Common use of Persona Description Clause in Contracts

Persona Description. All access support / maintenance A system admin function, logging access requests, general house keeping of the system, support, maintenance and training All access analyst - architecture / syste A system wide analytics function where analytics and bespoke data flows are created for system wide use Break Glass access Access that provides all access to data in case of an emergency (this role may not be used) Leadership Managerial/Exec level access for users who will see aggregated data only without the authority to see patient level data Analyst Users who will build analytics for local use. Whether they can see patient identifiabale data depends on the organisation they work xxxxxx data sharing agreements. Access to identifiable data is applied using row level security on an organisational basis Direct Care Users who have a direct care relationship with a patient. Access is defined by Row level security being defined on an organisation level Analyst/Researcher Typically de-identified access using the deidentified data mart Analyst / Developer Third party access to data for a defined use case (e.g. Bespoke report building / data visualisations) delivered by a non Cipha stakeholder) Data Repositories Dashboards/ Reports/ Suite* Org Persona PID (Patient Identifiable data) Repository Pseudonymised data Repository Anonymised data Repository Enhanced Case Finding (PID) Enhanced Case Finding (Non-PID) Health Inequalities – Wider Determinants (PID) Health Inequalities – Wider Determinants (Non-PID) Xxxxx Xxxxxxx ACG Reporting Suite* (PID) Xxxxx Xxxxxxx ACG Reporting Suite* (Non-PID) Multimorbidity (PID) Multimorbidity (Non-PID) Data depth report (PID) Data depth report (Non-PID) Acute Leadership (Managerial/Exec level) x x x x x Acute Analyst (BI/ Information Analysts) x x x x x x x Acute Direct Care x x x x x CCG Leadership x x x x x CCG Analyst x x x x x x x CCG Direct Care x x x x x GP Leadership x x x x x GP Analyst x x x x x x x GP Direct Care x x x x x Local Authority/ Surrey County Counci Leadership x x x x x Local Authority/ Surrey County Counci Analyst x x x x x x x Local Authority/ Surrey County Counci Direct Care x x x x x Community Leadership x x x x x Community Analyst x x x x x x x Community Direct Care x x x x x Mental Health Leadership x x x x x Mental Health Analyst x x x x x x x Mental Health Direct Care x x x x x Ambulance Leadership x x x x x Ambulance Analyst x x x x x x x Ambulance Direct Care x x x x x Research Analyst/Researcher x Third Party Analyst / Developer x Voluntary sector partners Leadership x x x x x The data access capabilities of each of the Surrey Care Record role profiles is presented in the table below: l l l Annex D.2 – Opt-in/opt-out and Consent Model Individuals whose data is not being shared for direct care purposes will not be available to be processed for secondary uses, such as Population Health Management. Patients can opt out of having their data processed for secondary uses, such as Population Health Management, by: • Registering a NHS National Data Opt-out with NHS Digital • Registering a Type 1 Opt-out with their GP Practice Patients cannot opt-out of having their data processed for secondary uses, such as Population Health Management, once this has been anonymised in accordance with the ICO Code of Practice. The processing of persona data for secondary uses including, such as Population Health Management, is done on the basis of Implied Consent as this is undertaken by organisations that have a lawful basis to do this and the data subject has been made aware of the processing via Privacy Notices and other transparency information. Annex D.3 – Sharing Dataset Definitions (SCC – Children’s extract only) The table below provides detailed definitions for each of the categories of data that are sourced from Surrey County Council’s LCS system and presented for use through the Surrey and TVS Care Record. Data Set Data Item Demographics Person Identifier NHS Number Given Name 1 Family Name Birth Date Sex Code Sex Description Primary Address Line1 Primary Address Line2 Primary Address Line3 Primary Address Line4 Primary Address Line5 Primary Post Code Primary Email Address Primary Telephone Number Primary Mobile Telephone Number Interpreter Required Disabled Secondary Address Line 1 Secondary Address Line 2 Secondary Address Line 3 Secondary Address Line 4 Secondary Address Line 5 Secondary Post Code Deceased Deceased Date Language Code Restricted Person Consent Not Granted Given Name Alias Family Name Alias Person Purge Data Set Data Item Referrals Referral Identifier Referral Status Referral Requester Code Referral Requester Desc Referral Team Code Referral Team Description Referral Reason Referral Initial Status Date Referral Final Status