Author: Sarah
Does a PCN need to do a DSPT?
We have received a few queries about whether PCNs need to complete a DSPT assessment. The DSPT support section says […]
Complaints process and the DUAA
We set out here some of the requirements of the recently approved Data Use and Access Act (DUAA): The Data […]
GP reprimand from ICO
The ICO have taken action against Staines Health Goup GP surgery after excessive medical history of a terminally ill patient was sent to […]
Insurance reports guidance
The Access to Medical Reports Act 1988 gives individuals specific rights over medical reports written about them by a doctor […]
GMC email scam
We have been asked to pass on the following message: We have received a number of reports regarding phishing emails […]
January 2026 update
AI General Reminders Court Orders The Freedom of Information Act – N3i Information Governance
2026 Police request form
The National Police Chiefs Council (NPCC) have released an updated national form for requesting 3rd party materials (this form supersedes […]
Redaction for online viewing
We have recently received several emails from practices reporting that patients have been able to view information online that should […]
Texting, emailing and messaging patients and service users – NHSE guidance
NHSE have released guidance for contacting patients by text or email. It includes guidance for patients who are concerned they […]
Proxy access for health and care services
NHSE published the Proxy Information Standard in 2025, providing updated guidance about proxy access to records. There is an expectation […]
Ambient Voice Technology Self-Certified Supplier Registry
NHSE have recently published a registry of AVT suppliers (also know as ambient scribes). The registry is designed to support […]
December 2025 update
General Blog – Reflective practice – N3i Information Governance – This provides guidance for patients to help them understand how […]
View or update registers
Please click here to access or update the Caldicott Guardian, Senior Information Risk Owner, Information Asset Owner registers and the […]
Reflective practice
Please see this recent publication by NHSE regarding reflective practice. The guidance helps patients and service users understand how their […]
November 2025 update
General Blog – SARs update – Considering ‘reasonable and proportionate’ searches, as outlined by the new Data Use and Access […]
DCB0160 Clinical Risk Management for AI Products – Support for Practices (new products added 20.05.26)
In response to the requirement for a DCB0160 (Clinical Risk Management) prior to deploying AI products, N3i and the ICB […]
SARs update
There is an increasing concern about the level of Data Subject Access Requests that many healthcare organisations are receiving, driven […]
October 2025 update
General Blog – iConnect – please see our update that we sent to all practices. Apologies if this went to […]
iConnect – update
We understand that iConnect have reissued their documentation to practices after confirming further assurances regarding their DTAC and DSPT. The […]
September 2025 update
General iConnect – We have received a template of a more comprehensive DPIA from iConnect and are just waiting for […]
Updated AI procurement process and AI evaluation document
In line with the latest guidance from NHS England and HNY ICB, we have updated our AI evaluation document to […]
OpenSAFELY – practice action
NHS England have issued a Data Provision Notice (DPN) that legally requires GP Practices to provide the OpenSAFELY Data Analytics […]
August 2025 update
Blog – iConnect – We are still waiting for further assurances around the use of iConnect and will email you […]
LPA digital service
People who have a Lasting Power of Attorney (LPA) often bring a document to the surgery so a copy can […]