality matrix.
5. Clinical coding reviews / audits.
6. Budget reporting down to individual GP Practice level.
7. GP Practice level dashboard reports.
8. Comparators of ICB performance with similar ICBs as set out by a specific range of care quality and performance measures detailed activity and cost reports.
9. Data Quality and Validation measures allowing data quality checks on the submitted data.
10. Contract Management and Modelling.
11. Patient Stratification dashboards to highlight cohorts of patients with similar conditions at risk.
12. Manage demand, by understanding the quantity of assessments required ICBs are able to improve the care service for patients by predicting the impact on certain care pathways and ensure the secondary care system has enough capacity to manage the demand.
13. Identify low priority procedures which could be directed to community-based alternatives and as such commission these services and deflect referrals for low priority procedures resulting in a reduction in hospital referrals.
14. Compare providers (trusts) mortality outcomes to the national baseline.
15. Identify medication prescribing trends and their effectiveness.
16. Linking prescribing habits to entry points into the health and social care system.
17. Identify, quantify and understand cohorts of patient’s high numbers of different medications (polypharmacy).
18. Feedback to NHS service providers on data quality at an aggregate and individual record level – only on data initially provided by the service providers.
DIRECT CARE
1. Reports and dashboards that highlight cohorts of patients that can be targeted for clinical intervention by direct health and care professionals.
2. Lists of at risk patients made available to direct health and care professionals that require direct care intervention.
3. Reports and dashboards to show the outcome of clinical intervention including patient outcomes and modelled transactional cost savings.
RESEARCH
The research outputs from project commissioned in line with the purposes set out in section 5a,may include the following:
1. Predictive modelling tools based on research project outcomes,
2. Research studies proving insight into disparities in outcomes based on demographic factors,
3. Development of tools or algorithms that assist the ICB in resource allocation decision making,
4. Research outcomes focused on specific interventions or treatment by the ICB,
5. Research output that provides the ICB with cost-effectiveness assessments of specific health needs of the ICS population which can include analyses of disease.
6. Prevalence, health inequalities and social determinants of health guiding the strategic priorities for commissioning
Expected measurable benefits
I INVOICE VALIDATION
The invoice validation process supports the ongoing delivery of patient care across the NHS and the ICB region by:
1. Ensuring that activity is fully financially validated.
2. Ensuring that service providers are accurately paid for the patient’s treatment.
3. Enabling services to be planned, commissioned, managed, and subjected to financial control.
4. Enabling commissioners to confirm that they are paying appropriately for treatment of patients for whom they are responsible.
5. Fulfilling commissioners duties to fiscal probity and scrutiny.
6. Ensuring full financial accountability for relevant organisations.
7. Ensuring robust commissioning and performance management.
8. Ensuring commissioning objectives do not compromise patient confidentiality.
9. Ensuring the avoidance of misappropriation of public funds.
RISK STRATIFICATION
Risk stratification promotes improved case management in primary care and may lead to the following benefits being realised:
1. Improved planning by better understanding patient flows through the healthcare system, thus allowing commissioners to design appropriate pathways to improve patient flow and allowing commissioners to identify priorities and identify plans to address these.
2. Reduce emergency readmissions, especially avoidable emergency admissions by improving quality of services. This is achieved through mapping of frequent users of emergency services thus allowing early intervention.
3. Improved access to services by identifying which services may be in demand but have poor access, and from this identify areas where improvement is required.
4. Supports the commissioner to meets its requirement to reduce premature mortality in line with the ICB Outcome Framework by allowing for more targeted intervention in primary care.
5. Better understanding of local population characteristics through analysis of their health and healthcare outcomes.
All of the above lead to improved patient experience and health outcomes through more effective commissioning of services
COMMISSIONING
1. Supporting Quality Innovation Productivity and Prevention (QIPP) to review demand management, integrated care and pathways.
2. Supporting Joint Strategic Needs Assessment (JSNA) for specific disease types.
3. Health economic modelling to analyse provider performance and patient pathways.
4. Commissioning cycle support for grouping and re-costing previous activity.
5. Enables monitoring of commissioned services to ensure they are performing as expected.
6. Improved planning by better understanding patient flows through the healthcare system, thus allowing commissioners to identify priorities and identify commissioning plans to address these (pathways would be designed by service providers within the ICS with input from appropriate stakeholders including patient and public representation).
7. Reduced emergency readmissions, especially avoidable emergency admissions leading to improved quality of services. This is achieved through mapping of frequent users of emergency services and early intervention of appropriate care.
8. Improved access to services by identifying which services may be in demand but have poor access, and from this identify areas where improvement is required.
9. Potentially reduced premature mortality by more targeted intervention in primary care, which supports the commissioner to meets its requirement to reduce premature mortality in line with the ICB Outcome Framework.
10. Better understanding of the health of and the variations in health outcomes within the population to help understand local population characteristics.
11. Better understanding of contract requirements, contract execution, and required services for management of existing contracts, and to assist with identification and planning of future contracts.
12. Insights into patient outcomes, and identification of the possible efficacy of outcomes-based contracting opportunities.
13. Providing greater understanding of the underlying causes and look to commission improved supportive networks, this would be ongoing work which would be continually assessed.
14. Insight to understand the numerous factors that play a role in the outcome for patients in all datasets. The linkage allows the reporting both prior to, during and after the activity, to provide greater assurance on predictive outcomes and delivery of best practice.
15. Provision of indicators of health problems, and patterns of risk within the commissioning region.
16. Support of benchmarking for evaluating progress in future years.
17. Assists commissioners to make better decisions to support patients and drive changes in health care.
18. Allows comparisons of providers performance to assist improvement in services – increase the quality.
19. Allow analysis of health care provision to be completed to support the needs of the health profile of the population within the ICB area based on the full analysis of multiple pseudonymised datasets.
20. To evaluate the impact of new services and innovations (e.g. if commissioners implement a new service or type of procedure with a provider, they can evaluate whether it improves outcomes for patients compared to the previous one).
DIRECT CARE
1. Enables clinical intervention to prevent worse outcomes, such as A&E attendance.
2. Allows the ICB to perform their statutory duty to protect patients.
3. Allows clinicians with direct care responsibilities to improve quality of care for patients identified. This may reduce the risk of unwanted emergency hospital admission, premature complications of disease and of premature death
RESEARCH
1. Improved outcomes for patients
2. Reducing the health inequalities that have been identified at a local level
3. Improved patient experience
4. Decisions which are informed and based upon the latest available evidence e.g. improved outcomes or providing value for money
5. Reduced waste and the risk of duplication
6. The spread and adoption of innovative ideas
7. The identification of evidence gaps which can be used to produce future research which is relevant to the needs of the commissioning system
8. Enabling and supporting horizon scanning for commissioner
Benefits reported so far
COMMISSIONING
Health data are used to collate and produce board reports on specific programmes and pathways of care, to monitor the quality of care delivered, assess delivery of targets, and monitor the impact of transformation schemes and improvement programmes based on agreed key performance indicators. These reports are utilised by programme transformation groups to take action where needed to support or improve services, and to drive decision making on development of new models of care.
INVOICE VALIDATION
Outputs from the processing of this data enables the ICB to validate invoices from providers and raise queries and formal disputes where appropriate (for example, around pricing or patient registration). This in turn supports both robust financial control and budgetary reporting at the ICB. Regular and ad hoc reporting of this data further enables the ICB to monitor provider performance against a number of key contractual metrics and targets (for instance, Elective Recovery performance) and support operational colleagues in making management decisions to enable improved provider and system-wide performance.
RISK STRATIFICATION
The ICB is using a medication-based risk stratification tool to identify patient who are likely to be put at risk of harm from their medication. The system is use for monitoring of the Medicines Optimisation Scheme. It is also used in relation to Quality Outcomes Framework (QOF)/Care Quality Commission (CQC) and specific therapeutic areas, for example, Diabetes.
RESEARCH
To be completed once used
Datasets on the current version
Legal basis for provision: Health and Social Care Act 2012 - s261(5)(d); Health and Social Care Act 2012 – s261(7); National Health Service Act 2006 - s251 - 'Control of patient information'.
| Dataset | Type of data | Sensitivity | Frequency | Confidential data |
|---|---|---|---|---|
| Commissioning Datasets | Anonymised - ICO Code Compliant | Sensitive | Frequent Adhoc Flow | Mixture of confidential data flow(s) with support under section 251 NHS Act 2006 and non-confidential data flow(s) |
| Invoice Validation Datasets | Identifiable | Sensitive | Frequent Adhoc Flow | Mixture of confidential data flow(s) with support under section 251 NHS Act 2006 and non-confidential data flow(s) |
| Risk Stratification Datasets | Identifiable | Sensitive | Frequent Adhoc Flow | Mixture of confidential data flow(s) with support under section 251 NHS Act 2006 and non-confidential data flow(s) |
Files released
Files released counts only files released externally by DARS. Access granted in NHS England's own systems, such as its Secure Data Environment, is not included.
This agreement permits sublicensing: the applicant may pass data on to others. Anything passed on is not recorded in this register.
No files recorded as released under this agreement.
Version history
The register lists each renewal of this agreement as a separate row. This site has 7 versions.
DARS-NIC-616054-M4C8K-v6.3 5 June 2026 to 4 June 2029
- Title
- DSfC - NHS Greater Manchester Integrated Care Board - Commissioning / Invoice Validation / Risk Stratification and Research
- Commercial
- No
- Sublicensing
- Yes
- Datasets
- 3
- Files released
- 0
Datasets: Commissioning Datasets; Invoice Validation Datasets; Risk Stratification Datasets
What changed from DARS-NIC-616054-M4C8K-v5.2
Text removed is struck through; text added is underlined. Unchanged paragraphs are summarised rather than repeated.
| Field | Was | Became |
|---|---|---|
| Start date | 2026-06-05 | |
| End date | 2029-06-04 |
Processing activities
[15 paragraphs unchanged]
AstraZeneca UK Limited supports the ICB with Health Economic analysis in relation to cancer care pathways across Greater Manchester. The initial focus (not limited to) will relate to the Lung Cancer pathway and health economic modelling to support and evidence the benefits of the introduction of a One Stop Lung Cancer Clinic at Wythenshawe Hospital.
[1 paragraph unchanged]
NHS Midlands and Lancashire Commissioning Support Unit supply IT infrastructure for Arden and GEM Commissioning Support Unit are therefore listed as data processors. They supply support to the system, but do not access data. Therefore, any access to the data held under this agreement would be considered a breach of the agreement. This includes granting of access to the database[s] containing the data.
[20 paragraphs unchanged]
NHS Greater Manchester is supporting the University of Cambridge with the UK Government’s Independent Review into the prevalence of autism, ADHD and mental health conditions. The focus is on understanding administrative prevalence and real-world service pathways. Specifically, the analysis aims to describe how individuals access and move through NHS autism, ADHD and mental health services across the life course, and how these pathways have changed over time.
[96 paragraphs unchanged]
• University of Cambridge
[34 paragraphs unchanged]
Benefits reported
No further benefits recorded on 11/09/2025
[8 paragraphs unchanged]
Unchanged: Objective for processing, Expected output, Expected measurable benefits.
DARS-NIC-616054-M4C8K-v5.2 18 November 2025 to 9 February 2028
- Title
- DSfC - NHS Greater Manchester Integrated Care Board - Commissioning / Invoice Validation / Risk Stratification and Research
- Commercial
- No
- Sublicensing
- Yes
- Datasets
- 3
- Files released
- 0
Datasets: Commissioning Datasets; Invoice Validation Datasets; Risk Stratification Datasets
What changed from DARS-NIC-616054-M4C8K-v4.2
Text removed is struck through; text added is underlined. Unchanged paragraphs are summarised rather than repeated.
| Field | Was | Became |
|---|---|---|
| Start date | 2025-11-18 |
Objective for processing
The Health and Social Care Act 2022
has
created 42 Integrated Care Boards (ICB). These are legal entities which have
[84 words unchanged]
set local priorities and develop an integrated health and social care strategy.
[11 paragraphs unchanged]
The pseudonymised data is required
to
for the following purposes:
[20 paragraphs unchanged]
The
This use is permitted where the
research relates to commissioning activities for the health and care benefit of the ICS
and allows the ICB to extend benefits to
(and
other ICS footprints under the appropriate governance
arrangements.
arrangements).
Each
integrated care board must,
ICB in law is required
in the exercise of its functions,
to
facilitate
or
otherwise promote
[2 paragraphs unchanged]
Evidence from research
The data controller
may only
be utilised by
use
the data
controller
for research
for one or more of the following purposes, which align with the advantages of evidence-based commissioning:
[5 paragraphs unchanged]
Research can only be undertaken by the data
controller(s),or a sub-licensee(s) who is permitted by the data
controller(s)
or their sub-licensee(s). A sub-licence may only be issued for research
to undertake research,
which must:
·
•
be for the benefit of health or social care within the ICS footprint area; and
·
•
assist health and social care commissioning objectives, and allow the ICB to extend benefits to other ICS footprints under Board review governance arrangements; and
• support one or more of the purposes listed
above
above; and
Where sub licencing occurs, the ICB is not the data controller as it does not determine the purposes and means for the data processing activities required.
