Norfolk and Waveney Projects and Sharing Initiatives
This page can be used to check the DPO approval status of particular projects and changes. If you require further information, please contact your DPO directly.
COVID-19 related projects are marked with a dark red 'COVID' label on the right hand side.

Global Diagnostics

Raised query about why Joint Controllers to IG@globaldiagnostics.co.uk. Asked L to confirm that he is happy to amend . L emailed to say they are looking into altering the agreement.

Practice Unbound (Here)

Practices should ensure they sign the data processing contract provided by Practice Unbound

Ear Clearance Microsuction

Possibly no longer active- made enquiries

West Norfolk Health Improved Access

Practices should ensure they hold a copy of Improved Access Information Sharing Protocol Dec 19 and that it is available for relevant staff to follow.

Dementia Audit EQUIP Project

Practices should ensure they hold a copy of the data processing agreement from NE Essex CCG and follow instructions allowing access to clinical system for extraction

West Norfolk Health 24 hr ECG Service

Practices should ensure that they hold a copy of the ECG Service Information Sharing Protocol Dec 19 and that it is available for relevant staff to follow 

North Norfolk Enhanced Care in Care Homes

Practices should ensure that they hold a copy of the ECCH Information Sharing Protocol and that it is available for the relevant staff to follow

North Norfolk - Enhanced Care in Care Homes (Delirion)

Outstanding risks on DPIA

Footfall Online Consultancy (Silicon Practice)

Ensure your practice has signed processing contract and that you notify your DPO so that Silicon Practice can be added to your provider list.

NNPC / EECH MSK Service

Practices should ensure they hold a copy of the MSK Information Sharing Protocol and it is available for staff to follow.

WN Health - Referral Support Service (RSS) – Opticians

Practices should ensure they hold a copy of the WNH RSS Information Sharing Protocol Dec 19 and it is available for staff to follow.

NNPC Hot Hub

Practices should ensure they hold a copy of the  NNPC Hot Hub Information Sharing Protocol May 20 and it is available for staff to follow.

NNPC Home Visiting Service

Practices should ensure they hold a copy of the  NNPC Home Visiting Services Information Sharing Protocol May 20 and it is available for staff to follow.

Norwich PCN Cross Organisational Working

Practices may provide permission to One Norwich Practice to access their clinical system for activities where they need support. Access can be provided on a 'just in case' basis to allow for swift mobility when support is required. Ensure that staff have a copy of the  Norwich PCN Cross Org Working Protocol May 20 and it is available for staff to follow.

NNPC Virtual Clinical Teams

Practices should ensure they hold a copy of the  NNPC Virtual Clinical Team Information Sharing Protocol May 20 and it is available for staff to follow.

One Norwich Practices Home Visiting Service 

This existing service has been enhanced allowing One Norwich clinicians to undertake home visiting. Ensure that staff have a copy of the  One Norwich Home Visiting Service Protocol May 20 and it is available for staff to follow.

NSFT & CAHMS Learning Disabilities Service

Practice should ensure they hold a copy of the Tier 2 Information Sharing Protocol and it is available for relevant staff to follow.

Waveney Rough Sleepers Project

Practice should ensure they hold a copy of the Information Sharing Protocol V2 and it is available for relevant staff to follow.

Cavell Court Care Home Project

Practice should ensure they hold a copy of the Cavell Court Information Sharing Protocol and it is available for relevant staff to follow.

Pure Physio Project

Practice should ensure they hold a copy of the Information Sharing Protocol and it is available for relevant staff to follow.

Oxford University Research API extract EMIS

Practice should ensure they accept the extract for the University of Oxford to undertake extended surveillance of COVID-19

Practice should ensure opt out codes are observed and posters and contract are requested prior to extraction. These should be sent to DPO for review before extraction.

CPRD Data Extraction

NNPC CareDoctR

Queries raised - awaiting response

North Norfolk Surgery Pods

Outstanding risks on DPIA

North Norfolk Care Home Swab Testing

Practice should ensure they hold a copy of the Information Sharing Protocol and it is available for relevant staff to follow.

Specific privacy leaflets have been produced to support patient rights.

Virtual Group Consultations

Serious concerns about privacy implications

Rainbird / OH Service

Practices must provide all staff with the privacy notice supplied via the CCG

Norwich - Care Homes at Scale

Norfolk Coroner Portal

North Norfolk Asylum Seeker Project

Practice should ensure they hold a copy of the Information Sharing Protocol and it is available for relevant staff to follow.

Specific privacy leaflets have been produced to support patient rights.

Medicines Management Solutions (MMS)

Practices should ensure that MMS and the practice have put in place the MMS Processing Contract with the particulars of their project included. 

The following mitigation steps must be taken;

·       Practice must complete a random access audit during the project

·       Practice must place a news ticker on the website telling patients about medication reviews and the involvement of MMS

·       Patients shall be aware of any changes to their medical record resulting from the review.

·       MMS® will produce a final report of any changes and amendments made to the system.

·       Practice to confirm to MMS® their policy on leaving voicemails for patients and confirm how they must identify themselves to patients.

·       Practice must ensure that Smartcard access granted is appropriate for the service being delivered and based on the principle of ‘least privilege’.

 The impact assessment can be reviewed here

Arissa UK Asthma Study

Practices are asked to sign the agreement for Harvey Walsh to extract the data set and the OPC agreement for data extraction also.

Practices should ensure that they display the poster provided by the Arissa team and keep the leaflets in reception where further information is requested by patients. 

Opt outs will be honoured by those performing the extractions.​

The project has CAG approval.

Smart POD Project 

Practices should ensure they have signed the updated processing contract provided by the CCG and hold a copy of the Information Sharing Protocol and it is available for all staff to follow.

Health Intelligence Diabetic Eye Screening

Practices should ensure they have signed the data supply, access and sharing agreement. 

PINCER PRISM Project

Project is approved at a national level. Local assurances obtained for outstanding concerns. Practices should notify DPO if identifiable data begins to be extracted.

A general data protection assessment has been carried out. Practices should provide the information provided in the DPO email to get further assurance.

Text Messaging Patients