Data Information Systems (Hansard, 11 February 1992)

§ Mr. Cohen
To ask the Secretary of State for Health whether he will list the items of data that comprise the contract minimum data set; what representations his Department has received as to whether the current procedures surrounding the security of the data set are adequate; what plans he has to indemnify health authorities should an individual be awarded compensation for the damage caused by breach of security; and if he will make a statement.

§ Mr. Dorrell
The data items that comprise the general in-patient contract minimum data set are set out in the list.
Contract minimum data set general in-patients

Contract Details

Contract Identifier

Patient Details

Patient's name

463W

Patient's Usual Address

HA Code (Of Residence)

Sex

Marital Status

Birth Date

Code of GP (Registered)

Provider Spell Details

Code of GP (Referring)

Code of GP Practice

Category of Patient

Decided to Admit Date

Start Date (Hospital Provider Spell)

Admission Method

Duration of Elective Wait

Intended Management

Source of Admission

End Date (Hospital Provider Spell)

Discharge Method

Discharge Destination

Patient Classification

Chronically Sick or Disabled

Consultant Episode Details

Local Patient Identifier

Episode Number

Start Date (Consultant Episode)

End Date (Consultant Episode)

Overseas Visitor Status

Specialty

Specialty (Shared Care Episode)

Code of Consultant

Code of Consultant (Shared Care Episode)

Patient Diagnosis:

Primary

Subsidiary (if necessary)

(1-5)

Patient Operative Procedure:

Primary Operation

Procedure Code

Date

Member of Consultant Firm (Surgeon)

Member of Consultant Firm (Anaesthetist)

2nd Operation—4th Operation

(As above)

The Department has not received any representations specifically about the procedures for the secure handling of the contract minimum data set. Ensuring the security of personal health information is a prime concern of the Department of the medical profession and of NHS Managers. We are currently exploring whether steps need be taken further to strengthen security in the handling of those data sets.
There are no plans to indemnify health authorities in the event of compensation being awarded as a result of a breach of security.

§ Mr. Cohen
To ask the Secretary of State for Health what data information systems his Department has(a) agreed and (b) been consulted about with a view to taking part in; what are the criteria for inclusion in such systems; whether they will be linked to (i) the Police National Computer and (ii) other computer systems; what data protection provisions apply to them; and if he will make a statement.

§ Mr. Dorrell
The Department has a large number of data information systems. It would not be possible to fully document these other than at disproportionate cost. Where appropriate departmental systems are registered464W under the Data Protection Act 1984. Where there is a requirement to link to other computer systems the provisions of the Act are taken fully into account.