• a sub-licence cannot be granted where the research only requires data supplied by NHS England. A sub-licence is needed where additional, non-NHS England supplied, data sets are required from the controller for the research to be undertaken
Processing activities
[6 paragraphs unchanged]
NHS England reminds all organisations party to this agreement of the need to comply with the Data Sharing Framework Contract requirements, including those regarding the use (and purposes of that use) by “Personnel” (as defined within the Data Sharing Framework Contract i.e.: employees, agents and contractors of the Data Recipient who may have access to that data).
The ICB must publish and maintain a publicly accessible UK GDPR compliant transparency notice that contains details of sharing data under sub-license.
[3 paragraphs unchanged]
Palantir Technologies UK Limited support the Local FDP instance for the ICB and so are therefore listed as a data processor. Palantir Technologies UK Limited support the system and so will have access to personal data for support purposes.
Amazon Web Services supply Cloud Services for Palantir Technologies UK Limited so are therefore listed as a data processor, the supply support to the system but do not access data. Therefore, any access to data held under this agreement would be considered a breach of the agreement. This includes granting of access to the database(s) containing the data.
[18 paragraphs unchanged]
Newton
Europe
Consulting
Limited is supporting the ICB with it's Urgent Care Transformation Programmes, as part of the support Newton
Europe
Consulting
Limited will use national and local commissioning datasets to build a suite
[33 words unchanged]
the hospital front door, acute inpatients & discharge, and intermediate care services.
[4 paragraphs unchanged]
Salesforce
UK Limited
and Amazon Web Services (AWS) provide cloud services to NHS Greater Manchester Integrated Care Board. Salesforce
UK Limited
provide NHS Greater Manchester Integrated Care Board with Tableau Cloud platform, the data on this cloud platform (Tableau dashboard visualisations) is backed up to AWS.
[6 paragraphs unchanged]
• Back to a provider to challenge data submissions. The data transferred
[5 words unchanged]
that which relates directly to the data previously submitted by that particular
provider.
provider and is limited to that being necessary to challenge the data submission.
• With members of the ICB’s Integrated Care
System
System,
under the terms of a sub-licensing agreement as detailed in this Data Sharing
Agreement.
Agreement or is being provided for the purposes of research as set out below in the research section of this agreement, under the terms of a sub-licence agreement as detailed in this Data Sharing Agreement
For data sharing under sub-licensing, the ICB must publish a release register detailing any sub-licences and onward sharing throughout the life of this agreement in the public domain, at a minimum, updated on a quarterly basis up to 3 months in arrears e.g. If a sub-licencing agreement is granted in October 2024, it is expected that this will be shown on a release register by April 2025.
Aggregated reports with small numbers suppressed (as set out within NHS England guidance applicable to each data set) may be shared externally as anonymous derived data and not subject to a sublicence.
Aggregated reports only with small number suppression can be shared externally as set out within NHS England guidance applicable to each data set.
[23 paragraphs unchanged]
• Backing data as described in the NHS England “Who Pays” Guidance. The 'backing data', which are separate
from the invoice, contain evidence to justify the amount claimed.
from the invoice, contain evidence to justify the amount claimed.
[18 paragraphs unchanged]
COMMISISONING Dataset:
COMMISSIONING
Dataset:
[16 paragraphs unchanged]
Linkage will be limited to:
5. Row level Pseudonymised Commissioning Data is also available in the National Federated Data Platform (FDP) ICBs are able to access national commissioning datasets that are currently received as extracts via steps 1 - 4 above within FDP to enable the testing of the platform for Population Health Management (PHM) across incubator sites for future use of the Strategic Commissioning Tool (SCT) within FDP, and the backing data for the Strategic Commissioning Tool to non-incubator ICBs for analytics on their FDP tenant. Palantir Technologies UK Limited is a data processor for the ICB for data the ICB holds in its local FDP tenant. This will eventually replace the need for data extracts to flow outside of NHSE tenant for commissioning purposes.
Relevant data that is already shared under this agreement can be shared with the ICB in its FDP tenant at row level without leaving the FDP secure boundary or aggregated on the national tenant and flowed in aggregate format to the ICB tenant. This data will then be processed on the ICB tenant and service the strategic commissioning product in Population Health Management (PHM) use case on FDP.
The ICB is permitted to link NHS England commissioning datasets with locally sourced datasets from within the ICB footprint area.
A list of the datasets approved for linkage is available on the NHS England website: https://digital.nhs.uk/services/data-services-for-commissioners/commissioning-datasets'
Additionally, the following datasets can be linked to:
[20 paragraphs unchanged]
• Carnall Farrar
Limited
• Newton
Europe
Consulting
Limited
• Palantir Technologies UK Ltd
• Amazon Web Services
[20 paragraphs unchanged]
All access to sub-licenced data
for research
is managed under Role-Based Access Controls (RBAC) within the ICB’s Secure
Data
Environment
(SDE).
.
Users can only access data authorised by their role and the task that requires completion.
Patient level data shared
is
may
only
permitted
be used
for
the
purposes and
in the
manner stipulated
in the data sharing agreement including
within this DSA and as stated
under the
research
sub licensing agreement.
The data controller(s) must publish and maintain a publicly accessible UK GDPR compliant transparency notice that includes sharing data under
sub-licensing.
sub-licensing for research.
The
Only the
pseudonymised commissioning datasets
can only
may
be used for the research purpose stipulated in the DSA and sub-licencing agreement.
Onward Sharing:
Where applicable, the ICB is responsible for managing the implementation of a local data opt-out, and are accountable for ensuring that the national data opt-out is appropriately applied for any flows of non-NHSE data. The data provided by NHS England has been pseudonymised, and in line with policy is provided without the national opt-out (or any local data opt-out) being applied. The ICB must ensure that this is correctly stated within any related HRA CAG application, and any of their own documentation on opt-out implementation. If the ICB collects data locally, the ICB should follow the NDO policy and apply where applicable to that dataset
The data controller(s) can only share patient level data in following circumstances:
The data controller(s) by signing this DSA and sub licencing agreement for research must:
• Under the terms of a sub-licensing agreement as detailed in this Data Sharing Agreement (DSA)
• It is only permitted to re-identify and share data with those health or care professionals who have a legitimate relationship with the patient and a legitimate reason to access the data, for the purpose of direct care.
• Back to a provider to challenge data submissions. The data transferred to the provider is only that which relates directly to the data previously submitted by that particular provider and is limited to that being necessary to challenge the data submission.
Aggregated reports only with small number suppression can be shared externally without a sub-licence, where the data is suppressed according to NHS England guidance applicable to each data set.
The data controller(s) by signing this DSA and sub licencing agreement must:
[2 paragraphs unchanged]
• Ensure that, if a sub license
for research
has a commercial aspect then there must be:
[4 paragraphs unchanged]
Minimisation must be applied for each research purpose so that only the necessary data is made available for that
purpose
purpose.
Expected output
[43 paragraphs unchanged]
The research outputs from project commissioned in line with the purposes set out in section
5a, may
5a,may
include the following:
•
1.
Predictive modelling tools based on research project outcomes,
•
2.
Research studies proving insight into disparities in outcomes based on demographic factors,
•
3.
Development of tools or algorithms that assist the ICB in resource allocation decision making,
•
4.
Research outcomes focused on specific interventions or treatment by the ICB,
•
5.
Research output that provides the ICB with cost-effectiveness assessments of specific health needs of the ICS population which can include analyses of
disease
disease.
• prevalence,
6. Prevalence,
health inequalities and social determinants of health guiding the strategic priorities for commissioning
Expected measurable benefits
I
INVOICE VALIDATION
[17 paragraphs unchanged]
All of the above lead to improved patient experience and health outcomes through more effective commissioning of
services.
services
[24 paragraphs unchanged]
3. Allows clinicians with direct care responsibilities to improve quality of care
[8 words unchanged]
of unwanted emergency hospital admission, premature complications of disease and of premature
death.
death
[8 paragraphs unchanged]
8. Enabling and supporting horizon scanning for
commissioners
commissioner
Benefits reported
No further benefits recorded on 11/09/2025 [8 paragraphs unchanged]
Objective for processing
The Health and Social Care Act 2022 created 42 Integrated Care Boards (ICB). These are legal entities which have replaced CCGs. The ICB has taken on the NHS commissioning functions of CCGs as well as some of NHS England’s commissioning functions. It is accountable for NHS spend and performance within the system. Within each ICB geographical area, there will also be an Integrated Care Partnership (ICP), a joint committee which brings together the ICB and their partner local authorities, and other locally determined representatives (for example from health, social care, public health; and potentially others, such as social care or housing providers) to set local priorities and develop an integrated health and social care strategy.
ICP constituent members (other than the ICB) do not carry out data controllership activities and do not make decisions on sub-licensing.
INVOICE VALIDATION
Invoice validation is part of a process by which providers of care or services get paid for the work they do.
Invoices are submitted to the Integrated Care Board (ICB) so the ICB is able to ensure that the patient is their responsibility and the activity claimed is correct. This is done by processing and analysing Invoice Validation Datasets, which are received into a secure Controlled Environment for Finance (CEfF). The identifiers included are in line with the CAG approval. The identifiers are only used to link and confirm the accuracy of backing-data sets (data from providers).
The ICB are advised by the appointed CEfF whether payment for invoices can be made or not.
RISK STRATIFICATION
Risk stratification is a tool for identifying and predicting which patients are at high risk (of health deterioration and using multiple services) or are likely to be at high risk and prioritising the management of their care in order to prevent worse outcomes.
In order to conduct, Risk Stratification Datasets, identifiable at the level of NHS number are linked with Primary Care data (from GPs) and an algorithm is applied to produce risk scores. Risk Stratification provides focus for future demands by enabling commissioners to prepare plans for both individual and groups of vulnerable patients. Commissioners can then prepare plans for cohorts of patients who may require high levels of care. Risk Stratification also enables General Practitioners (GPs) to better target intervention in Primary Care.
COMMISSIONING
To use pseudonymised Commissioning Datasets to provide intelligence to support the commissioning of health services. The data (containing both clinical and financial information) is analysed so that health care provision can be planned to support the needs of the population within the ICB area.
The ICBs commission services from a range of providers covering a wide array of services. Each of the data flow categories requested supports the commissioned activity of one or more providers.
The pseudonymised data is required for the following purposes:
Population health management
Data Quality and Validation – allowing data quality checks on the submitted data
Thoroughly investigating the needs of the population, to inform the commissioning or appropriate services for that population’s health needs
Understanding cohorts of residents who are at risk of becoming users of some of the more expensive services, to better understand and manage those needs
Monitoring population health and care interactions to understand where people may slip through the net, or where the provision of care may be being duplicated
Modelling activity across all data sets to understand how services interact with each other, and to understand how changes in one service may affect flows through another
Service redesign
Health Needs Assessment – identification of disease prevalence within the local population
Patient stratification and predictive modelling - to highlight cohorts of patients at risk of requiring hospital admission and other avoidable factors such as risk of falls, computed using algorithms executed against linked de-identified data, and identification of future service delivery models
Demand Management – ensuring enough capacity to manage the demand by predicting the impact on certain care pathways.
Support measuring the health and care needs of the total local population.
Provide intelligence about the safety and effectiveness of medicines.
Allow analysis of patient pathways across healthcare and social care.
DIRECT CARE
In the development of cohorts of pseudonymised patients considered to be at risk, the data controllers may need the facility to provide identifiable results back to direct health or care professionals for the purpose of direct care. Additionally clinicians, made aware of a number of cases that they believe would need intervention may request re-identification for that direct care purpose. These instances of re-identification will generally be carried out as programmes of work or, separately, on an individual/small group basis as a result of coincidental findings. The ICB does not have a statutory function to provide direct care and as such, does not see the identifiable data.
NHS England provides a re-identification service for this process. All re-id requests will be processed and authorised by NHS England on a case by case basis, including requests under a sub-licence. National data opt outs are not applied in these cases as they are for the purposes of direct care which follows the legal basis of implied consent. It is anticipated that this re-id ability in the future will allow risk stratification to be conducted under a single flow of pseudonymised data.
The following is a typical example of an instance where an ICB might want to use the re-identification process:
A&E High Attendance usage
The ICB can filter data to show for example the number of A&E attendances in a given period for each patient. The ICB can then flag to the relevant GP of the patient any patients that require intervention. An outcome of this is earlier intervention in the patient(s) care thus potentially reducing future costs and minimising future risk.
RESEARCH
This use is permitted where the research relates to commissioning activities for the health and care benefit of the ICS (and other ICS footprints under the appropriate governance arrangements).
Each ICB in law is required in the exercise of its functions, to facilitate otherwise promote
(a) research on matters relevant to the health service, and
(b) the use in the health service of evidence obtained from research.
The data controller may only use the data for research for one or more of the following purposes, which align with the advantages of evidence-based commissioning:
• lead to innovation in service design and delivery,
• enhance the quality of health and care provision,
• reduce clinical variation between locations and providers,
• improve equity of access to services,
• improve patient and population outcomes.
