The issue of using patient data for secondary business use has been an area of concern for many, prompting some people to question its impact on patient confidentiality and privacy.
Last week, a new NHS computer system came under attack from privacy experts after it was revealed that the system would share the medical history of millions of patients with drug companies without seeking proper consent.
The system, the Secondary Uses Service (SUS), is part of the NHS’s National Programme for IT and significantly expands the amount of medical data that commercial and academic researchers can access. As the data is usually anonymised, patients are not asked for consent.
However, Dr Ian Brown of the Oxford Internet Institute said that NHS rules mean participants in research can be “trivially” re-identified, especially as some of the “anonymised” data also includes the unique NHS number for each patient. It has been suggested that these weak privacy policies could be illegal under European data protection laws.
Clearly, Trusts need to take patient confidentiality seriously and have an effective method for upholding privacy policies and for meeting legal guidelines.
With Ardentia’s Pseudonymisation tool, Trusts can safely undertake secondary use of patient data. The solution allows users to configure pseudonyms to be specific to an organisation, a group of users, or an individual, and ensures that only authorised personnel have access to identifiable data. By removing key identifiers that may associate a treatment pathway with a particular individual, Trusts can uphold patient confidentiality and avoid incurring legal penalties.
You can find out more about the solution here.



