ECRI Institute, one of the leading patient safety and medical technology research organizations, places health technology cybersecurity at the top of its just-released 2019 Top 10 Health Technology Hazards.
STPs, GDEs and GDPR: the UK Health Show
The future of sustainability and transformation partnerships, the digitisation of the NHS, and the ‘oncoming train’ of new data protection legislation, were all at the forefront of debate at the UK Health Show 2017
Returning to Olympia London, and welcoming more than 4,000 attendees from across health and social care, the second edition of the UK Health Show took place on 27 September. The event incorporated the Healthcare Efficiency through Technology and Commissioning in Healthcare conferences, alongside the more recent additions Cyber Security in Healthcare and Procurement in Healthcare.
Across the four events, visitors got to hear from some of the biggest names at the Department of Health, NHS England and NHS Digital, while networking with more than 150 leading suppliers and vendors on the exhibition show floor.
In this post show review, Lyn Whitfield of UK Health Show PR partner, Highland Marketing, looks at three of most popular topics: Sustainability and Transformation Partnerships (STPs), Global Digital Exemplars (GDEs) and the General Data Protection Act (GDPR), which will be enforced from May 2018.
STPs evolve in uncertain legislative climate
Forty-four STPs have been set-up to take forward ideas in the Five Year Forward View; the plan issued in October 2014 to close a gap between NHS funding and demand that could reach £30 billion by 2020-21 without action. But some have already moved on to create ‘accountable care systems’; areas in which health and social care will work together on integrated care services and new ways to fund them.
David Smith, the chief executive of NHS Oxfordshire Clinical Commissioning Group, said two ACSs have been set up in his STP area, and that another was being developed.
He said: “Given we have got these, it does raise the question: what is the role of the STP?” It’s worth asking, because a year ago we were being asked by regulators what we were doing as an STP. But our line was always that transformational change would happen at a local level.”
Smith said there was no doubt that some planning and funding functions would need to be carried out at a higher level; such as specialised commissioning. But he warned against creating a new hierarchy ‘in which we get NHS England regulating STPs, and STPs regulating ACSs, and ACSs overseeing acute trusts – because that will not work’.
Dr Anita Donley, the chair of the Mid and South Essex Success Regime, agreed. She said: “We need to sort out regulation in the new model. We can’t break the butterfly of transformation on the wheel of accountability.”
The issue of how the health and care system will be organised and regulated in the future is vexed because the NHS is trying to introduce the Five Year Forward View’s ideas without legislation to repeal the Health and Care Act 2012.
At the start of the STP session, Malcolm Grant, chair of NHS England, acknowledged that it had been drawn up by former health secretary Andrew Lansley in a very different era; one in which independent trusts were supposed to compete for business from clinical commissioning groups.
The Conservatives promised new legislation in their last general election manifesto. However, the close outcome of the general election and the demands of Brexit have made this impossible. Instead, Grant said policy makers were ‘making old legislation serve new ends’. He also said NHS England is working on a package of measures to support the reform agenda, including a ‘one-stop regulatory model’ with NHS Improvement and the CQC, ‘new, devolved funding packages’, and help for staff to develop ‘new relationships’ with emerging structures.
Grant told the show he was comfortable with all this. he said: “If we went to Parliament, we would be concerned that we would close down some of our options. In some ways it [the legislative position] is unsatisfactory, but this [the reform agenda] is all about relationships, so it is also an opportunity.”
GDEs will impact the whole NHS
The Global Digital Exemplars programme is not just about trusts but about ‘the whole NHS’, Alex Chaplin, programme director at NHS Digital, told the Healthcare Efficiency through Technology conference stream. The programme was set up last year following a review of NHS IT by US ‘digital doctor’ Professor Robert Wachter, but it has been criticised for focusing on a handful of large trusts, most of which are running US electronic patient record systems.
To date, 16 acute GDEs, seven mental health GDEs, and 18 acute ‘fast followers’ have been announced, with seven mental health fast followers to come. But Chaplin said the programme was really about ‘creating a blueprint that can be shared with other trusts’ and ‘empowering them to deliver world class healthcare’.
His comments were echoed by Will Smart, NHS England’s chief information officer, during a panel debate on how the GDEs will ‘capitalise on their promised £100 million pot of funding.’ He said some of the GDEs themselves ‘will have a long way to go’ over the next two years, but the fast followers and the blueprints should be used by other trusts ‘to accelerate their digital journey’.
He also urged trusts to start thinking about the GDE programme in terms of clinical change. He said: “We spend too much time talking about technology. I want people to think about the clinical models [in use at the GDEs]. I want them to look for the clinical impact that will get them to where they want to go. This is all about sharing lessons in a very fragmented system.”
Speakers from trusts already involved in the programme said they were already moving in this direction. Gareth Thomas, the chief clinical information officer at Salford Royal NHS Foundation Trust, said it was focused on three areas: working with clinicians to digitise stroke, dementia and other ‘early adopter’ pathways; making this kind of work ‘business as usual’ for the trust; and extending it to other organisations.
He said: “We want to get digital embedded with clinicians. It is not a nice to have, it is key to everything we do. We are working very hard within NHS England, and with NHS Digital colleagues, to build an architecture that will allow them to move data within regional communities of three million to five million people.”
NHS told to prepare for GDPR
The government has published the Data Protection Bill that will incorporate the General Data Protection Regulation into UK law, UK Health Show delegates were told. Stacey Egerton, a lead policy officer at the Information Commissioner’s Office, said the bill would replace the Data Protection Act 1998.
However, she also stressed that it would be seen as an ‘evolution’ of the familiar data protection legislation, rather than as a break from it. The GDPR is designed to strengthen and harmonise data protection laws across Europe. It was passed by the EU Parliament in April 2016, but organisations have been given two years to prepare for its implementation.
The directive will be enforced from 25 May 2018, after which organisations could face fines of up to 20 million Euros for the biggest infringements. The scale of the fines has alarmed many organisations. Noel Gordon, the chair of the Healthcare Efficiency through Technology strand of the UK Health Show, described it as a ‘train coming towards us fast’.
He said: “Boards cannot get enough of the GDPR, because it is so complex, and it is going to have such a huge impact on the NHS.”
Egerton allowed that the GDPR contains some new provisions. She said organisations will now be required to appoint a data protection officer, and to ‘build privacy in at the start of projects’ instead of treating it as an after-thought. Specifically, she said organisations will be required to carry out a data protection impact assessment, and to take advice from the ICO before proceeding with high-risk projects.
Egerton said NHS organisations should also check the legal basis on which they are holding and processing personal information; and warned that they would not be able to rely on the existing defence of ‘legitimate interest’ in future. Perhaps surprisingly, however, she suggested that organisations should not start with ‘consent’ because the GDPR sets a high-bar for obtaining this, and ‘there are other legal routes available to you’.
Egerton also shared that the ICO was working with its European counterparts to provide the best-possible advice on the new provisions such as, a proposal in the latest Caldicott Review of NHS information governance and security to make the re-identification of pseudonymised data an offence. This should help the government to build confidence in NHS England’s plans for regional ‘data lakes’ or digital innovation hubs, which will encourage the collection and use of information across populations of three-five million people.
The UK Health Show will return on 25-26 September 2018 to ExCeL London.