Research can only be undertaken by the data controller(s),or a sub-licensee(s) who is permitted by the data controller(s) to undertake research, which must:
• be for the benefit of health or social care within the ICS footprint area; and
• assist health and social care commissioning objectives, and allow the ICB to extend benefits to other ICS footprints under Board review governance arrangements; and
• support one or more of the purposes listed above; and
• a sub-licence cannot be granted where the research only requires data supplied by NHS England. A sub-licence is needed where additional, non-NHS England supplied, data sets are required from the controller for the research to be undertaken
Expected output
INVOICE VALIDATION
1. Accurate budget reports.
2. Enable a system of communication that will enable the ICB to challenge invoices and raise discrepancies and disputes.
3. Reports on the accuracy of invoices.
4. Validation of invoices for non-contracted events where a service delivered to a patient by a provider that does not have a written contract with the patient’s responsible commissioner, but does have a written contract with another NHS commissioner/s.
5. Budget control of the ICB.
RISK STRATIFICATION
1. As part of the risk stratification processing activity detailed above, GPs have access to the risk stratification tool which highlights patients for whom the GP is responsible and have been classed as at risk. The only identifier available to GPs is the NHS numbers of their own patients. Any further identification of the patients will be completed by the GP on their own systems.
2. GP Practices will be able to view the risk scores for individual patients with the ability to display the underlying SUS+ data for the individual patients when it is required for direct care purposes by someone who has a legitimate relationship with the patient.
The ICB will be provided with the pseudonymised outputs of the risk stratification tool for which they are able to:
1. Identify patient groups at risk of deterioration and providing effective care.
2. Set up capitated budgets – budgets based on care provided to the specific population.
3. Identify health determinants of risk of admission to hospital, or other adverse care outcomes.
4. Monitor vulnerable groups of patients including but not limited to frailty, COPD, Diabetes, elderly.
5. Health needs assessments – identifying numbers of patients with specific health conditions or combination of conditions.
6. Classify vulnerable groups based on: disease profiles; conditions currently being treated; current service use; pharmacy use and risk of future overall cost.
7. Production of Theographs – a visual timeline of a patients encounters with hospital providers.
8. Analyse based on specific diseases.
9. Aggregate reporting of number and percentage of population found to be at risk.
COMMISSIONING
1. Commissioner reporting on providers, finances, readmission analysis etc…
2. Production of aggregate reports for ICB Business Intelligence.
3. Production of project / programme level dashboards.
4. Monitoring of acute / community / mental health quality matrix.
5. Clinical coding reviews / audits.
6. Budget reporting down to individual GP Practice level.
7. GP Practice level dashboard reports.
8. Comparators of ICB performance with similar ICBs as set out by a specific range of care quality and performance measures detailed activity and cost reports.
9. Data Quality and Validation measures allowing data quality checks on the submitted data.
10. Contract Management and Modelling.
11. Patient Stratification dashboards to highlight cohorts of patients with similar conditions at risk.
12. Manage demand, by understanding the quantity of assessments required ICBs are able to improve the care service for patients by predicting the impact on certain care pathways and ensure the secondary care system has enough capacity to manage the demand.
13. Identify low priority procedures which could be directed to community-based alternatives and as such commission these services and deflect referrals for low priority procedures resulting in a reduction in hospital referrals.
14. Compare providers (trusts) mortality outcomes to the national baseline.
15. Identify medication prescribing trends and their effectiveness.
16. Linking prescribing habits to entry points into the health and social care system.
17. Identify, quantify and understand cohorts of patient’s high numbers of different medications (polypharmacy).
18. Feedback to NHS service providers on data quality at an aggregate and individual record level – only on data initially provided by the service providers.
DIRECT CARE
1. Reports and dashboards that highlight cohorts of patients that can be targeted for clinical intervention by direct health and care professionals.
2. Lists of at risk patients made available to direct health and care professionals that require direct care intervention.
3. Reports and dashboards to show the outcome of clinical intervention including patient outcomes and modelled transactional cost savings.
RESEARCH
The research outputs from project commissioned in line with the purposes set out in section 5a,may include the following:
1. Predictive modelling tools based on research project outcomes,
2. Research studies proving insight into disparities in outcomes based on demographic factors,
3. Development of tools or algorithms that assist the ICB in resource allocation decision making,
4. Research outcomes focused on specific interventions or treatment by the ICB,
5. Research output that provides the ICB with cost-effectiveness assessments of specific health needs of the ICS population which can include analyses of disease.
6. Prevalence, health inequalities and social determinants of health guiding the strategic priorities for commissioning
Benefits reported
No further benefits recorded on 11/09/2025
COMMISSIONING
Health data are used to collate and produce board reports on specific programmes and pathways of care, to monitor the quality of care delivered, assess delivery of targets, and monitor the impact of transformation schemes and improvement programmes based on agreed key performance indicators. These reports are utilised by programme transformation groups to take action where needed to support or improve services, and to drive decision making on development of new models of care.
INVOICE VALIDATION
Outputs from the processing of this data enables the ICB to validate invoices from providers and raise queries and formal disputes where appropriate (for example, around pricing or patient registration). This in turn supports both robust financial control and budgetary reporting at the ICB. Regular and ad hoc reporting of this data further enables the ICB to monitor provider performance against a number of key contractual metrics and targets (for instance, Elective Recovery performance) and support operational colleagues in making management decisions to enable improved provider and system-wide performance.
RISK STRATIFICATION
The ICB is using a medication-based risk stratification tool to identify patient who are likely to be put at risk of harm from their medication. The system is use for monitoring of the Medicines Optimisation Scheme. It is also used in relation to Quality Outcomes Framework (QOF)/Care Quality Commission (CQC) and specific therapeutic areas, for example, Diabetes.
RESEARCH
To be completed once used
DARS-NIC-616054-M4C8K-v4.2 10 April 2025 to 9 February 2028
- Title
- DSfC - NHS Greater Manchester Integrated Care Board - Commissioning / Invoice Validation / Risk Stratification and Research
- Commercial
- No
- Sublicensing
- Yes
- Datasets
- 3
- Files released
- 0
Datasets: Commissioning Datasets; Invoice Validation Datasets; Risk Stratification Datasets
What changed from DARS-NIC-616054-M4C8K-v3.2
Text removed is struck through; text added is underlined. Unchanged paragraphs are summarised rather than repeated.
| Field | Was | Became |
|---|---|---|
| Start date | 2025-04-10 | |
| End date | 2028-02-09 |
Processing activities
[32 paragraphs unchanged] NHS Greater Manchester ICB is working closely with its provider colleagues and clinical networks to ensure goal congruence and effective integration for collaborative programmes. As such the ICB Hospital Care Intelligence Team has a hybrid diagnostics sub team that includes individuals working for the ICB directly and also staff working for the Diagnostics Network (hosted by the Northern Care Alliance -NCA). To enable this, all members of the Hospital Care Intelligence Team, including those employed by partner NHS GM Trusts require access to the NHS GM data infrastructure and associated applications and services to facilitate integrated working within the team [1 paragraph unchanged] Salesforce and Amazon Web Services (AWS) provide cloud services to NHS Greater Manchester Integrated Care Board. Salesforce provide NHS Greater Manchester Integrated Care Board with Tableau Cloud platform, the data on this cloud platform (Tableau dashboard visualisations) is backed up to AWS. [131 paragraphs unchanged]
Unchanged: Objective for processing, Expected output, Expected measurable benefits, Benefits reported.
Objective for processing
The Health and Social Care Act 2022 has created 42 Integrated Care Boards (ICB). These are legal entities which have replaced CCGs. The ICB has taken on the NHS commissioning functions of CCGs as well as some of NHS England’s commissioning functions. It is accountable for NHS spend and performance within the system. Within each ICB geographical area, there will also be an Integrated Care Partnership (ICP), a joint committee which brings together the ICB and their partner local authorities, and other locally determined representatives (for example from health, social care, public health; and potentially others, such as social care or housing providers) to set local priorities and develop an integrated health and social care strategy.
ICP constituent members (other than the ICB) do not carry out data controllership activities and do not make decisions on sub-licensing.
INVOICE VALIDATION
Invoice validation is part of a process by which providers of care or services get paid for the work they do.
Invoices are submitted to the Integrated Care Board (ICB) so the ICB is able to ensure that the patient is their responsibility and the activity claimed is correct. This is done by processing and analysing Invoice Validation Datasets, which are received into a secure Controlled Environment for Finance (CEfF). The identifiers included are in line with the CAG approval. The identifiers are only used to link and confirm the accuracy of backing-data sets (data from providers).
The ICB are advised by the appointed CEfF whether payment for invoices can be made or not.
RISK STRATIFICATION
Risk stratification is a tool for identifying and predicting which patients are at high risk (of health deterioration and using multiple services) or are likely to be at high risk and prioritising the management of their care in order to prevent worse outcomes.
In order to conduct, Risk Stratification Datasets, identifiable at the level of NHS number are linked with Primary Care data (from GPs) and an algorithm is applied to produce risk scores. Risk Stratification provides focus for future demands by enabling commissioners to prepare plans for both individual and groups of vulnerable patients. Commissioners can then prepare plans for cohorts of patients who may require high levels of care. Risk Stratification also enables General Practitioners (GPs) to better target intervention in Primary Care.
COMMISSIONING
To use pseudonymised Commissioning Datasets to provide intelligence to support the commissioning of health services. The data (containing both clinical and financial information) is analysed so that health care provision can be planned to support the needs of the population within the ICB area.
The ICBs commission services from a range of providers covering a wide array of services. Each of the data flow categories requested supports the commissioned activity of one or more providers.
The pseudonymised data is required to for the following purposes:
Population health management
Data Quality and Validation – allowing data quality checks on the submitted data
Thoroughly investigating the needs of the population, to inform the commissioning or appropriate services for that population’s health needs
Understanding cohorts of residents who are at risk of becoming users of some of the more expensive services, to better understand and manage those needs
Monitoring population health and care interactions to understand where people may slip through the net, or where the provision of care may be being duplicated
Modelling activity across all data sets to understand how services interact with each other, and to understand how changes in one service may affect flows through another
Service redesign
Health Needs Assessment – identification of disease prevalence within the local population
Patient stratification and predictive modelling - to highlight cohorts of patients at risk of requiring hospital admission and other avoidable factors such as risk of falls, computed using algorithms executed against linked de-identified data, and identification of future service delivery models
Demand Management – ensuring enough capacity to manage the demand by predicting the impact on certain care pathways.
Support measuring the health and care needs of the total local population.
Provide intelligence about the safety and effectiveness of medicines.
Allow analysis of patient pathways across healthcare and social care.
DIRECT CARE
In the development of cohorts of pseudonymised patients considered to be at risk, the data controllers may need the facility to provide identifiable results back to direct health or care professionals for the purpose of direct care. Additionally clinicians, made aware of a number of cases that they believe would need intervention may request re-identification for that direct care purpose. These instances of re-identification will generally be carried out as programmes of work or, separately, on an individual/small group basis as a result of coincidental findings. The ICB does not have a statutory function to provide direct care and as such, does not see the identifiable data.
NHS England provides a re-identification service for this process. All re-id requests will be processed and authorised by NHS England on a case by case basis, including requests under a sub-licence. National data opt outs are not applied in these cases as they are for the purposes of direct care which follows the legal basis of implied consent. It is anticipated that this re-id ability in the future will allow risk stratification to be conducted under a single flow of pseudonymised data.
The following is a typical example of an instance where an ICB might want to use the re-identification process:
A&E High Attendance usage
The ICB can filter data to show for example the number of A&E attendances in a given period for each patient. The ICB can then flag to the relevant GP of the patient any patients that require intervention. An outcome of this is earlier intervention in the patient(s) care thus potentially reducing future costs and minimising future risk.
RESEARCH
The research relates to commissioning activities for the health and care benefit of the ICS and allows the ICB to extend benefits to other ICS footprints under the appropriate governance arrangements.
Each integrated care board must, in the exercise of its functions, facilitate or otherwise promote
(a) research on matters relevant to the health service, and
(b) the use in the health service of evidence obtained from research.
Evidence from research may only be utilised by the data controller for one or more of the following purposes, which align with the advantages of evidence-based commissioning:
• lead to innovation in service design and delivery,
• enhance the quality of health and care provision,
• reduce clinical variation between locations and providers,
• improve equity of access to services,
• improve patient and population outcomes.
Research can only be undertaken by the data controller(s) or their sub-licensee(s). A sub-licence may only be issued for research which must:
· be for the benefit of health or social care within the ICS footprint area; and
· assist health and social care commissioning objectives, and allow the ICB to extend benefits to other ICS footprints under Board review governance arrangements; and
• support one or more of the purposes listed above
Where sub licencing occurs, the ICB is not the data controller as it does not determine the purposes and means for the data processing activities required.
Expected output
INVOICE VALIDATION
1. Accurate budget reports.
2. Enable a system of communication that will enable the ICB to challenge invoices and raise discrepancies and disputes.
3. Reports on the accuracy of invoices.
4. Validation of invoices for non-contracted events where a service delivered to a patient by a provider that does not have a written contract with the patient’s responsible commissioner, but does have a written contract with another NHS commissioner/s.
5. Budget control of the ICB.
RISK STRATIFICATION
1. As part of the risk stratification processing activity detailed above, GPs have access to the risk stratification tool which highlights patients for whom the GP is responsible and have been classed as at risk. The only identifier available to GPs is the NHS numbers of their own patients. Any further identification of the patients will be completed by the GP on their own systems.
