Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

EPR MDF Core Capability

CRC-01.11 - Third Party Exporting

As a Healthcare or Clinical Professional,

I want to export data in an accessible format to authorised third parties

And produce hard copy documents with appropriate numbering and watermarks,

So that I can share information with third parties who do not necessarily have digital access

Acceptance criteria 1:

Given a user has the correct permissions,

When exporting or printing hard-copy documents,

Then the information is in an accessible format and hard copies have numbering and watermarks.

Acceptance criteria 2:

Given the patient is identified using their NHS number,

When accessing or sharing patient data,

Then all patient data must be associated with an NHS number.

Acceptance criteria 3:

Given that patient data is being processed,

When accessing or sharing patient data,

Then all appropriate information governance standards will be adhered to.

Acceptance criteria 4:

Given the need to share data with third party systems,

When sharing data,

Then the appropriate minimum dataset(s) must be used.

Additional Detail

  • Data export in an accessible format (taking into account individual trust preferences) for use by third parties (including patients) without access to the system – for example automated extracts of data for Subject User Access Requests (including redaction of entries where required).

  • This includes production of hard copy documents with appropriate page numbering and watermarks to ensure completeness and labelled “NHS Confidential Personal Data about a patient” where appropriate.

  • An appropriate digital protection impact assessment (DPIA) must be produced

Application Function

Description

AF341 Digital Presentation of Handover Data

The system provides a digital presentation of patient data including context as part of a digital handover to enable the sharing of relevant patient data without the need for paper based handover notes

AF350 Provide Pseudonymised Patient Data

When sharing data with external data the system must provide the capability to de-identify, pseudonymize and re-identify records as required

Standards Compliance

  • STD086 The Data Security Standards

...