Date Referral Purge Events Event Identifier Event Status Event Type Code Event Type Description Event Start Date Time Event End Date Time Referral Identifier Event Initial Status Date Event Final Status Date Event Purge Alerts Alert Identifier Alert Type Code Alert Type Description Alert Note Alert Status Alert Created By Code Alert Created By Description Alert Initial Status Date Alert Final Status Date Alert Purge Disability Disability Identifier Disability Type Code Disability Type Description Disability Note Disability Status Disability Initial Status Date Disability Final Status Date Disability Purge Data Set Data Item Related Person Person Identifier Person Relationship Code Person Relationship Description Person Relationship Flag Person Given Name Person Family Name Person Sex Code Person Sex Description Person Birth Date Primary Email Address Primary Telephone Number Primary Mobile Telephone Number Person AddressLine1 Person AddressLine2 Person AddressLine3 Person AddressLine4 Person AddressLine5 Person Post Code Person NHS Number Person NHS Number Status Person Identifier Person Status Person Initial Status Date Person Final Status Date Person Purge Practitioner Practitioner Identifier Practitioner Role Code Practitioner Role Description Practitioner Given Name Practitioner Family Name Practitioner Team Code Practitioner Team Desc Practitioner AddressLine1 Practitioner AddressLine2 Practitioner AddressLine3 Practitioner AddressLine4 Practitioner AddressLine5 Practitioner Post Code Practitioner Email Address Practitioner Telephone Number Practitioner Mobile Telephone Number Practitioner Status Practitioner Initial Status Date Practitioner Final Status Date Practitioner Purge Data Set Data Item Classification Classification Identifier Classification Type Code Classification Type Description Classification Details Classification Status Classification Start Date Classification End Date Classification Purge Annex D.4 – Sharing Dataset Definitions (all other sources) For information, the table below summarises the data available from other sources for viewing alongside data sourced from the general practice clinical systems in the Surrey Care Record. Organisation Data Category General Practice Person Details and Demographics Allergies Clinical Documentation Events Health Promotion Medications Preventative Procedures Problems Procedures Results Social / Family History Acute (data items may differ by organisation) Person Details and Demographics Allergies Diagnostic Tests Electronic Documents Emergency Attendance Inpatient Activity Inpatient Admission Waiting List Outpatient Activity Outpatient Referral Community and Mental Health Person Details and Demographics Alerts Allergies Care Plans Care Programme Approach (CPA) Data category Diagnoses XXXx Inpatient Admissions and History Mental Health Act Outpatient Appointments and History Referrals Risk Summary Safeguarding Service Planning Social Care Person Details and Demographics Alerting Assessment Associated People Carer Details XXXx Safeguarding Service Planning The table below shows additional data sets that may be available via the wider TVS Shared Care Record Programme: Data Field

Persona Description. All access support / maintenance A system admin function, logging access requests, general house keeping of the system, support, maintenance and training All access analyst - architecture / syste A system wide analytics function where analytics and bespoke data flows are created for system wide use Break Glass access Access that provides all access to data in case of an emergency (this role may not be used) Leadership Managerial/Exec level access for users who will see aggregated data only without the authority to see patient level data Analyst Users who will build analytics for local use. Whether they can see patient identifiabale data depends on the organisation they work xxxxxx data sharing agreements. Access to identifiable data is applied using row level security on an organisational basis Direct Care Users who have a direct care relationship with a patient. Access is defined by Row level security being defined on an organisation level Analyst/Researcher Typically de-identified access using the deidentified data mart Analyst / Developer Third party access to data for a defined use case (e.g. Bespoke report building / data visualisations) delivered by a non Cipha stakeholder) Data Repositories Dashboards/ Reports/ Suite* Org Persona PID (Patient Identifiable data) Repository Pseudonymised data Repository Anonymised data Repository Enhanced Case Finding (PID) Enhanced Case Finding (Non-PID) Health Inequalities – Wider Determinants (PID) Health Inequalities – Wider Determinants (Non-PID) Xxxxx Xxxxxxx ACG Reporting Suite* (PID) Xxxxx Xxxxxxx ACG Reporting Suite* (Non-PID) Multimorbidity (PID) Multimorbidity (Non-PID) Data depth report (PID) Data depth report (Non-PID) Acute Leadership (Managerial/Exec level) x x x x x Acute Analyst (BI/ Information Analysts) x x x x x x x Acute Direct Care x x x x x CCG Leadership x x x x x CCG Analyst x x x x x x x CCG Direct Care x x x x x GP Leadership x x x x x GP Analyst x x x x x x x GP Direct Care x x x x x Local Authority/ Surrey County Counci Leadership x x x x x Local Authority/ Surrey County Counci Analyst x x x x x x x Local Authority/ Surrey County Counci Direct Care x x x x x Community Leadership x x x x x Community Analyst x x x x x x x Community Direct Care x x x x x Mental Health Leadership x x x x x Mental Health Analyst x x x x x x x Mental Health Direct Care x x x x x Ambulance Leadership x x x x x Ambulance Analyst x x x x x x x Ambulance Direct Care x x x x x Research Analyst/Researcher x Third Party Analyst / Developer x Voluntary sector partners Leadership x x x x x The RBAC model has general 'Personas' which are used to map to a users role. A user can have more than 1 persona as they may have the need to access patient identifiable data access capabilities of each of the Surrey Care Record role profiles is presented in the table below: as well as high level aggregated data l l l Annex D.2 – Opt-in/opt-out and Consent Model Individuals whose data is not being shared for direct care purposes will not be available to be processed for secondary uses, such as Population Health Management. Patients can opt out of having their data processed for secondary uses, such as Population Health Management, by: • Registering a NHS National Data Opt-out with NHS Digital • Registering a Type 1 Opt-out with their GP Practice Patients cannot opt-out of having their data processed for secondary uses, such as Population Health Management, once this has been anonymised in accordance with the ICO Code of Practice. The processing of persona data for secondary uses including, such as Population Health Management, is done on the basis of Implied Consent as this is undertaken by organisations that have a lawful basis to do this and the data subject has been made aware of the processing via Privacy Notices and other transparency information. Annex D.3 – Sharing Dataset Definitions (SCC – Children’s ESH extract only) The table below provides detailed definitions for each of the categories of data that are sourced from Surrey County Council’s LCS system practice clinical systems and presented for use through the Surrey and TVS Care Record. Dataset Data Set Data Item category Person Details and Demographics Person Identifier NHS Number Date Of Birth Surname Given Name 1 Family Middle Name Birth Date Sex Code Sex Description Primary Address Line1 Primary Address Line2 Primary Address Line3 Primary Address Line4 Primary Address Line5 Primary Post Code Primary Email Address Primary Telephone Number Primary Mobile Telephone Number Interpreter Required Disabled Secondary Address Line 1 Secondary Address Line 2 Secondary Address Line 3 Secondary Address Line 4 Secondary Address Line 5 Secondary Post Code Deceased Deceased Date Language Code Restricted Person Consent Not Granted Given Name Alias Family Name Alias Person Purge Data Set Data Item Gender Diagnosis ECDS coding Discharge Summaries Inpatients including SWLEOC and Maternity ED Discharge Summaries Endoscopy Treatment Summaries Outpatient Outcome Letters Clinic Outcome letters Diagnostic results Pathology results Radiology reports Episodic/Activity data Appointments Inpatients ED attendance Community data Referrals Referral Identifier Referral Status Referral Requester Code Referral Requester Desc Referral Team Code Referral Team Description Referral Reason Referral Initial Status Date Referral Final Status Date Referral Purge Events Event Identifier Event Status Event Type Code Event Type Description Event Start Date Time Event End Date Time Referral Identifier Event Initial Status Date Event Final Status Date Event Purge Contacts Alerts Alert Identifier Alert Type Code Alert Type Description Alert Note Alert Status Alert Created By Code Alert Created By Description Alert Initial Status Date Alert Final Status Date Alert Purge Disability Disability Identifier Disability Type Code Disability Type Description Disability Note Disability Status Disability Initial Status Date Disability Final Status Date Disability Purge Data Set Data Item Related Person Person Identifier Person Relationship Code Person Relationship Description Person Relationship Flag Person Given Name Person Family Name Person Sex Code Person Sex Description Person Birth Date Primary Email Address Primary Telephone Number Primary Mobile Telephone Number Person AddressLine1 Person AddressLine2 Person AddressLine3 Person AddressLine4 Person AddressLine5 Person Post Code Person NHS Number Person NHS Number