2. GP Practices will be able to view the risk scores for individual patients with the ability to display the underlying SUS+ data for the individual patients when it is required for direct care purposes by someone who has a legitimate relationship with the patient.
The ICB will be provided with the pseudonymised outputs of the risk stratification tool for which they are able to:
1. Identify patient groups at risk of deterioration and providing effective care.
2. Set up capitated budgets – budgets based on care provided to the specific population.
3. Identify health determinants of risk of admission to hospital, or other adverse care outcomes.
4. Monitor vulnerable groups of patients including but not limited to frailty, COPD, Diabetes, elderly.
5. Health needs assessments – identifying numbers of patients with specific health conditions or combination of conditions.
6. Classify vulnerable groups based on: disease profiles; conditions currently being treated; current service use; pharmacy use and risk of future overall cost.
7. Production of Theographs – a visual timeline of a patients encounters with hospital providers.
8. Analyse based on specific diseases.
9. Aggregate reporting of number and percentage of population found to be at risk.
COMMISSIONING
1. Commissioner reporting on providers, finances, readmission analysis etc…
2. Production of aggregate reports for ICB Business Intelligence.
3. Production of project / programme level dashboards.
4. Monitoring of acute / community / mental health quality matrix.
5. Clinical coding reviews / audits.
6. Budget reporting down to individual GP Practice level.
7. GP Practice level dashboard reports.
8. Comparators of ICB performance with similar ICBs as set out by a specific range of care quality and performance measures detailed activity and cost reports.
9. Data Quality and Validation measures allowing data quality checks on the submitted data.
10. Contract Management and Modelling.
11. Patient Stratification dashboards to highlight cohorts of patients with similar conditions at risk.
12. Manage demand, by understanding the quantity of assessments required ICBs are able to improve the care service for patients by predicting the impact on certain care pathways and ensure the secondary care system has enough capacity to manage the demand.
13. Identify low priority procedures which could be directed to community-based alternatives and as such commission these services and deflect referrals for low priority procedures resulting in a reduction in hospital referrals.
14. Compare providers (trusts) mortality outcomes to the national baseline.
15. Identify medication prescribing trends and their effectiveness.
16. Linking prescribing habits to entry points into the health and social care system.
17. Identify, quantify and understand cohorts of patient’s high numbers of different medications (polypharmacy).
18. Feedback to NHS service providers on data quality at an aggregate and individual record level – only on data initially provided by the service providers.
DIRECT CARE
1. Reports and dashboards that highlight cohorts of patients that can be targeted for clinical intervention by direct health and care professionals.
2. Lists of at risk patients made available to direct health and care professionals that require direct care intervention.
3. Reports and dashboards to show the outcome of clinical intervention including patient outcomes and modelled transactional cost savings.
RESEARCH
The research outputs from project commissioned in line with the purposes set out in section 5a, may include the following:
• Predictive modelling tools based on research project outcomes,
• Research studies proving insight into disparities in outcomes based on demographic factors,
• Development of tools or algorithms that assist the ICB in resource allocation decision making,
• Research outcomes focused on specific interventions or treatment by the ICB,
• Research output that provides the ICB with cost-effectiveness assessments of specific health needs of the ICS population which can include analyses of disease
• prevalence, health inequalities and social determinants of health guiding the strategic priorities for commissioning
Benefits reported
COMMISSIONING
Health data are used to collate and produce board reports on specific programmes and pathways of care, to monitor the quality of care delivered, assess delivery of targets, and monitor the impact of transformation schemes and improvement programmes based on agreed key performance indicators. These reports are utilised by programme transformation groups to take action where needed to support or improve services, and to drive decision making on development of new models of care.
INVOICE VALIDATION
Outputs from the processing of this data enables the ICB to validate invoices from providers and raise queries and formal disputes where appropriate (for example, around pricing or patient registration). This in turn supports both robust financial control and budgetary reporting at the ICB. Regular and ad hoc reporting of this data further enables the ICB to monitor provider performance against a number of key contractual metrics and targets (for instance, Elective Recovery performance) and support operational colleagues in making management decisions to enable improved provider and system-wide performance.
RISK STRATIFICATION
The ICB is using a medication-based risk stratification tool to identify patient who are likely to be put at risk of harm from their medication. The system is use for monitoring of the Medicines Optimisation Scheme. It is also used in relation to Quality Outcomes Framework (QOF)/Care Quality Commission (CQC) and specific therapeutic areas, for example, Diabetes.
RESEARCH
To be completed once used
DARS-NIC-616054-M4C8K-v3.2 6 December 2024 to 5 December 2025
- Title
- DSfC - NHS Greater Manchester Integrated Care Board - Commissioning / Invoice Validation / Risk Stratification and Research
- Commercial
- No
- Sublicensing
- Yes
- Datasets
- 3
- Files released
- 0
Datasets: Commissioning Datasets; Invoice Validation Datasets; Risk Stratification Datasets
What changed from DARS-NIC-616054-M4C8K-v2.2
Text removed is struck through; text added is underlined. Unchanged paragraphs are summarised rather than repeated.
| Field | Was | Became |
|---|---|---|
| Start date | 2024-12-06 | |
| End date | 2025-12-05 |
Processing activities
[29 paragraphs unchanged] Newton Europe Limited is supporting the ICB with it's Urgent Care Transformation Programmes, as part of the support Newton Europe Limited will use national and local commissioning datasets to build a suite of System Visibility dashboards to support strategic and operational decision making by commissioners and Service Leads. In addition, they will be working closely with operational leads to support process redesign and change across the hospital front door, acute inpatients & discharge, and intermediate care services. [94 paragraphs unchanged] • Newton Europe Limited [39 paragraphs unchanged]
Unchanged: Objective for processing, Expected output, Expected measurable benefits, Benefits reported.
Objective for processing
The Health and Social Care Act 2022 has created 42 Integrated Care Boards (ICB). These are legal entities which have replaced CCGs. The ICB has taken on the NHS commissioning functions of CCGs as well as some of NHS England’s commissioning functions. It is accountable for NHS spend and performance within the system. Within each ICB geographical area, there will also be an Integrated Care Partnership (ICP), a joint committee which brings together the ICB and their partner local authorities, and other locally determined representatives (for example from health, social care, public health; and potentially others, such as social care or housing providers) to set local priorities and develop an integrated health and social care strategy.
ICP constituent members (other than the ICB) do not carry out data controllership activities and do not make decisions on sub-licensing.
INVOICE VALIDATION
Invoice validation is part of a process by which providers of care or services get paid for the work they do.
Invoices are submitted to the Integrated Care Board (ICB) so the ICB is able to ensure that the patient is their responsibility and the activity claimed is correct. This is done by processing and analysing Invoice Validation Datasets, which are received into a secure Controlled Environment for Finance (CEfF). The identifiers included are in line with the CAG approval. The identifiers are only used to link and confirm the accuracy of backing-data sets (data from providers).
The ICB are advised by the appointed CEfF whether payment for invoices can be made or not.
RISK STRATIFICATION
Risk stratification is a tool for identifying and predicting which patients are at high risk (of health deterioration and using multiple services) or are likely to be at high risk and prioritising the management of their care in order to prevent worse outcomes.
In order to conduct, Risk Stratification Datasets, identifiable at the level of NHS number are linked with Primary Care data (from GPs) and an algorithm is applied to produce risk scores. Risk Stratification provides focus for future demands by enabling commissioners to prepare plans for both individual and groups of vulnerable patients. Commissioners can then prepare plans for cohorts of patients who may require high levels of care. Risk Stratification also enables General Practitioners (GPs) to better target intervention in Primary Care.
COMMISSIONING
To use pseudonymised Commissioning Datasets to provide intelligence to support the commissioning of health services. The data (containing both clinical and financial information) is analysed so that health care provision can be planned to support the needs of the population within the ICB area.
The ICBs commission services from a range of providers covering a wide array of services. Each of the data flow categories requested supports the commissioned activity of one or more providers.
The pseudonymised data is required to for the following purposes:
Population health management
Data Quality and Validation – allowing data quality checks on the submitted data
Thoroughly investigating the needs of the population, to inform the commissioning or appropriate services for that population’s health needs
Understanding cohorts of residents who are at risk of becoming users of some of the more expensive services, to better understand and manage those needs
Monitoring population health and care interactions to understand where people may slip through the net, or where the provision of care may be being duplicated
Modelling activity across all data sets to understand how services interact with each other, and to understand how changes in one service may affect flows through another
Service redesign
Health Needs Assessment – identification of disease prevalence within the local population
Patient stratification and predictive modelling - to highlight cohorts of patients at risk of requiring hospital admission and other avoidable factors such as risk of falls, computed using algorithms executed against linked de-identified data, and identification of future service delivery models
Demand Management – ensuring enough capacity to manage the demand by predicting the impact on certain care pathways.
Support measuring the health and care needs of the total local population.
Provide intelligence about the safety and effectiveness of medicines.
Allow analysis of patient pathways across healthcare and social care.
DIRECT CARE
In the development of cohorts of pseudonymised patients considered to be at risk, the data controllers may need the facility to provide identifiable results back to direct health or care professionals for the purpose of direct care. Additionally clinicians, made aware of a number of cases that they believe would need intervention may request re-identification for that direct care purpose. These instances of re-identification will generally be carried out as programmes of work or, separately, on an individual/small group basis as a result of coincidental findings. The ICB does not have a statutory function to provide direct care and as such, does not see the identifiable data.
NHS England provides a re-identification service for this process. All re-id requests will be processed and authorised by NHS England on a case by case basis, including requests under a sub-licence. National data opt outs are not applied in these cases as they are for the purposes of direct care which follows the legal basis of implied consent. It is anticipated that this re-id ability in the future will allow risk stratification to be conducted under a single flow of pseudonymised data.
The following is a typical example of an instance where an ICB might want to use the re-identification process:
A&E High Attendance usage
The ICB can filter data to show for example the number of A&E attendances in a given period for each patient. The ICB can then flag to the relevant GP of the patient any patients that require intervention. An outcome of this is earlier intervention in the patient(s) care thus potentially reducing future costs and minimising future risk.
RESEARCH
The research relates to commissioning activities for the health and care benefit of the ICS and allows the ICB to extend benefits to other ICS footprints under the appropriate governance arrangements.
Each integrated care board must, in the exercise of its functions, facilitate or otherwise promote
(a) research on matters relevant to the health service, and
(b) the use in the health service of evidence obtained from research.
Evidence from research may only be utilised by the data controller for one or more of the following purposes, which align with the advantages of evidence-based commissioning:
• lead to innovation in service design and delivery,
• enhance the quality of health and care provision,
• reduce clinical variation between locations and providers,
• improve equity of access to services,
• improve patient and population outcomes.
Research can only be undertaken by the data controller(s) or their sub-licensee(s). A sub-licence may only be issued for research which must:
· be for the benefit of health or social care within the ICS footprint area; and
· assist health and social care commissioning objectives, and allow the ICB to extend benefits to other ICS footprints under Board review governance arrangements; and
• support one or more of the purposes listed above
Where sub licencing occurs, the ICB is not the data controller as it does not determine the purposes and means for the data processing activities required.
Expected output
INVOICE VALIDATION
1. Accurate budget reports.
2. Enable a system of communication that will enable the ICB to challenge invoices and raise discrepancies and disputes.
3. Reports on the accuracy of invoices.
4. Validation of invoices for non-contracted events where a service delivered to a patient by a provider that does not have a written contract with the patient’s responsible commissioner, but does have a written contract with another NHS commissioner/s.
5. Budget control of the ICB.
RISK STRATIFICATION
1. As part of the risk stratification processing activity detailed above, GPs have access to the risk stratification tool which highlights patients for whom the GP is responsible and have been classed as at risk. The only identifier available to GPs is the NHS numbers of their own patients. Any further identification of the patients will be completed by the GP on their own systems.
2. GP Practices will be able to view the risk scores for individual patients with the ability to display the underlying SUS+ data for the individual patients when it is required for direct care purposes by someone who has a legitimate relationship with the patient.
The ICB will be provided with the pseudonymised outputs of the risk stratification tool for which they are able to:
1. Identify patient groups at risk of deterioration and providing effective care.
2. Set up capitated budgets – budgets based on care provided to the specific population.
3. Identify health determinants of risk of admission to hospital, or other adverse care outcomes.
4. Monitor vulnerable groups of patients including but not limited to frailty, COPD, Diabetes, elderly.
5. Health needs assessments – identifying numbers of patients with specific health conditions or combination of conditions.
6. Classify vulnerable groups based on: disease profiles; conditions currently being treated; current service use; pharmacy use and risk of future overall cost.
7. Production of Theographs – a visual timeline of a patients encounters with hospital providers.
8. Analyse based on specific diseases.
9. Aggregate reporting of number and percentage of population found to be at risk.
COMMISSIONING
1. Commissioner reporting on providers, finances, readmission analysis etc…
2. Production of aggregate reports for ICB Business Intelligence.
3. Production of project / programme level dashboards.
4. Monitoring of acute / community / mental health quality matrix.
5. Clinical coding reviews / audits.
6. Budget reporting down to individual GP Practice level.
7. GP Practice level dashboard reports.
8. Comparators of ICB performance with similar ICBs as set out by a specific range of care quality and performance measures detailed activity and cost reports.
