Three-year managed Information Governance, clinical safety and data-security service for a specialist NHS trust's big-data transformation

Royal Brompton & Harefield NHS Foundation Trust (RBHT) is a leading UK provider of specialist cardiac and respiratory care, with a reputation for innovation and for adopting new technologies to improve patient care.

RBHT was implementing a clinical and corporate data warehouse and big-data analytics platform — described in the source material as a pioneering initiative in the NHS. Without governance, security, data quality and clinical safety designed in from the outset, the platform could not safely support routine clinical and corporate management, research analytics or payment-by-results data.

End-to-end data privacy, security, quality and clinical safety advice and management — from design and procurement through to User Acceptance Testing — together with trust-wide governance frameworks and day-to-day leadership of the governance teams.

1. 01

   Assess

   Worked with clinicians, technologists and corporate stakeholders to understand clinical, research, financial and regulatory requirements for the platform and the wider Trust.

2. 02

   Build

   Designed and implemented Clinical Safety, Cyber Security, IG, Compliance and Risk Management frameworks, policies and procedures, and the IG and security framework for the data platform.

3. 03

   Manage

   Managed the IG, Information Security, Data Quality and IT Training teams, the payment-by-results data quality process, incidents and ICO investigations.

4. 04

   Assure

   Conducted clinical safety audits and risk assessments, produced Clinical Safety Case Reports and hazard logs, and supported Toolkit compliance through to User Acceptance Testing.

Engagement phases: Assess · Build · Manage · Assure

• Clinical Safety, Cyber Security, IG, Compliance and Risk Management frameworks
• IG and security framework for the data warehouse and analytics platform
• Clinical Safety Case Reports and hazard logs
• Organisation-wide IG, Data Quality, Information Security and Safety policies, strategies and procedures
• Payment-by-results data quality process
• Incident and ICO investigation management records

Relevant to NHS trusts, research hospitals and HealthTech suppliers delivering data platforms, analytics or digital clinical systems that need managed IG, clinical safety and DSPT support.

Further evidence can be discussed subject to confidentiality and client permissions.