Status Person Identifier Person Status Person Initial Status Date Person Final Status Date Person Purge Practitioner Practitioner Identifier Practitioner Role Code Practitioner Role Description Practitioner Given Name Practitioner Family Name Practitioner Team Code Practitioner Team Desc Practitioner AddressLine1 Practitioner AddressLine2 Practitioner AddressLine3 Practitioner AddressLine4 Practitioner AddressLine5 Practitioner Post Code Practitioner Email Address Practitioner Telephone Number Practitioner Mobile Telephone Number Practitioner Status Practitioner Initial Status Date Practitioner Final Status Date Practitioner Purge Data Set Data Item Classification Classification Identifier Classification Type Code Classification Type Description Classification Details Classification Status Classification Start Date Classification End Date Classification Purge Allergies Immunisations Care Plan Problems Interventions Encounters/Appointments Diagnosis Medications Annex D.4 – Sharing Dataset Definitions (all other sources) For information, the table below summarises the data available from other sources for viewing alongside data sourced from the general practice clinical systems in the Surrey Care Record. Organisation Data Category General Practice Person Details and Demographics Allergies Clinical Documentation Events Health Promotion Medications Preventative Procedures Problems Procedures Results Social / Family History Acute (data items may differ by organisation) Person Details and Demographics Allergies Diagnostic Tests Electronic Documents Emergency Attendance Inpatient Activity Inpatient Admission Waiting List Outpatient Activity Outpatient Referral Community and Mental Health Person Details and Demographics Alerts Allergies Care Plans Care Programme Approach (CPA) Data category Diagnoses XXXx Inpatient Admissions and History Mental Health Act Outpatient Appointments and History Referrals Risk Summary Safeguarding Service Planning Social Care Person Details and Demographics Alerting Assessment Associated People Carer Details XXXx Safeguarding Service Planning The table below shows additional data sets that may be available via the wider TVS Shared Care Record Programme: Data Field

Persona Description. All access support / maintenance A system admin function, logging access requests, general house keeping of the system, support, maintenance and training All access analyst - architecture / syste A system wide analytics function where analytics and bespoke data flows are created for system wide use Break Glass access Access that provides all access to data in case of an emergency (this role may not be used) Leadership Managerial/Exec level access for users who will see aggregated data only without the authority to see patient level data Analyst Users who will build analytics for local use. Whether they can see patient identifiabale data depends on the organisation they work xxxxxx data sharing agreements. Access to identifiable data is applied using row level security on an organisational basis Direct Care Users who have a direct care relationship with a patient. Access is defined by Row level security being defined on an organisation level Analyst/Researcher Typically de-identified access using the deidentified data mart Analyst / Developer Third party access to data for a defined use case (e.g. Bespoke report building / data visualisations) delivered by a non Cipha stakeholder) Data Repositories Dashboards/ Reports/ Suite* Org Persona PID (Patient Identifiable data) Repository Pseudonymised data Repository Anonymised data Repository Enhanced Case Finding (PID) Enhanced Case Finding (Non-PID) Health Inequalities – Wider Determinants (PID) Health Inequalities – Wider Determinants (Non-PID) Xxxxx Xxxxxxx ACG Reporting Suite* (PID) Xxxxx Xxxxxxx ACG Reporting Suite* (Non-PID) Multimorbidity (PID) Multimorbidity (Non-PID) Data depth report (PID) Data depth report (Non-PID) Acute Leadership (Managerial/Exec level) x x x x x Acute Analyst (BI/ Information Analysts) x x x x x x x Acute Direct Care x x x x x CCG Leadership x x x x x CCG Analyst x x x x x x x CCG Direct Care x x x x x GP Leadership x x x x x GP Analyst x x x x x x x GP Direct Care x x x x x Local Authority/ Surrey County Counci Leadership x x x x x Local Authority/ Surrey County Counci Analyst x x x x x x x Local Authority/ Surrey County Counci Direct Care x x x x x Community Leadership x x x x x Community Analyst x x x x x x x Community Direct Care x x x x x Mental Health Leadership x x x x x Mental Health Analyst x x x x x x x Mental Health Direct Care x x x x x Ambulance Leadership x x x x x Ambulance Analyst x x x x x x x Ambulance Direct Care x x x x x Research Analyst/Researcher x Third Party Analyst / Developer x Voluntary sector partners Leadership x x x x x The data access capabilities