9. Data Quality and Validation measures allowing data quality checks on the submitted data.
10. Contract Management and Modelling.
11. Patient Stratification dashboards to highlight cohorts of patients with similar conditions at risk.
12. Manage demand, by understanding the quantity of assessments required ICBs are able to improve the care service for patients by predicting the impact on certain care pathways and ensure the secondary care system has enough capacity to manage the demand.
13. Identify low priority procedures which could be directed to community-based alternatives and as such commission these services and deflect referrals for low priority procedures resulting in a reduction in hospital referrals.
14. Compare providers (trusts) mortality outcomes to the national baseline.
15. Identify medication prescribing trends and their effectiveness.
16. Linking prescribing habits to entry points into the health and social care system.
17. Identify, quantify and understand cohorts of patient’s high numbers of different medications (polypharmacy).
18. Feedback to NHS service providers on data quality at an aggregate and individual record level – only on data initially provided by the service providers.
DIRECT CARE
1. Reports and dashboards that highlight cohorts of patients that can be targeted for clinical intervention by direct health and care professionals.
2. Lists of at risk patients made available to direct health and care professionals that require direct care intervention.
3. Reports and dashboards to show the outcome of clinical intervention including patient outcomes and modelled transactional cost savings.
RESEARCH
The research outputs from project commissioned in line with the purposes set out in section 5a, may include the following:
• Predictive modelling tools based on research project outcomes,
• Research studies proving insight into disparities in outcomes based on demographic factors,
• Development of tools or algorithms that assist the ICB in resource allocation decision making,
• Research outcomes focused on specific interventions or treatment by the ICB,
• Research output that provides the ICB with cost-effectiveness assessments of specific health needs of the ICS population which can include analyses of disease
• prevalence, health inequalities and social determinants of health guiding the strategic priorities for commissioning
Benefits reported
COMMISSIONING
Health data are used to collate and produce board reports on specific programmes and pathways of care, to monitor the quality of care delivered, assess delivery of targets, and monitor the impact of transformation schemes and improvement programmes based on agreed key performance indicators. These reports are utilised by programme transformation groups to take action where needed to support or improve services, and to drive decision making on development of new models of care.
INVOICE VALIDATION
Outputs from the processing of this data enables the ICB to validate invoices from providers and raise queries and formal disputes where appropriate (for example, around pricing or patient registration). This in turn supports both robust financial control and budgetary reporting at the ICB. Regular and ad hoc reporting of this data further enables the ICB to monitor provider performance against a number of key contractual metrics and targets (for instance, Elective Recovery performance) and support operational colleagues in making management decisions to enable improved provider and system-wide performance.
RISK STRATIFICATION
The ICB is using a medication-based risk stratification tool to identify patient who are likely to be put at risk of harm from their medication. The system is use for monitoring of the Medicines Optimisation Scheme. It is also used in relation to Quality Outcomes Framework (QOF)/Care Quality Commission (CQC) and specific therapeutic areas, for example, Diabetes.
RESEARCH
To be completed once used
DARS-NIC-616054-M4C8K-v2.2 8 November 2024 to 7 November 2027
- Title
- DSfC - NHS Greater Manchester Integrated Care Board - Commissioning / Invoice Validation / Risk Stratification and Research
- Commercial
- No
- Sublicensing
- Yes
- Datasets
- 3
- Files released
- 0
Datasets: Commissioning Datasets; Invoice Validation Datasets; Risk Stratification Datasets
What changed from DARS-NIC-616054-M4C8K-v1.8
Text removed is struck through; text added is underlined. Unchanged paragraphs are summarised rather than repeated.
| Field | Was | Became |
|---|---|---|
| Title | DSfC - NHS Greater Manchester Integrated Care Board - Commissioning / Invoice Validation / Risk Stratification and Research | |
| Start date | 2024-11-08 | |
| End date | 2027-11-07 |
Objective for processing
On 1 February 2023, NHS Digital merged with NHS England. NHS England has assumed responsibility for all activities previously undertaken by NHS Digital. The merger was completed by a statute change. Any reference made to NHS Digital within this Data Sharing Agreement is in reference to the merged organisation known as NHS England.
The Health and Social Care Act 2022 has created 42 Integrated Care Boards (ICB). These are legal entities which have replaced CCGs. The ICB has taken on the NHS commissioning functions of CCGs as well as some of NHS England’s commissioning functions. It is accountable for NHS spend and performance within the system. Within each ICB geographical area, there will also be an Integrated Care Partnership (ICP), a joint committee which brings together the ICB and their partner local authorities, and other locally determined representatives (for example from health, social care, public health; and potentially others, such as social care or housing providers) to set local priorities and develop an integrated health and social care strategy.
The Health and Social Care Act 2022 has created 42 Integrated Care Boards (ICB). These are new legal entities which have replaced CCGs. The ICB will take on the NHS commissioning functions of CCGs as well as some of NHS England’s commissioning functions. It will also be accountable for NHS spend and performance within the system. Within each ICB geographical area, there will also be an Integrated Care Partnership (ICP), a joint committee which brings together the ICB and their partner local authorities, and other locally determined representatives (for example from health, social care, public health; and potentially others, such as social care or housing providers) to set local priorities and develop an integrated health and social care strategy.
[27 paragraphs unchanged]
NHS
Digital
England
provides a re-identification service for this process. All re-id requests will be processed and authorised by NHS
Digital
England
on a case by case basis, including requests under a sub-licence. National
[38 words unchanged]
risk stratification to be conducted under a single flow of pseudonymised data.
[3 paragraphs unchanged]
RESEARCH
The research relates to commissioning activities for the health and care benefit of the ICS and allows the ICB to extend benefits to other ICS footprints under the appropriate governance arrangements.
Each integrated care board must, in the exercise of its functions, facilitate or otherwise promote
(a) research on matters relevant to the health service, and
(b) the use in the health service of evidence obtained from research.
Evidence from research may only be utilised by the data controller for one or more of the following purposes, which align with the advantages of evidence-based commissioning:
• lead to innovation in service design and delivery,
• enhance the quality of health and care provision,
• reduce clinical variation between locations and providers,
• improve equity of access to services,
• improve patient and population outcomes.
Research can only be undertaken by the data controller(s) or their sub-licensee(s). A sub-licence may only be issued for research which must:
· be for the benefit of health or social care within the ICS footprint area; and
· assist health and social care commissioning objectives, and allow the ICB to extend benefits to other ICS footprints under Board review governance arrangements; and
• support one or more of the purposes listed above
Where sub licencing occurs, the ICB is not the data controller as it does not determine the purposes and means for the data processing activities required.
Processing activities
[1 paragraph unchanged]
Data must only be used for the purposes stipulated within this Data Sharing Agreement. Any additional disclosure / publication will require further approval from NHS
Digital.
England.
All access to data is auditable by NHS
Digital.
England.
The Data Controller must keep a record of locations the data is
[15 words unchanged]
the number of processing and storage locations to prevent excessive processing. NHS
Digital
England
may request a record of processing and storage locations at any time.
[3 paragraphs unchanged]
NHS
Digital
England
reminds all organisations party to this agreement of the need to comply
[31 words unchanged]
contractors of the Data Recipient who may have access to that data).
The ICB must publish and maintain a publicly accessible UK GDPR compliant transparency notice that
includes
contains details of
sharing data under
sub-licensing.
sub-license.
The ICB will submit their DSPT in line with the submission timetable, and the ICB commits to abide by the former DSPT assessments submitted under those CCG(s);
The following CCG(s) previously occupied the footprint of the ICB:
• NHS BOLTON CCG
• NHS BURY CCG
• NHS HEYWOOD, MIDDLETON AND ROCHDALE CCG
• NHS MANCHESTER CCG
• NHS OLDHAM CCG
• NHS SALFORD CCG
• NHS STOCKPORT CCG
• NHS TAMESIDE AND GLOSSOP CCG
• NHS TRAFFORD CCG
• NHS WIGAN BOROUGH CCG
All data previously disseminated to the CCG(s) has been transferred to the ICB. The ICB has the responsibility for ensuring that any change in processor/locations/storage results in the appropriate data destruction.
[1 paragraph unchanged]
Data Processors must be listed in section 5b of this Data Sharing Agreement. These include Cloud and IT infrastructure
providers.
providers
[1 paragraph unchanged]
Tameside and Glossop Integrated Care NHS Foundation Trust supply IT infrastructure for
[41 words unchanged]
the agreement. This includes granting of access to the database[s] containing the
data
data.
Bolton NHS Foundation Trust supply IT infrastructure for NHS Greater Manchester Integrated
[37 words unchanged]
the agreement. This includes granting of access to the database[s] containing the
data
data.
Boehringer Ingelheim Ltd is supporting NHS Greater Manchester Integrated Care Board to identify opportunities to improve and optimise care pathways for patients with long term conditions. The work will focus on patients with cardiovascular disease to support better self-management and reduce pressure on primary and secondary care services
[1 paragraph unchanged]
AstraZeneca UK Limited supports the ICB with Health Economic analysis in relation to cancer care pathways across Greater Manchester. The initial focus (not limited to) will relate to the Lung Cancer pathway and health economic modelling to support and evidence the benefits of the introduction of a One Stop Lung Cancer Clinic at Wythenshawe Hospital.
[1 paragraph unchanged]
NHS Midlands and Lancashire Commissioning Support Unit
and NHS Greater Manchester Integrated Care Board
supply IT infrastructure for Arden and GEM Commissioning Support Unit are therefore
[32 words unchanged]
agreement. This includes granting of access to the database[s] containing the data.
[3 paragraphs unchanged]
Commissioners in this region have strong analytical relationships with local Universities. The ICB plans to commission the Universities to deliver carefully controlled data analysis on projects for commissioning purposes only. Controlled access to the pseudonymised data, minimised to each project, will allow the Universities to provide some detailed analysis to support the ICB’s commissioning function.
Liaison Financial Services Limited support the ICB with Continuing Health Care Reviews and invoice validation processes, working with providers to agree and recover any overcharges or overpayments on behalf of the Integrated Care Board (ICB).
NHS Arden and GEM CSU act as the Data Services for Commissioners Regional Office (DSCRO) for the ICB. They process data and make it available to the ICB in a pseudonymised form.
They also provide NHS GM Microsoft Azure tenancy and undertake the following tasks:
• Data back up for disaster recovery
• Regular consumption cost breakdown
• Performance monitoring / tuning
• System audit
• Availability and up time of Cloud environment
Carnall Farrar are supporting the ICB with the development of a Strategic Financial Framework.
Health Innovation Manchester (HINM) hosted by Manchester University NHS Foundation Trust supports the ICB with the deployment and evaluation of innovation projects across Greater Manchester. HINM process data to understand current service pathways and models of care, that can be reimagined to promote improved patient outcomes, and deliver efficiency and effectiveness through the deployment of innovation, and to effectively evaluate the impact of innovation back to the system.
The Christie host the GM Cancer Alliance Intelligence Service. The Cancer Alliance aims to improve the lives of people affected by cancer in Greater Manchester. The ICB works in collaboration with Cancer Alliance and other organisations across the region to help people get diagnosed earlier, provide better treatment and support people to live well with and beyond cancer.
Commissioners in this region have strong analytical relationships with local universities. In addition to university led projects, the ICB plans to commission universities to deliver carefully controlled data analysis on projects for commissioning purposes only. Controlled access to the pseudonymised data, minimised to each project, will allow the Universities to provide some detailed analysis to support the ICB’s commissioning function.
[1 paragraph unchanged]
The
Unless otherwise agreed for research purposes, the
University of Manchester do not carry out data controllership activities, the Universities
[9 words unchanged]
purposes of Commissioning only and act under instruction by the Data Controller.
[5 paragraphs unchanged]
For data sharing under sub-licensing, the ICB must publish a release register
[27 words unchanged]
months in arrears e.g. If a sub-licencing agreement is granted in October
2022,
2024,
it is expected that this will be shown on a release register by April
2023.
2025.
Aggregated reports only with small number suppression can be shared externally as set out within NHS
Digital
England
guidance applicable to each data set.
[17 paragraphs unchanged]
b. Once the provider backing information is received, this will be checked
[8 words unchanged]
well as being checked against system access and reports provided by NHS
Digital
England
to confirm the payments are:
[5 paragraphs unchanged]
• Backing data as described in the NHS England “Who Pays” Guidance. The 'backing data', which are separate
from the invoice, contain evidence to justify the amount claimed.
from the invoice, contain evidence to justify the amount claimed.
[3 paragraphs unchanged]
• Carnall Farrar
[9 paragraphs unchanged]
4. As part of the risk stratification processing activity, GPs have access
[11 words unchanged]
patients with whom the GP has a legitimate relationship and have been
classed as at risk. The only identifier available to GPs is the NHS numbers of their own patients. Any further identification of the patients will be completed by the GP on their own systems.
classed as at risk. The only identifier available to GPs is the NHS numbers of their own patients. Any further identification of the patients will be completed by the GP on their own systems.
