[{"command":"settings","settings":{"pluralDelimiter":"\u0003","suppressDeprecationErrors":true,"ajaxPageState":{"libraries":"eJxLzi9K1U8pKi1IzNFLyUzMyU_XS8xKrNApSCxKTC9KLMgohskiRPRK8wpKk3IyizNSUwAiWxkF","theme":"upd","theme_token":null},"ajaxTrustedUrl":[],"user":{"uid":0,"permissionsHash":"22dcdfba032631beed6427d0f24bf0844dfb9bda62deaafe5cec74da1a30ffe0"}},"merge":true},{"command":"add_css","data":[{"rel":"stylesheet","media":"all","href":"\/sites\/default\/files\/css\/css_vc5cLuh4rhAN6znJCXfU-8zQmHR1yNnv8GD6Q85yEqA.css?delta=0\u0026language=en\u0026theme=upd\u0026include=eJxLzi9K1U8pKi1IzNFLzEqs0ElGEkjJTMzJT9cpSCxKTC9KLMgohkkgRPRK8wpKk3IyizNSUwBitB2R"}]},{"command":"add_js","selector":"body","data":[{"src":"\/sites\/default\/files\/js\/js_XNDFJOhCzYAJD-zg18t5sJXWQM2miB78WMDzbwhPN0g.js?scope=footer\u0026delta=0\u0026language=en\u0026theme=upd\u0026include=eJxLzi9K1U8pKi1IzNFLyUzMyU_XS8xKrAAAajEI0Q"}]},{"command":"openDialog","selector":"#drupal-modal","settings":null,"data":"\n          \u003Ca href=\u0022#\u0022\u003E\u003C\/a\u003E\n      \n  \u003Cp\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cspan\u003EThe Health Service (Control of Patient Information) Regulations 2002 were introduced under the Health and Social Care Act 2001, to allow \u2018essential\u2019 NHS data activities that relied on access to Confidential Patient Information (CPI) to continue lawfully, overriding the Common Law Duty of Confidentiality. These powers are now covered in section 251 of the NHS Act 2006.\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/p\u003E\n\u003Cp\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cspan\u003EThe first part covers two specific areas of work requiring access to CPI, and allows for CPI to be processed by specified organisations in connection with this work on an ongoing basis:\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/p\u003E\n\u003Cul\u003E\n\u003Cli\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cspan\u003EWork relating to the diagnosis and treatment of neoplasia (cancer registries), e.g. to monitor the incidence of cancer (which is now done by the National Disease Registration Service)\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/li\u003E\n\u003Cli\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cspan\u003EWork to tackle communicable diseases and other threats to public health (which is now done by the UK Health Security Agency)\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/li\u003E\n\u003C\/ul\u003E\n\u003Cp\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cspan\u003EThe second part covers the provision for approval to be granted for time-limited access to CPI for (other) medical purposes, e.g. medical research and other activities like auditing services. These approvals can be granted by the Health Research Authority (in the case of research), or the Secretary of State for Health and Social Care (in the case of any other purpose). It also gives the Secretary of State powers to issue COPI notices requiring the processing of patient information. For instance, during the COVID-19 pandemic, the Secretary of State issued a \u003Ca href=\u0022https:\/\/digital.nhs.uk\/coronavirus\/coronavirus-covid-19-response-information-governance-hub\/control-of-patient-information-copi-notice\u0022\u003ECOPI notice\u003C\/a\u003E to NHS Digital to enable the sharing of confidential patient data among the health service and other governmental organisations to help the Government respond to the crisis.\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/p\u003E\n\u003Cp\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cspan\u003EIn making decisions, the Health Research Authority and Secretary of State are advised by the Confidentiality Advisory Group (CAG).\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/p\u003E\n\u003Cp\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cspan\u003E\u003Cspan\u003EThe Government has suggested changing these regulations in the Data Saves Lives strategy. UPD will provide an update if and when this becomes clearer. \u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/span\u003E\u003C\/p\u003E\n\n\n      \u003Ch3 class=\u0022modal--field-link--title\u0022\u003EFurther reading\u003C\/h3\u003E\n\u003Cul class=\u0022modal--field-link--list\u0022\u003E\n  \u003Cli\u003E\u003Ca href=\u0022https:\/\/www.legislation.gov.uk\/uksi\/2002\/1438\/made\u0022\u003EThe Health Service (Control of Patient Information) Regulations 2002\u003C\/a\u003E\u003C\/li\u003E\n  \u003Cli\u003E\u003Ca href=\u0022https:\/\/www.hra.nhs.uk\/about-us\/committees-and-services\/confidentiality-advisory-group\/guidance-confidentiality-advisory-group-applicants\/health-service-control-patient-information-regulations-2002-regulation-5-decision-procedure-research-applications\/\u0022\u003EApplication of the Regulations for medical purposes including research\u003C\/a\u003E\u003C\/li\u003E\n  \u003Cli\u003E\u003Ca href=\u0022https:\/\/understandingpatientdata.org.uk\/upd\/modal\/1120\u0022\u003EOur explainer on Section 251 of the NHS Act 2006\u003C\/a\u003E\u003C\/li\u003E\n  \u003Cli\u003E\u003Ca href=\u0022https:\/\/digital.nhs.uk\/coronavirus\/coronavirus-covid-19-response-information-governance-hub\/control-of-patient-information-copi-notice\u0022\u003ECovid COPI Notice\u003C\/a\u003E\u003C\/li\u003E\n  \u003Cli\u003E\u003Ca href=\u0022https:\/\/transform.england.nhs.uk\/information-governance\/the-laws-that-health-and-care-organisations-rely-on-when-using-your-information\/\u0022\u003ENHS England web page summarising legislation relevant to health information\u003C\/a\u003E\u003C\/li\u003E\n  \u003Cli\u003E\u003Ca href=\u0022https:\/\/www.legislation.gov.uk\/ukpga\/2001\/15\/section\/60\/enacted\u0022\u003EHealth and Social Care Act 2001\u003C\/a\u003E\u003C\/li\u003E\n  \u003Cli\u003E\u003Ca href=\u0022https:\/\/www.hra.nhs.uk\/documents\/3481\/cag-register-research-master-2021_fcZfPvN.xlsm\u0022\u003EList of applications approved by the Secretary of State or the Health Research \u2026\u003C\/a\u003E\u003C\/li\u003E\n  \u003Cli\u003E\u003Ca href=\u0022https:\/\/www.hra.nhs.uk\/about-us\/committees-and-services\/confidentiality-advisory-group\/confidential-patient-information-and-regulations\/\u0022\u003EHealth Research Authority\u2019s web page on confidential patient information\u003C\/a\u003E\u003C\/li\u003E\n\u003C\/ul\u003E\n\n    ","dialogOptions":{"width":"70%","height":"auto","dialogClass":"highlight-modal-dialog","closeOnEscape":"true","closeText":"Close text","buttons":{"button1":{"text":"Close","id":"close-button","onclick":"jQuery(\u0027.ui-icon-closethick\u0027).click()"}},"modal":true,"title":"Health Service (Control of Patient Information) Regulations 2002 (England and Wales)","classes":{"ui-dialog":"highlight-modal-dialog"}}}]