of each of the Surrey Care Record role profiles is for GP Population Health Management are presented in the table below: tables below l l l Annex D.2 – Opt-in/opt-out and Consent Model Individuals whose data is not being shared for direct care purposes will not be available to be processed for secondary uses, such as Population Health Management. Patients can opt out of having their data processed for secondary uses, such as Population Health Management, by: • Registering a NHS National Data Opt-out with NHS Digital • Registering a Type 1 Opt-out with their GP Practice Patients cannot opt-out of having their data processed for secondary uses, such as Population Health Management, once this has been anonymised in accordance with the ICO Code of Practice. The processing of persona data for secondary uses including, such as Population Health Management, is done on the basis of Implied Consent as this is undertaken by organisations that have a lawful basis to do this and the data subject has been made aware of the processing via Privacy Notices and other transparency information. Annex D.3 – Sharing Dataset Definitions (SCC – Children’s GP data extract only) The table below provides detailed definitions for each of the categories of data that are sourced from Surrey County Council’s LCS system practice clinical systems and presented for use through the Surrey Care Record and TVS Care Record. data that is processed for Population Health Management activity undertaken within Surrey Heartlands: Data Set category Data Item item Notes Person Details and Demographics Person Identifier NHS Number Date Of Birth Surname Given Name 1 Middle Name Address Gender GP Detail Phone Number Allergies Allergies And Adverse Reactions Free Text included Clinical Documentation Clinical Correspondence Clinical Reports Discharge and Treatment Summaries Events Administration Admissions Encounters Data category Data item Notes Referrals Health Promotion Alcohol, Exercise and Diet Blood Pressure Height and Weight Physiological Function Tests Smoking Status Medications Contraindications Free Text and Real Time Data included Current Medication Real Time Data included Medication Administration Real Time Data included Medication Issues Real Time Data included OTC and Prophylactic Therapy Real Time Data included Past Medication Real Time Data included Repeat Medication Real Time Data included Preventative Procedures Chronic Disease Monitoring Contraception and HRT procedures Pregnancy, Birth & Post Natal procedures Problems Current / Active Problems Free Text included Full Problems List Free Text included Past Problems Free Text included Procedures All Procedures Obstetric Procedures Operations Therapeutic Procedures Vaccinations and Immunisations Results Glucose/HbA1C Biochemistry Blood Chemistry Cervical Cytology Data category Data item Notes Cytology ECG Haematology Imaging Microbiology Other Investigations Physiology Recent Tests Urinalysis Social / Family Name Birth Date Sex Code Sex Description Primary Address Line1 Primary Address Line2 Primary Address Line3 Primary Address Line4 Primary Address Line5 Primary Post Code Primary Email Address Primary Telephone Number Primary Mobile Telephone Number Interpreter Required Disabled Secondary Address Line 1 Secondary Address Line 2 Secondary Address Line 3 Secondary Address Line 4 Secondary Address Line 5 Secondary Post Code Deceased Deceased Date Language Code Restricted Person Consent Not Granted Given Name Alias History Family Name Alias Person Purge Data Set Data Item Referrals Referral Identifier Referral Status Referral Requester Code Referral Requester Desc Referral Team Code Referral Team Description Referral Reason Referral Initial Status Date Referral Final Status Date Referral Purge Events Event Identifier Event Status Event Type Code Event Type Description Event Start Date Time Event End Date Time Referral Identifier Event Initial Status Date Event Final Status Date Event Purge Alerts Alert Identifier Alert Type Code Alert Type Description Alert Note Alert Status Alert Created By Code Alert Created By Description Alert Initial Status Date Alert Final Status Date Alert Purge Disability Disability Identifier Disability Type Code Disability Type Description Disability Note Disability Status Disability Initial Status Date Disability Final Status Date Disability Purge Data Set Data Item Related Person Person Identifier Person Relationship Code Person Relationship Description Person Relationship Flag Person Given Name Person Family Name Person Sex Code Person Sex Description Person Birth Date Primary Email Address Primary Telephone Number Primary Mobile Telephone Number Person AddressLine1 Person AddressLine2 Person AddressLine3 Person AddressLine4 Person AddressLine5 Person Post Code Person NHS Number Person NHS Number Status