[4 paragraphs unchanged]
• NHS Arden and GEM Commissioning Support Unit
[25 paragraphs unchanged]
ii.
ii. The processor pseudonymises the data using a DSCRO provided key specific to the individual request and is then passed outside the segregated area.
iii.
iii. To enable linkage, the DSCRO sends an encrypted mapping table to
[11 words unchanged]
the data processor to enable the use of a black box process.
iv.
iv. The black box process uses the encrypted mapping table to overwrite the organisation specific pseudonym with the DSCRO pseudonym to enable linkage to NHS
Digital
England
released products.
v.
Where the data has already been pseudonymised by the provider using a separate DSCRO allocated key then a black box solution isn’t required.
vi. Where the data has already been pseudonymised by the provider using a separate DSCRO allocated key then a black box solution isn’t required.
Linkage may also be permitted within NHS England where NHS England acts as a data processor on behalf of a provider. There must be a valid and NHS England approved data processing contract in place.
vii.
Processors:
viii. Linkage may also be permitted within NHS Digital where NHS Digital acts as a data processor on behalf of a provider. There must be a valid and NHS Digital approved data processing contract in place.
• NHS Greater Manchester Integrated Care Board (including hosting Greater Manchester Shared Services & Greater Manchester Health and Social Care Partnership)
• NHS Arden and Greater East Midlands Commissioning Support Unit
• Manchester University NHS Foundation Trust (Hosting Health Innovation Manchester Utilisation Management Team)
• NHS England (Hosting Greater Manchester Health and Social Care Partnership)
• University of Manchester
• The Christie NHS Foundation Trust [hosting the GM Cancer intelligence Service]
• Bury Metropolitan Borough Council
• Tameside Metropolitan Borough Council
• Carnall Farrar
[7 paragraphs unchanged]
Adult Social Care - Bury Metropolitan Borough Council:
Linkage may also be permitted within NHS England where NHS England acts as a data processor on behalf of a provider. There must be a valid and NHS England approved data processing contract in place.
i. Data quality management of Adult Social Care data is completed by Bury Metropolitan Borough Council
ii. Adult Social Care data is pseudonymised at source using a SALT key provided by the DSCRO (different from the pseudo key used by the DSCRO).
iii. This consistently pseudonymised data is securely passed to the ICB using a secure local connection
iv. The DSCRO sends a mapping table to the ICB to overwrite the pseudonym in the social care data so it is linkable to the data in point disseminated by the DSCRO.
v. The ICB then shares the adult social care data with the local authority. The CCG must not share the data with the local authority unless the pseudonym has been overwritten as per point (iv).
vi. The data controllers are required to keep the pseudonymised data they receive separate from any identifiable data and the pseudonymised data the local authority submits to the CCG, and make no attempt to reidentify the data. Failure to meet these terms will result in a breach of this agreement.
The SALT key will only be shared by the DSCRO with named individuals in Bury Metropolitan Borough Council (Adult Social Care). This is to enable Adult Social Care data to be pseudonymised at source. The key cannot be used to re-identify data as it only allows for one-way pseudonymisation.
Linkage may also be permitted within NHS Digital where NHS Digital acts as a data processor on behalf of a provider. There must be a valid and NHS Digital approved data processing contract in place.
Processors:
• NHS Greater Manchester Integrated Care Board (including hosting Greater Manchester Shared Services & Greater Manchester Health and Social Care Partnership)
• NHS Arden and Greater East Midlands Commissioning Support Unit
• Manchester University NHS Foundation Trust (Hosting Health Innovation Manchester Utilisation Management Team)
• NHS England (Hosting Greater Manchester Health and Social Care Partnership)
• University of Manchester
• The Christie NHS Foundation Trust [hosting the GM Cancer intelligence Service]
• Deloitte LLP
• Bury Metropolitan Borough Council
• Rochdale Borough Council
• Tameside Metropolitan Borough Council
• Carnall Farrar
[1 paragraph unchanged]
In addition to the dissemination of Cancer Waiting Times Data via the DSCRO, the ICB is able to access reports held within the CWT system in NHS
Digital
England
directly. Access within the ICB is limited to those with a need
[72 words unchanged]
for which they have a legitimate relationship (as described within Data Minimisation).
[5 paragraphs unchanged]
ix.
4. For automated systems, steps 1 - 3 wouldn’t apply in most
[27 words unchanged]
security checks initially, they will be able to re-id without further checks.
[2 paragraphs unchanged]
RESEARCH
Processing Conditions:
All access to sub-licenced data is managed under Role-Based Access Controls (RBAC) within the ICB’s Secure Data Environment (SDE). Users can only access data authorised by their role and the task that requires completion.
Patient level data shared is only permitted for purposes and manner stipulated in the data sharing agreement including under the sub licensing agreement.
The data controller(s) must publish and maintain a publicly accessible UK GDPR compliant transparency notice that includes sharing data under sub-licensing.
The pseudonymised commissioning datasets can only be used for the research purpose stipulated in the DSA and sub-licencing agreement.
Onward Sharing:
The data controller(s) can only share patient level data in following circumstances:
• Under the terms of a sub-licensing agreement as detailed in this Data Sharing Agreement (DSA)
• It is only permitted to re-identify and share data with those health or care professionals who have a legitimate relationship with the patient and a legitimate reason to access the data, for the purpose of direct care.
• Back to a provider to challenge data submissions. The data transferred to the provider is only that which relates directly to the data previously submitted by that particular provider and is limited to that being necessary to challenge the data submission.
Aggregated reports only with small number suppression can be shared externally without a sub-licence, where the data is suppressed according to NHS England guidance applicable to each data set.
The data controller(s) by signing this DSA and sub licencing agreement must:
• Ensure that the appropriate ICB Board/Committee that reviews research strategies and associated research briefs, provides advice on the ICB’s sub-licencing process and individual requests for sub-licences to the ICBs Senior Information Risk Owner (SIRO) who formally approves the requests.
• Ensure representation from patients, clinical, and privacy are part of the research review Board / Committee and approval process
• Ensure that, if a sub license has a commercial aspect then there must be:
o Evidence of compliance with the DARS Data sharing standard 5e - Commercial Purpose.
o A process is in place that annually reviews any potential interests and conflict of interest for the organisation delivering the research project. (This including any benefits which may accrue noting that benefits may be delayed, indirect or non-financial. For example, if the organisation is commercial and holds a patent on a drug or treatment being studied or on a rival drug or treatment to that being studied.)
Auditing:
The data controller(s) must hold the sub-licensee contractually accountable to the Data Access Standards as published by NHS England. This includes the ability to audit compliance with the DSA and DSFC by the data controller and / or NHS England.
Minimisation must be applied for each research purpose so that only the necessary data is made available for that purpose
Expected output
[42 paragraphs unchanged] RESEARCH The research outputs from project commissioned in line with the purposes set out in section 5a, may include the following: • Predictive modelling tools based on research project outcomes, • Research studies proving insight into disparities in outcomes based on demographic factors, • Development of tools or algorithms that assist the ICB in resource allocation decision making, • Research outcomes focused on specific interventions or treatment by the ICB, • Research output that provides the ICB with cost-effectiveness assessments of specific health needs of the ICS population which can include analyses of disease • prevalence, health inequalities and social determinants of health guiding the strategic priorities for commissioning
Expected measurable benefits
[44 paragraphs unchanged] RESEARCH 1. Improved outcomes for patients 2. Reducing the health inequalities that have been identified at a local level 3. Improved patient experience 4. Decisions which are informed and based upon the latest available evidence e.g. improved outcomes or providing value for money 5. Reduced waste and the risk of duplication 6. The spread and adoption of innovative ideas 7. The identification of evidence gaps which can be used to produce future research which is relevant to the needs of the commissioning system 8. Enabling and supporting horizon scanning for commissioners
Benefits reported
[6 paragraphs unchanged] RESEARCH To be completed once used
Objective for processing
The Health and Social Care Act 2022 has created 42 Integrated Care Boards (ICB). These are legal entities which have replaced CCGs. The ICB has taken on the NHS commissioning functions of CCGs as well as some of NHS England’s commissioning functions. It is accountable for NHS spend and performance within the system. Within each ICB geographical area, there will also be an Integrated Care Partnership (ICP), a joint committee which brings together the ICB and their partner local authorities, and other locally determined representatives (for example from health, social care, public health; and potentially others, such as social care or housing providers) to set local priorities and develop an integrated health and social care strategy.
ICP constituent members (other than the ICB) do not carry out data controllership activities and do not make decisions on sub-licensing.
INVOICE VALIDATION
Invoice validation is part of a process by which providers of care or services get paid for the work they do.
Invoices are submitted to the Integrated Care Board (ICB) so the ICB is able to ensure that the patient is their responsibility and the activity claimed is correct. This is done by processing and analysing Invoice Validation Datasets, which are received into a secure Controlled Environment for Finance (CEfF). The identifiers included are in line with the CAG approval. The identifiers are only used to link and confirm the accuracy of backing-data sets (data from providers).
The ICB are advised by the appointed CEfF whether payment for invoices can be made or not.
RISK STRATIFICATION
Risk stratification is a tool for identifying and predicting which patients are at high risk (of health deterioration and using multiple services) or are likely to be at high risk and prioritising the management of their care in order to prevent worse outcomes.
In order to conduct, Risk Stratification Datasets, identifiable at the level of NHS number are linked with Primary Care data (from GPs) and an algorithm is applied to produce risk scores. Risk Stratification provides focus for future demands by enabling commissioners to prepare plans for both individual and groups of vulnerable patients. Commissioners can then prepare plans for cohorts of patients who may require high levels of care. Risk Stratification also enables General Practitioners (GPs) to better target intervention in Primary Care.
COMMISSIONING
To use pseudonymised Commissioning Datasets to provide intelligence to support the commissioning of health services. The data (containing both clinical and financial information) is analysed so that health care provision can be planned to support the needs of the population within the ICB area.
The ICBs commission services from a range of providers covering a wide array of services. Each of the data flow categories requested supports the commissioned activity of one or more providers.
The pseudonymised data is required to for the following purposes:
Population health management
Data Quality and Validation – allowing data quality checks on the submitted data
Thoroughly investigating the needs of the population, to inform the commissioning or appropriate services for that population’s health needs
Understanding cohorts of residents who are at risk of becoming users of some of the more expensive services, to better understand and manage those needs
Monitoring population health and care interactions to understand where people may slip through the net, or where the provision of care may be being duplicated
Modelling activity across all data sets to understand how services interact with each other, and to understand how changes in one service may affect flows through another
Service redesign
Health Needs Assessment – identification of disease prevalence within the local population
Patient stratification and predictive modelling - to highlight cohorts of patients at risk of requiring hospital admission and other avoidable factors such as risk of falls, computed using algorithms executed against linked de-identified data, and identification of future service delivery models
Demand Management – ensuring enough capacity to manage the demand by predicting the impact on certain care pathways.
Support measuring the health and care needs of the total local population.
Provide intelligence about the safety and effectiveness of medicines.
Allow analysis of patient pathways across healthcare and social care.
DIRECT CARE
In the development of cohorts of pseudonymised patients considered to be at risk, the data controllers may need the facility to provide identifiable results back to direct health or care professionals for the purpose of direct care. Additionally clinicians, made aware of a number of cases that they believe would need intervention may request re-identification for that direct care purpose. These instances of re-identification will generally be carried out as programmes of work or, separately, on an individual/small group basis as a result of coincidental findings. The ICB does not have a statutory function to provide direct care and as such, does not see the identifiable data.
NHS England provides a re-identification service for this process. All re-id requests will be processed and authorised by NHS England on a case by case basis, including requests under a sub-licence. National data opt outs are not applied in these cases as they are for the purposes of direct care which follows the legal basis of implied consent. It is anticipated that this re-id ability in the future will allow risk stratification to be conducted under a single flow of pseudonymised data.
The following is a typical example of an instance where an ICB might want to use the re-identification process:
A&E High Attendance usage
The ICB can filter data to show for example the number of A&E attendances in a given period for each patient. The ICB can then flag to the relevant GP of the patient any patients that require intervention. An outcome of this is earlier intervention in the patient(s) care thus potentially reducing future costs and minimising future risk.
RESEARCH
The research relates to commissioning activities for the health and care benefit of the ICS and allows the ICB to extend benefits to other ICS footprints under the appropriate governance arrangements.
Each integrated care board must, in the exercise of its functions, facilitate or otherwise promote
(a) research on matters relevant to the health service, and
(b) the use in the health service of evidence obtained from research.
Evidence from research may only be utilised by the data controller for one or more of the following purposes, which align with the advantages of evidence-based commissioning:
• lead to innovation in service design and delivery,
• enhance the quality of health and care provision,
• reduce clinical variation between locations and providers,
• improve equity of access to services,
• improve patient and population outcomes.
Research can only be undertaken by the data controller(s) or their sub-licensee(s). A sub-licence may only be issued for research which must:
· be for the benefit of health or social care within the ICS footprint area; and
· assist health and social care commissioning objectives, and allow the ICB to extend benefits to other ICS footprints under Board review governance arrangements; and
• support one or more of the purposes listed above
Where sub licencing occurs, the ICB is not the data controller as it does not determine the purposes and means for the data processing activities required.
