De-identified DIDS information may be used by NHS England to meet the organisations statutory functions.
Diagnostic Imaging Data Set (DIDS)
Summary
Why and how we process your data in the Diagnostic Imaging Data Set data collection and your rights.
| Controller | NHS England |
| How we use the information (processing activities) | DIDS is intended to deliver robust, comprehensive, nationally consistent and comparable person-based information on activity to support a variety of secondary use purposes. These include:
There may also be requests to utilise DIDS data for uses cases which might be considered as enabling direct care in the future, for example identifying of specific patient cohorts to participate in healthcare initiatives of clinical trials. Where such requests occur, these are considered under a separate DPIA applicable to each specific use case. |
| Does this contain sensitive (special category) data such as health information? | Yes |
| Who are recipients of this data? |
Data from this Diagnostic Imaging Data Set may be shared with organisations for planning, commissioning and research purposes where there is a benefit to health and social care. It may also be shared with organisations where it is necessary for them to meet their statutory responsibilities. Organisations will need to apply and gain approval through our Data Access Request Service (DARS), and if approved, they must sign a Data Sharing Framework Contract and a Data Sharing Agreement. |
| Is data transferred outside the UK? | This data is not transferred out of the UK |
| How long the data is kept | Collected data will be retained for 20 years and will be subsequently reviewed if there is an ongoing requirement still to retain after this point. We keep your data in accordance with the Records Management Code of Practice 2021. |
| Our lawful basis for holding this data | Legal obligation |
| Your rights |
|
| How can you withdraw your consent? |
NHS England will respect the national data opt-out where confidential patient information is to be disseminated for research or planning purposes. The national data opt-out will not apply to the flow of data from providers to NHS England as a Data Provision Notice has been issued on them, with which they are legally required to comply. |
| Is the data subject to decisions made solely by computers? (automated decision making) | No |
| Where does this data come from? | The organisations in scope for submitting this data are all directly provided and/or commissioned providers of NHS imaging diagnostic tests, including but not limited to: all radiology departments, community-based providers of diagnostic services, independent sector providers or social enterprise |
| The legal basis for collecting this data | Directions – Diagnostic Imaging Article 6(1)(c) the processing is necessary for compliance with a legal obligation to which the Controller is subject (the Direction). Article 9 2 (h) Processing is necessary for the provision of health care or treatment, and for the management of health care systems or services. |