Person Identifier Person Status Person Initial Status Date Person Final Status Date Person Purge Practitioner Practitioner Identifier Practitioner Role Code Practitioner Role Description Practitioner Given Name Practitioner Family Name Practitioner Team Code Practitioner Team Desc Practitioner AddressLine1 Practitioner AddressLine2 Practitioner AddressLine3 Practitioner AddressLine4 Practitioner AddressLine5 Practitioner Post Code Practitioner Email Address Practitioner Telephone Number Practitioner Mobile Telephone Number Practitioner Status Practitioner Initial Status Date Practitioner Final Status Date Practitioner Purge Data Set Data Item Classification Classification Identifier Classification Type Code Classification Type Description Classification Details Classification Status Classification Start Date Classification End Date Classification Purge History Free Text included Annex D.4 – Sharing Dataset Definitions (all other sources) For information, the table below summarises the data available from other sources for viewing alongside data sourced from the general practice clinical systems in the Surrey Care Recordsystems. Organisation Dataset Data Category General Practice Person Details and Demographics Allergies Clinical Documentation Events Health Promotion Medications Preventative Procedures Problems Procedures Results Social / Family History category Acute (data items may differ by organisation) Person Details and Demographics Allergies Diagnostic Tests Electronic Documents Emergency Attendance Inpatient Activity Inpatient Admission Waiting List Outpatient Activity Outpatient Referral Community and Mental Health Person Details and Demographics Alerts Allergies Care Plans Care Programme Approach (CPA) Data category Diagnoses XXXx Inpatient Admissions and History Mental Health Act Outpatient Appointments and History Referrals Risk Summary Safeguarding Service Planning Social Care Person Details and Demographics Alerting Dataset Data category Assessment Associated People Carer Details XXXx Safeguarding Service Planning The table below shows additional that proposed data sets that may be available via for viewing through the wider TVS Shared Instance of the Care Record Programme: Data Field

Persona Description. All access support / maintenance A system admin function, logging access requests, general house keeping of the system, support, maintenance and training All access analyst - architecture / syste A system wide analytics function where analytics and bespoke data flows are created for system wide use Break Glass access Access that provides all access to data in case of an emergency (this role may not be used) Leadership Managerial/Exec level access for users who will see aggregated data only without the authority to see patient level data Analyst Users who will build analytics for local use. Whether they can see patient identifiabale data depends on the organisation they work xxxxxx data sharing agreements. Access to identifiable data is applied using row level security on an organisational basis Direct Care Users who have a direct care relationship with a patient. Access is defined by Row level security being defined on an organisation level Analyst/Researcher Typically de-identified access using the deidentified data mart Analyst / Developer Third party access to data for a defined use case (e.g. Bespoke report building / data visualisations) delivered by a non Cipha stakeholder) Data Repositories Dashboards/ Reports/ Suite* Org Persona PID (Patient Identifiable data) Repository Pseudonymised data Repository Anonymised data Repository Enhanced Case Finding (PID) Enhanced Case Finding (Non-PID) Health Inequalities – Wider Determinants (PID) Health Inequalities – Wider Determinants (Non-PID) Xxxxx Xxxxxxx ACG Reporting Suite* (PID) Xxxxx Xxxxxxx ACG Reporting Suite* (Non-PID) Multimorbidity (PID) Multimorbidity (Non-PID) Data depth report (PID) Data depth report (Non-PID) Acute Leadership (Managerial/Exec level) x x x x x Acute Analyst (BI/ Information Analysts) x x x x x x x Acute Direct Care x x x x x CCG Leadership x x x x x CCG Analyst x x x x x x x CCG Direct Care x x x x x GP Leadership x x x x x GP Analyst x x x x x x x GP Direct Care x x x x x Local Authority/ Surrey County Counci Leadership x x x x x Local Authority/ Surrey County Counci Analyst x x x x x x x Local Authority/ Surrey County Counci Direct Care x x x x x Community Leadership x x x x x Community Analyst x x x x x x x Community Direct Care x x x x x Mental Health Leadership x x x x x Mental Health Analyst x x x x x x x Mental Health Direct Care x x x x x Ambulance Leadership x x x x x Ambulance Analyst x x x x x x x Ambulance Direct Care x x x x x Research Analyst/Researcher x Third Party Analyst / Developer x Voluntary sector partners Leadership x x x x x The data access