Expected output
INVOICE VALIDATION
1. Accurate budget reports.
2. Enable a system of communication that will enable the ICB to challenge invoices and raise discrepancies and disputes.
3. Reports on the accuracy of invoices.
4. Validation of invoices for non-contracted events where a service delivered to a patient by a provider that does not have a written contract with the patient’s responsible commissioner, but does have a written contract with another NHS commissioner/s.
5. Budget control of the ICB.
RISK STRATIFICATION
1. As part of the risk stratification processing activity detailed above, GPs have access to the risk stratification tool which highlights patients for whom the GP is responsible and have been classed as at risk. The only identifier available to GPs is the NHS numbers of their own patients. Any further identification of the patients will be completed by the GP on their own systems.
2. GP Practices will be able to view the risk scores for individual patients with the ability to display the underlying SUS+ data for the individual patients when it is required for direct care purposes by someone who has a legitimate relationship with the patient.
The ICB will be provided with the pseudonymised outputs of the risk stratification tool for which they are able to:
1. Identify patient groups at risk of deterioration and providing effective care.
2. Set up capitated budgets – budgets based on care provided to the specific population.
3. Identify health determinants of risk of admission to hospital, or other adverse care outcomes.
4. Monitor vulnerable groups of patients including but not limited to frailty, COPD, Diabetes, elderly.
5. Health needs assessments – identifying numbers of patients with specific health conditions or combination of conditions.
6. Classify vulnerable groups based on: disease profiles; conditions currently being treated; current service use; pharmacy use and risk of future overall cost.
7. Production of Theographs – a visual timeline of a patients encounters with hospital providers.
8. Analyse based on specific diseases.
9. Aggregate reporting of number and percentage of population found to be at risk.
COMMISSIONING
1. Commissioner reporting on providers, finances, readmission analysis etc…
2. Production of aggregate reports for ICB Business Intelligence.
3. Production of project / programme level dashboards.
4. Monitoring of acute / community / mental health quality matrix.
5. Clinical coding reviews / audits.
6. Budget reporting down to individual GP Practice level.
7. GP Practice level dashboard reports.
8. Comparators of ICB performance with similar ICBs as set out by a specific range of care quality and performance measures detailed activity and cost reports.
9. Data Quality and Validation measures allowing data quality checks on the submitted data.
10. Contract Management and Modelling.
11. Patient Stratification dashboards to highlight cohorts of patients with similar conditions at risk.
12. Manage demand, by understanding the quantity of assessments required ICBs are able to improve the care service for patients by predicting the impact on certain care pathways and ensure the secondary care system has enough capacity to manage the demand.
13. Identify low priority procedures which could be directed to community-based alternatives and as such commission these services and deflect referrals for low priority procedures resulting in a reduction in hospital referrals.
14. Compare providers (trusts) mortality outcomes to the national baseline.
15. Identify medication prescribing trends and their effectiveness.
16. Linking prescribing habits to entry points into the health and social care system.
17. Identify, quantify and understand cohorts of patient’s high numbers of different medications (polypharmacy).
18. Feedback to NHS service providers on data quality at an aggregate and individual record level – only on data initially provided by the service providers.
DIRECT CARE
1. Reports and dashboards that highlight cohorts of patients that can be targeted for clinical intervention by direct health and care professionals.
2. Lists of at risk patients made available to direct health and care professionals that require direct care intervention.
3. Reports and dashboards to show the outcome of clinical intervention including patient outcomes and modelled transactional cost savings.
RESEARCH
The research outputs from project commissioned in line with the purposes set out in section 5a, may include the following:
• Predictive modelling tools based on research project outcomes,
• Research studies proving insight into disparities in outcomes based on demographic factors,
• Development of tools or algorithms that assist the ICB in resource allocation decision making,
• Research outcomes focused on specific interventions or treatment by the ICB,
• Research output that provides the ICB with cost-effectiveness assessments of specific health needs of the ICS population which can include analyses of disease
• prevalence, health inequalities and social determinants of health guiding the strategic priorities for commissioning
Benefits reported
COMMISSIONING
Health data are used to collate and produce board reports on specific programmes and pathways of care, to monitor the quality of care delivered, assess delivery of targets, and monitor the impact of transformation schemes and improvement programmes based on agreed key performance indicators. These reports are utilised by programme transformation groups to take action where needed to support or improve services, and to drive decision making on development of new models of care.
INVOICE VALIDATION
Outputs from the processing of this data enables the ICB to validate invoices from providers and raise queries and formal disputes where appropriate (for example, around pricing or patient registration). This in turn supports both robust financial control and budgetary reporting at the ICB. Regular and ad hoc reporting of this data further enables the ICB to monitor provider performance against a number of key contractual metrics and targets (for instance, Elective Recovery performance) and support operational colleagues in making management decisions to enable improved provider and system-wide performance.
RISK STRATIFICATION
The ICB is using a medication-based risk stratification tool to identify patient who are likely to be put at risk of harm from their medication. The system is use for monitoring of the Medicines Optimisation Scheme. It is also used in relation to Quality Outcomes Framework (QOF)/Care Quality Commission (CQC) and specific therapeutic areas, for example, Diabetes.
RESEARCH
To be completed once used
DARS-NIC-616054-M4C8K-v1.8 6 June 2024 to 5 June 2027
- Title
- DSfC - NHS Greater Manchester Integrated Care Board - Comm/IV/RS
- Commercial
- No
- Sublicensing
- Yes
- Datasets
- 3
- Files released
- 0
Datasets: Commissioning Datasets; Invoice Validation Datasets; Risk Stratification Datasets
What changed from DARS-NIC-616054-M4C8K-v0.3
Text removed is struck through; text added is underlined. Unchanged paragraphs are summarised rather than repeated.
| Field | Was | Became |
|---|---|---|
| Start date | 2024-06-06 | |
| End date | 2027-06-05 |
Processing activities
[8 paragraphs unchanged]
The former CCG(s) has submitted their Data Security Protection Toolkit (DSPT) for 21/22.
The ICB will submit their DSPT in line with the
22/23
submission timetable, and the ICB commits to abide by the former DSPT assessments submitted under those CCG(s);
[61 paragraphs unchanged]
• Carnall Farrar
[75 paragraphs unchanged]
• Carnall Farrar
[10 paragraphs unchanged]
Benefits reported
Yielded Benefits is not a requirement for new applications.
COMMISSIONING
Health data are used to collate and produce board reports on specific programmes and pathways of care, to monitor the quality of care delivered, assess delivery of targets, and monitor the impact of transformation schemes and improvement programmes based on agreed key performance indicators. These reports are utilised by programme transformation groups to take action where needed to support or improve services, and to drive decision making on development of new models of care.
INVOICE VALIDATION
Outputs from the processing of this data enables the ICB to validate invoices from providers and raise queries and formal disputes where appropriate (for example, around pricing or patient registration). This in turn supports both robust financial control and budgetary reporting at the ICB. Regular and ad hoc reporting of this data further enables the ICB to monitor provider performance against a number of key contractual metrics and targets (for instance, Elective Recovery performance) and support operational colleagues in making management decisions to enable improved provider and system-wide performance.
RISK STRATIFICATION
The ICB is using a medication-based risk stratification tool to identify patient who are likely to be put at risk of harm from their medication. The system is use for monitoring of the Medicines Optimisation Scheme. It is also used in relation to Quality Outcomes Framework (QOF)/Care Quality Commission (CQC) and specific therapeutic areas, for example, Diabetes.
Unchanged: Objective for processing, Expected output, Expected measurable benefits.
Objective for processing
On 1 February 2023, NHS Digital merged with NHS England. NHS England has assumed responsibility for all activities previously undertaken by NHS Digital. The merger was completed by a statute change. Any reference made to NHS Digital within this Data Sharing Agreement is in reference to the merged organisation known as NHS England.
The Health and Social Care Act 2022 has created 42 Integrated Care Boards (ICB). These are new legal entities which have replaced CCGs. The ICB will take on the NHS commissioning functions of CCGs as well as some of NHS England’s commissioning functions. It will also be accountable for NHS spend and performance within the system. Within each ICB geographical area, there will also be an Integrated Care Partnership (ICP), a joint committee which brings together the ICB and their partner local authorities, and other locally determined representatives (for example from health, social care, public health; and potentially others, such as social care or housing providers) to set local priorities and develop an integrated health and social care strategy.
ICP constituent members (other than the ICB) do not carry out data controllership activities and do not make decisions on sub-licensing.
INVOICE VALIDATION
Invoice validation is part of a process by which providers of care or services get paid for the work they do.
Invoices are submitted to the Integrated Care Board (ICB) so the ICB is able to ensure that the patient is their responsibility and the activity claimed is correct. This is done by processing and analysing Invoice Validation Datasets, which are received into a secure Controlled Environment for Finance (CEfF). The identifiers included are in line with the CAG approval. The identifiers are only used to link and confirm the accuracy of backing-data sets (data from providers).
The ICB are advised by the appointed CEfF whether payment for invoices can be made or not.
RISK STRATIFICATION
Risk stratification is a tool for identifying and predicting which patients are at high risk (of health deterioration and using multiple services) or are likely to be at high risk and prioritising the management of their care in order to prevent worse outcomes.
In order to conduct, Risk Stratification Datasets, identifiable at the level of NHS number are linked with Primary Care data (from GPs) and an algorithm is applied to produce risk scores. Risk Stratification provides focus for future demands by enabling commissioners to prepare plans for both individual and groups of vulnerable patients. Commissioners can then prepare plans for cohorts of patients who may require high levels of care. Risk Stratification also enables General Practitioners (GPs) to better target intervention in Primary Care.
COMMISSIONING
To use pseudonymised Commissioning Datasets to provide intelligence to support the commissioning of health services. The data (containing both clinical and financial information) is analysed so that health care provision can be planned to support the needs of the population within the ICB area.
The ICBs commission services from a range of providers covering a wide array of services. Each of the data flow categories requested supports the commissioned activity of one or more providers.
The pseudonymised data is required to for the following purposes:
Population health management
Data Quality and Validation – allowing data quality checks on the submitted data
Thoroughly investigating the needs of the population, to inform the commissioning or appropriate services for that population’s health needs
Understanding cohorts of residents who are at risk of becoming users of some of the more expensive services, to better understand and manage those needs
Monitoring population health and care interactions to understand where people may slip through the net, or where the provision of care may be being duplicated
Modelling activity across all data sets to understand how services interact with each other, and to understand how changes in one service may affect flows through another
Service redesign
Health Needs Assessment – identification of disease prevalence within the local population
Patient stratification and predictive modelling - to highlight cohorts of patients at risk of requiring hospital admission and other avoidable factors such as risk of falls, computed using algorithms executed against linked de-identified data, and identification of future service delivery models
Demand Management – ensuring enough capacity to manage the demand by predicting the impact on certain care pathways.
Support measuring the health and care needs of the total local population.
Provide intelligence about the safety and effectiveness of medicines.
Allow analysis of patient pathways across healthcare and social care.
DIRECT CARE
In the development of cohorts of pseudonymised patients considered to be at risk, the data controllers may need the facility to provide identifiable results back to direct health or care professionals for the purpose of direct care. Additionally clinicians, made aware of a number of cases that they believe would need intervention may request re-identification for that direct care purpose. These instances of re-identification will generally be carried out as programmes of work or, separately, on an individual/small group basis as a result of coincidental findings. The ICB does not have a statutory function to provide direct care and as such, does not see the identifiable data.
NHS Digital provides a re-identification service for this process. All re-id requests will be processed and authorised by NHS Digital on a case by case basis, including requests under a sub-licence. National data opt outs are not applied in these cases as they are for the purposes of direct care which follows the legal basis of implied consent. It is anticipated that this re-id ability in the future will allow risk stratification to be conducted under a single flow of pseudonymised data.
The following is a typical example of an instance where an ICB might want to use the re-identification process:
A&E High Attendance usage
The ICB can filter data to show for example the number of A&E attendances in a given period for each patient. The ICB can then flag to the relevant GP of the patient any patients that require intervention. An outcome of this is earlier intervention in the patient(s) care thus potentially reducing future costs and minimising future risk.
Expected output
INVOICE VALIDATION
1. Accurate budget reports.
2. Enable a system of communication that will enable the ICB to challenge invoices and raise discrepancies and disputes.
3. Reports on the accuracy of invoices.
4. Validation of invoices for non-contracted events where a service delivered to a patient by a provider that does not have a written contract with the patient’s responsible commissioner, but does have a written contract with another NHS commissioner/s.
5. Budget control of the ICB.
RISK STRATIFICATION
1. As part of the risk stratification processing activity detailed above, GPs have access to the risk stratification tool which highlights patients for whom the GP is responsible and have been classed as at risk. The only identifier available to GPs is the NHS numbers of their own patients. Any further identification of the patients will be completed by the GP on their own systems.
2. GP Practices will be able to view the risk scores for individual patients with the ability to display the underlying SUS+ data for the individual patients when it is required for direct care purposes by someone who has a legitimate relationship with the patient.
The ICB will be provided with the pseudonymised outputs of the risk stratification tool for which they are able to:
1. Identify patient groups at risk of deterioration and providing effective care.
2. Set up capitated budgets – budgets based on care provided to the specific population.
3. Identify health determinants of risk of admission to hospital, or other adverse care outcomes.
4. Monitor vulnerable groups of patients including but not limited to frailty, COPD, Diabetes, elderly.
5. Health needs assessments – identifying numbers of patients with specific health conditions or combination of conditions.
