5.0 Health data management

Framework structure

Primary domain 5, health data management, is shown in this section.

Data and its management form the foundation of more advanced technologies and methods. Various digital healthcare systems and AI models are dependent on the data that is available to them. The management and processing of healthcare data is therefore foundational to the functioning of these more advanced systems and technologies. Data drives and underpins the accuracy of algorithms; analysis methods and tools used to make data derived or assisted decisions. This includes where and how data are stored as well as data-flows and how they are applied to various pathways (for example, patient journeys). We all share a responsibility to ensure the data quality throughout these processes from initial collection and storage through to its application in systems and services.

5.1 Data management and processing

An understanding of data stewardship is important to ensure that good quality data is used as input for these systems to generate an appropriate output. This includes awareness of data sharing, governance and regulatory issues as well the more technical aspects of data storage, security and processing.

5.1.1 Data collection and context

How data is collected and the context of data is vital for interpreting the output of data analysis methods and deriving useful and actionable insight form data.

Capability statement - I am aware of different sources of health and social care data (for example, Office for National Statistics (ONS) data, census data, patient registries, hospital episode statistics) and how to access them, including ethical and information governance requirements

Archetypes:

  • Shaper
  • Driver
  • Creator 
  • Embedder
  • User

Capability statement - I am proficient in the use of standardised, validated tools for data collection and extraction, related to my area of specialism

Archetypes:

  • Shaper
  • Driver
  • Creator
  • Embedder
  • User

Capability statement - I am proficient at entering data into digital systems and devices accurately, completely and correctly and recognise the importance of this for data-driven digital healthcare

Archetypes:

  • User

5.1.2 Data storage

How data is stored securely and its longer term retention is important for the maintenance and accessibility of data as well as the speed and ease of data retrieval and sharing.

Capability statement - I am aware that data can be stored locally (local storage on servers) or remotely (for example, cloud storage requiring an internet connection)

Archetypes:

  • Shaper
  • Driver
  • Creator
  • Embedder

Capability statement - I am aware of different systems used to store health and clinical data (for example, Electronic Health/Medical Records, registries, patient generated data sources, genomics databases, secondary data sources) and the impact of this on subsequent data analysis and access (for example, retrieving data from different database systems)

Archetypes:

  • Shaper
  • Driver
  • Creator
  • Embedder
  • User

5.1.3 Data visualisation and reporting

Tailoring the presentation and communication of data to multiple stakeholders with different levels of data literacy is important for decision making, research and resource allocation.

Capability statement - I am proficient at interpreting information presented in a variety of commonly used visualisations (for example, bar charts, histograms, pie charts, scatter plots)

Archetypes:

  • Shaper
  • Driver
  • Creator
  • Embedder
  • User

Capability statement - I can use interactive data dashboards to view summaries of data in my domain of expertise

Archetypes:

  • Shaper
  • Driver
  • Creator
  • Embedder
  • User

5.1.4 Data processing and analytics

To extract actionable insights from data it must first be processed and analysed. This involves transforming data into a format where analysis methods may be applied and applying these methods with an understanding of which approach to apply based on the characteristics of the data and the intended goals.

Capability statement - I am aware of the importance of data provenance, data transparency and audit

Archetypes:

  • Creator
  • Embedder

Capability statement - I have an awareness of information governance processes and procedures when dealing with organisations external to the NHS and adhere to local guidance when dealing with external entities

Archetypes:

  • Creator
  • Embedder

5.2 Data/cyber security

To ensure public trust and to meet legal requirements, health and clinical data should be protected from loss (or leakage), theft and attack while being processed, stored or shared.

Capability statement - I abide by the organisational regulations and guidelines aimed to prevent data loss and theft, including when data is being stored and transferred

Archetypes:

  • Shaper
  • Driver
  • Creator
  • Embedder
  • User

Capability statement - I understand and comply with cybersecurity standards in my organisation by keeping my training record up to date

Archetypes:

  • Shaper
  • Driver
  • Creator
  • Embedder
  • User

Capability statement - I am able to access and act on requirements communicated to me about new security threats (for example, emails from IT personnel asking me to carry out a certain action or be aware of particular threat)

Archetypes:

  • Shaper
  • Driver
  • Creator
  • Embedder
  • User

5.2.1 Data privacy and confidentiality

Health and social data contains sensitive information about individuals. The principles of privacy and confidentiality are important for maintaining and improving public trust in organisations collecting and processing data.

Capability statement - I am aware of the need to maintain confidentiality and privacy of health and social care data at all times respecting the data subjects right to privacy

Archetypes:

  • Shaper
  • Driver
  • Creator
  • Embedder
  • User

Capability statement - I always ensure that the data subject is informed of the reasons why data is collected, stored and who will have access to their data and for what purposes

Archetypes:

  • Creator
  • Embedder

Page last reviewed: 14 February 2023
Next review due: 20 February 2024