capabilities of each of the Surrey Care Record role profiles is presented in the table below: l l l Annex D.2 – Opt-in/opt-out and Consent Model Individuals whose data is not being shared for direct care purposes will not be available to be processed for secondary uses, such as Population Health Management. Patients can opt out of having their data processed for secondary uses, such as Population Health Management, by: • Registering a NHS National Data Opt-out with NHS Digital • Registering a Type 1 Opt-out with their GP Practice Patients cannot opt-out of having their data processed for secondary uses, such as Population Health Management, once this has been anonymised in accordance with the ICO Code of Practice. The processing of persona data for secondary uses including, such as Population Health Management, is done on the basis of Implied Consent as this is undertaken by organisations that have a lawful basis to do this and the data subject has been made aware of the processing via Privacy Notices and other transparency information. Annex D.3 – Sharing Dataset Definitions (SCC – Children’s - Adults extract only) The table below provides detailed definitions for each of the categories of data that are sourced from Surrey County Council’s LCS system practice clinical systems and presented for use through the Surrey and TVS Care Record. Dataset Data Set Data Item category Person Details and Demographics Person Identifier NHS Number Date Of Birth Surname Given Name 1 Family Middle Name Birth Date Sex Code Sex Description Primary Address Line1 Primary Address Line2 Primary Address Line3 Primary Address Line4 Primary Address Line5 Primary Post Code Primary Email Address Primary Telephone Number Primary Mobile Telephone Number Interpreter Required Disabled Secondary Address Line 1 Secondary Address Line 2 Secondary Address Line 3 Secondary Address Line 4 Secondary Address Line 5 Secondary Post Code Deceased Deceased Date Language Code Restricted Person Consent Not Granted Gender Alerting Alerts Assessment Assessments Care Plans Referrals Associated People Surname Given Name Alias Family Name Alias Person Purge Data Set Data Item Referrals Referral Identifier Referral Status Referral Requester Code Referral Requester Desc Referral Team Code Referral Team Description Referral Reason Referral Initial Status Date Referral Final Status Date Referral Purge Events Event Identifier Event Status Event Type Code Event Type Description Event Start Date Time Event End Date Time Referral Identifier Event Initial Status Date Event Final Status Date Event Purge Alerts Alert Identifier Alert Type Code Alert Type Description Alert Note Alert Status Alert Created By Code Alert Created By Description Alert Initial Status Date Alert Final Status Date Alert Purge Disability Disability Identifier Disability Type Code Disability Type Description Disability Note Disability Status Disability Initial Status Date Disability Final Status Date Disability Purge Data Set Data Item Related Person Person Identifier Person Relationship Code Person Relationship Description Person Relationship Flag Person Carer Details Surname Given Name Person Family Name Person Sex Code Person Sex Description Person Birth Date Primary Email Address Primary Telephone Number Primary Mobile Telephone Number Person AddressLine1 Person AddressLine2 Person AddressLine3 Person AddressLine4 Person AddressLine5 Person Post Code Person NHS Number Person NHS Number Status Person Identifier Person Status Person Initial Status Date Person Final Status Date Person Purge Practitioner Practitioner Identifier Practitioner Role Code Practitioner Role Description Practitioner Given Name Practitioner Family Name Practitioner Team Code Practitioner Team Desc Practitioner AddressLine1 Practitioner AddressLine2 Practitioner AddressLine3 Practitioner AddressLine4 Practitioner AddressLine5 Practitioner Post Code Practitioner Email Address Practitioner Telephone Number Practitioner Mobile Telephone Number Practitioner Status Practitioner Initial Status Date Practitioner Final Status Date Practitioner Purge XXXx XXXx Safeguarding Safeguarding Data Set Service Planning Service Planning Data Item Classification Classification Identifier Classification Type Code Classification Type Description Classification Details Classification Status Classification Start Date Classification End Date Classification Purge Annex D.4 – Sharing Dataset Definitions (all other sources) For information, the table below summarises the data available from other sources for viewing alongside data sourced from the general practice clinical systems in the Surrey Care Record. Organisation Data Category General Practice Person Details and Demographics Allergies Clinical Documentation Events Health Promotion Medications Preventative Procedures Problems Procedures