6. Classify vulnerable groups based on: disease profiles; conditions currently being treated; current service use; pharmacy use and risk of future overall cost.
7. Production of Theographs – a visual timeline of a patients encounters with hospital providers.
8. Analyse based on specific diseases.
9. Aggregate reporting of number and percentage of population found to be at risk.
COMMISSIONING
1. Commissioner reporting on providers, finances, readmission analysis etc…
2. Production of aggregate reports for ICB Business Intelligence.
3. Production of project / programme level dashboards.
4. Monitoring of acute / community / mental health quality matrix.
5. Clinical coding reviews / audits.
6. Budget reporting down to individual GP Practice level.
7. GP Practice level dashboard reports.
8. Comparators of ICB performance with similar ICBs as set out by a specific range of care quality and performance measures detailed activity and cost reports.
9. Data Quality and Validation measures allowing data quality checks on the submitted data.
10. Contract Management and Modelling.
11. Patient Stratification dashboards to highlight cohorts of patients with similar conditions at risk.
12. Manage demand, by understanding the quantity of assessments required ICBs are able to improve the care service for patients by predicting the impact on certain care pathways and ensure the secondary care system has enough capacity to manage the demand.
13. Identify low priority procedures which could be directed to community-based alternatives and as such commission these services and deflect referrals for low priority procedures resulting in a reduction in hospital referrals.
14. Compare providers (trusts) mortality outcomes to the national baseline.
15. Identify medication prescribing trends and their effectiveness.
16. Linking prescribing habits to entry points into the health and social care system.
17. Identify, quantify and understand cohorts of patient’s high numbers of different medications (polypharmacy).
18. Feedback to NHS service providers on data quality at an aggregate and individual record level – only on data initially provided by the service providers.
DIRECT CARE
1. Reports and dashboards that highlight cohorts of patients that can be targeted for clinical intervention by direct health and care professionals.
2. Lists of at risk patients made available to direct health and care professionals that require direct care intervention.
3. Reports and dashboards to show the outcome of clinical intervention including patient outcomes and modelled transactional cost savings.
Benefits reported
COMMISSIONING
Health data are used to collate and produce board reports on specific programmes and pathways of care, to monitor the quality of care delivered, assess delivery of targets, and monitor the impact of transformation schemes and improvement programmes based on agreed key performance indicators. These reports are utilised by programme transformation groups to take action where needed to support or improve services, and to drive decision making on development of new models of care.
INVOICE VALIDATION
Outputs from the processing of this data enables the ICB to validate invoices from providers and raise queries and formal disputes where appropriate (for example, around pricing or patient registration). This in turn supports both robust financial control and budgetary reporting at the ICB. Regular and ad hoc reporting of this data further enables the ICB to monitor provider performance against a number of key contractual metrics and targets (for instance, Elective Recovery performance) and support operational colleagues in making management decisions to enable improved provider and system-wide performance.
RISK STRATIFICATION
The ICB is using a medication-based risk stratification tool to identify patient who are likely to be put at risk of harm from their medication. The system is use for monitoring of the Medicines Optimisation Scheme. It is also used in relation to Quality Outcomes Framework (QOF)/Care Quality Commission (CQC) and specific therapeutic areas, for example, Diabetes.
DARS-NIC-616054-M4C8K-v0.3 18 November 2022 to 17 November 2025
- Title
- DSfC - NHS Greater Manchester Integrated Care Board - Comm/IV/RS
- Commercial
- No
- Sublicensing
- Yes
- Datasets
- 3
- Files released
- 0
Datasets: Commissioning Datasets; Invoice Validation Datasets; Risk Stratification Datasets
Objective for processing
On 1 February 2023, NHS Digital merged with NHS England. NHS England has assumed responsibility for all activities previously undertaken by NHS Digital. The merger was completed by a statute change. Any reference made to NHS Digital within this Data Sharing Agreement is in reference to the merged organisation known as NHS England.
The Health and Social Care Act 2022 has created 42 Integrated Care Boards (ICB). These are new legal entities which have replaced CCGs. The ICB will take on the NHS commissioning functions of CCGs as well as some of NHS England’s commissioning functions. It will also be accountable for NHS spend and performance within the system. Within each ICB geographical area, there will also be an Integrated Care Partnership (ICP), a joint committee which brings together the ICB and their partner local authorities, and other locally determined representatives (for example from health, social care, public health; and potentially others, such as social care or housing providers) to set local priorities and develop an integrated health and social care strategy.
ICP constituent members (other than the ICB) do not carry out data controllership activities and do not make decisions on sub-licensing.
INVOICE VALIDATION
Invoice validation is part of a process by which providers of care or services get paid for the work they do.
Invoices are submitted to the Integrated Care Board (ICB) so the ICB is able to ensure that the patient is their responsibility and the activity claimed is correct. This is done by processing and analysing Invoice Validation Datasets, which are received into a secure Controlled Environment for Finance (CEfF). The identifiers included are in line with the CAG approval. The identifiers are only used to link and confirm the accuracy of backing-data sets (data from providers).
The ICB are advised by the appointed CEfF whether payment for invoices can be made or not.
RISK STRATIFICATION
Risk stratification is a tool for identifying and predicting which patients are at high risk (of health deterioration and using multiple services) or are likely to be at high risk and prioritising the management of their care in order to prevent worse outcomes.
In order to conduct, Risk Stratification Datasets, identifiable at the level of NHS number are linked with Primary Care data (from GPs) and an algorithm is applied to produce risk scores. Risk Stratification provides focus for future demands by enabling commissioners to prepare plans for both individual and groups of vulnerable patients. Commissioners can then prepare plans for cohorts of patients who may require high levels of care. Risk Stratification also enables General Practitioners (GPs) to better target intervention in Primary Care.
COMMISSIONING
To use pseudonymised Commissioning Datasets to provide intelligence to support the commissioning of health services. The data (containing both clinical and financial information) is analysed so that health care provision can be planned to support the needs of the population within the ICB area.
The ICBs commission services from a range of providers covering a wide array of services. Each of the data flow categories requested supports the commissioned activity of one or more providers.
The pseudonymised data is required to for the following purposes:
Population health management
Data Quality and Validation – allowing data quality checks on the submitted data
Thoroughly investigating the needs of the population, to inform the commissioning or appropriate services for that population’s health needs
Understanding cohorts of residents who are at risk of becoming users of some of the more expensive services, to better understand and manage those needs
Monitoring population health and care interactions to understand where people may slip through the net, or where the provision of care may be being duplicated
Modelling activity across all data sets to understand how services interact with each other, and to understand how changes in one service may affect flows through another
Service redesign
Health Needs Assessment – identification of disease prevalence within the local population
Patient stratification and predictive modelling - to highlight cohorts of patients at risk of requiring hospital admission and other avoidable factors such as risk of falls, computed using algorithms executed against linked de-identified data, and identification of future service delivery models
Demand Management – ensuring enough capacity to manage the demand by predicting the impact on certain care pathways.
Support measuring the health and care needs of the total local population.
Provide intelligence about the safety and effectiveness of medicines.
Allow analysis of patient pathways across healthcare and social care.
DIRECT CARE
In the development of cohorts of pseudonymised patients considered to be at risk, the data controllers may need the facility to provide identifiable results back to direct health or care professionals for the purpose of direct care. Additionally clinicians, made aware of a number of cases that they believe would need intervention may request re-identification for that direct care purpose. These instances of re-identification will generally be carried out as programmes of work or, separately, on an individual/small group basis as a result of coincidental findings. The ICB does not have a statutory function to provide direct care and as such, does not see the identifiable data.
NHS Digital provides a re-identification service for this process. All re-id requests will be processed and authorised by NHS Digital on a case by case basis, including requests under a sub-licence. National data opt outs are not applied in these cases as they are for the purposes of direct care which follows the legal basis of implied consent. It is anticipated that this re-id ability in the future will allow risk stratification to be conducted under a single flow of pseudonymised data.
The following is a typical example of an instance where an ICB might want to use the re-identification process:
A&E High Attendance usage
The ICB can filter data to show for example the number of A&E attendances in a given period for each patient. The ICB can then flag to the relevant GP of the patient any patients that require intervention. An outcome of this is earlier intervention in the patient(s) care thus potentially reducing future costs and minimising future risk.
Expected output
INVOICE VALIDATION
1. Accurate budget reports.
2. Enable a system of communication that will enable the ICB to challenge invoices and raise discrepancies and disputes.
3. Reports on the accuracy of invoices.
4. Validation of invoices for non-contracted events where a service delivered to a patient by a provider that does not have a written contract with the patient’s responsible commissioner, but does have a written contract with another NHS commissioner/s.
5. Budget control of the ICB.
RISK STRATIFICATION
1. As part of the risk stratification processing activity detailed above, GPs have access to the risk stratification tool which highlights patients for whom the GP is responsible and have been classed as at risk. The only identifier available to GPs is the NHS numbers of their own patients. Any further identification of the patients will be completed by the GP on their own systems.
2. GP Practices will be able to view the risk scores for individual patients with the ability to display the underlying SUS+ data for the individual patients when it is required for direct care purposes by someone who has a legitimate relationship with the patient.
The ICB will be provided with the pseudonymised outputs of the risk stratification tool for which they are able to:
1. Identify patient groups at risk of deterioration and providing effective care.
2. Set up capitated budgets – budgets based on care provided to the specific population.
3. Identify health determinants of risk of admission to hospital, or other adverse care outcomes.
4. Monitor vulnerable groups of patients including but not limited to frailty, COPD, Diabetes, elderly.
5. Health needs assessments – identifying numbers of patients with specific health conditions or combination of conditions.
6. Classify vulnerable groups based on: disease profiles; conditions currently being treated; current service use; pharmacy use and risk of future overall cost.
7. Production of Theographs – a visual timeline of a patients encounters with hospital providers.
8. Analyse based on specific diseases.
9. Aggregate reporting of number and percentage of population found to be at risk.
COMMISSIONING
1. Commissioner reporting on providers, finances, readmission analysis etc…
2. Production of aggregate reports for ICB Business Intelligence.
3. Production of project / programme level dashboards.
4. Monitoring of acute / community / mental health quality matrix.
5. Clinical coding reviews / audits.
6. Budget reporting down to individual GP Practice level.
7. GP Practice level dashboard reports.
8. Comparators of ICB performance with similar ICBs as set out by a specific range of care quality and performance measures detailed activity and cost reports.
9. Data Quality and Validation measures allowing data quality checks on the submitted data.
10. Contract Management and Modelling.
11. Patient Stratification dashboards to highlight cohorts of patients with similar conditions at risk.
12. Manage demand, by understanding the quantity of assessments required ICBs are able to improve the care service for patients by predicting the impact on certain care pathways and ensure the secondary care system has enough capacity to manage the demand.
13. Identify low priority procedures which could be directed to community-based alternatives and as such commission these services and deflect referrals for low priority procedures resulting in a reduction in hospital referrals.
14. Compare providers (trusts) mortality outcomes to the national baseline.
15. Identify medication prescribing trends and their effectiveness.
16. Linking prescribing habits to entry points into the health and social care system.
17. Identify, quantify and understand cohorts of patient’s high numbers of different medications (polypharmacy).
18. Feedback to NHS service providers on data quality at an aggregate and individual record level – only on data initially provided by the service providers.
DIRECT CARE
1. Reports and dashboards that highlight cohorts of patients that can be targeted for clinical intervention by direct health and care professionals.
2. Lists of at risk patients made available to direct health and care professionals that require direct care intervention.
3. Reports and dashboards to show the outcome of clinical intervention including patient outcomes and modelled transactional cost savings.
Benefits reported
Yielded Benefits is not a requirement for new applications.
Register history
When this agreement appeared in, or was edited in, each monthly edition of the register. Built by comparing every edition this site holds.
-
March 2023 —
first listed. 1 version: DARS-NIC-616054-M4C8K-v0.3
-
July 2024
1 version added: DARS-NIC-616054-M4C8K-v1.8
-
December 2024
1 version added: DARS-NIC-616054-M4C8K-v2.2
-
January 2025
1 version added: DARS-NIC-616054-M4C8K-v3.2
-
May 2025
1 version added: DARS-NIC-616054-M4C8K-v4.2
-
December 2025
1 version added: DARS-NIC-616054-M4C8K-v5.2
-
July 2026
1 version added: DARS-NIC-616054-M4C8K-v6.3
Cite this page
NHS England (2026) Data Uses Register, September 2026 edition, agreement DARS-NIC-616054-M4C8K, “DSfC - NHS Greater Manchester Integrated Care Board - Commissioning / Invoice Validation / Risk Stratification and Research”. Read via NHS Data Access Explorer (unofficial), https://healthdatauses.uk/agreements/dars-nic-616054-m4c8k/ (accessed [date]).
This address stays the same, but the page is rebuilt with each monthly edition, so the citation names the edition it shows. Every edition's data is kept in the facts store.
Source: datausesregister_september2026.xlsx, September 2026 edition of the NHS England Data Uses Register. Search that workbook for DARS-NIC-616054-M4C8K to see the original rows.