Your GP uses your data to provide the best care that they can for you. As part of this process, your GP will use your personal and health data to undertake risk stratification, also known as case finding.
Risk stratification tools use a mix of historic information about patients such as age, gender, diagnoses and patterns of hospital attendance and admission as well as data collected in GP practices.
NHS Digital provides information, identifiable by your NHS Number, about hospital attendances. GP Practices provide information from GP records also identifiable by your NHS Number. Both sets of information are sent via secure transfer to the risk stratification system where they are immediately pseudonymised and linked to each other. The risk stratification system uses a formula to analyse the pseudonymised data to produce a risk score. These risk scores are available to the GP practice you are registered with, where authorised staff, responsible for providing direct care to you are able to see these scores in a format that identifies you. This will help the clinical team make better decisions about your future care, for example, you may be invited to attend your GP practice for a review or if a referral to a new service is more beneficial, this will be discussed with you. The ICB is provided with reports containing aggregated data, which doesn’t identify you, to ensure that we are commissioning and planning for these services as required by the population we serve.
To identify those patients individually from the patient community registered with your GP would be a lengthy and time-consuming process which would by its nature potentially not identify individuals quickly and increase the time to improve care.
Your GP surgery uses the services of two health partners, North of England Commissioning Support Unit (NECS) and Prescribing Services Ltd (PSL) to identify those most in need of preventative or improved care. This is arranged by the ICB who will not at any time have access to your personal or confidential data. They act on behalf of your GP to organise this service with appropriate contractual and security measures only.
NECS and PSL will process your personal and confidential data. Typically, this will process your data using indicators such as your age, gender, NHS number and codes for your medical health to identify those who will benefit from clinical intervention. Processing takes place automatically, without human or manual handling. Data is extracted from your GP’s clinical computer system, automatically processed and only your GP is able to view the outcome, matching results against patients on their system.
The ICB has implemented strict security controls to protect your confidentiality and recommend this as a secure and beneficial service to you. However, if you wish, you can ask your GP for your data not to be processed for this purpose and your GP will mark your record as not to be extracted so it is not sent to NECS & PSL for risk stratification purposes.
 See Appendix C ‘Related Links and Documents’ – Risk Stratification
 See Appendix B ‘Key Definitions’ – Pseudonymised Data
 See Appendix B ‘Key Definitions’ – Aggregated Data