Results Social / Family History Acute (data items may differ by organisation) Person Details and Demographics Allergies Diagnostic Tests Electronic Documents Emergency Attendance Inpatient Activity Inpatient Admission Waiting List Outpatient Activity Outpatient Referral Community and Mental Health Person Details and Demographics Alerts Allergies Care Plans Care Programme Approach (CPA) Data category Diagnoses XXXx Inpatient Admissions and History Mental Health Act Outpatient Appointments and History Referrals Risk Summary Safeguarding Service Planning Social Care Person Details and Demographics Alerting Assessment Associated People Carer Details XXXx Safeguarding Service Planning The table below shows additional data sets that may be available via the wider TVS Shared Care Record Programme: Data Field

Persona Description. All access support / maintenance A system admin function, logging access requests, general house keeping of the system, support, maintenance and training All access analyst - architecture / syste A system wide analytics function where analytics and bespoke data flows are created for system wide use Break Glass access Access that provides all access to data in case of an emergency (this role may not be used) Leadership Managerial/Exec level access for users who will see aggregated data only without the authority to see patient level data Analyst Users who will build analytics for local use. Whether they can see patient identifiabale data depends on the organisation they work xxxxxx data sharing agreements. Access to identifiable data is applied using row level security on an organisational basis Direct Care Users who have a direct care relationship with a patient. Access is defined by Row level security being defined on an organisation level Analyst/Researcher Typically de-identified access using the deidentified data mart Analyst / Developer Third party access to data for a defined use case (e.g. Bespoke report building / data visualisations) delivered by a non Cipha stakeholder) Data Repositories Dashboards/ Reports/ Suite* Org Persona PID (Patient Identifiable data) Repository Pseudonymised data Repository Anonymised data Repository Enhanced Case Finding (PID) Enhanced Case Finding (Non-PID) Health Inequalities – Wider Determinants (PID) Health Inequalities – Wider Determinants (Non-PID) Xxxxx Xxxxxxx ACG Reporting Suite* (PID) Xxxxx Xxxxxxx ACG Reporting Suite* (Non-PID) Multimorbidity (PID) Multimorbidity (Non-PID) Data depth report (PID) Data depth report (Non-PID) Acute Leadership (Managerial/Exec level) x x x x x Acute Analyst (BI/ Information Analysts) x x x x x x x Acute Direct Care x x x x x CCG Leadership x x x x x CCG Analyst x x x x x x x CCG Direct Care x x x x x GP Leadership x x x x x GP Analyst x x x x x x x GP Direct Care x x x x x Local Authority/ Surrey County Counci Leadership x x x x x Local Authority/ Surrey County Counci Analyst x x x x x x x Local Authority/ Surrey County Counci Direct Care x x x x x Community Leadership x x x x x Community Analyst x x x x x x x Community Direct Care x x x x x Mental Health Leadership x x x x x Mental Health Analyst x x x x x x x Mental Health Direct Care x x x x x Ambulance Leadership x x x x x Ambulance Analyst x x x x x x x Ambulance Direct Care x x x x x Research Analyst/Researcher x Third Party Analyst / Developer x Voluntary sector partners Leadership x x x x x The data access capabilities of each of the Surrey Care Record role profiles is presented in the table below: l l l Annex D.2 – Opt-in/opt-out and Consent Model Individuals whose data is not being shared for direct care purposes will not be available to be processed for secondary uses, such as Population Health Management. Patients can opt out of having their data processed for secondary uses, such as Population Health Management, by: • Registering a NHS National Data Opt-out with NHS Digital • Registering a Type 1 Opt-out with their GP Practice Patients cannot opt-out of having their data processed for secondary uses, such as Population Health Management, once this has been anonymised in accordance with the ICO Code of Practice. The processing of persona data for secondary uses including, such as Population Health Management, is done on the basis of Implied Consent as this is undertaken by organisations that have a lawful basis to do this and the data subject has been made aware of the processing via Privacy Notices and other transparency information. Annex D.3 – Sharing Dataset Definitions (SCC – Children’s SABP extract only) The table below provides detailed definitions for each of the categories of data that are sourced from Surrey County Council’s LCS system practice clinical systems and presented for use through the Surrey and TVS Care Record. The table below provides detailed definitions for each of the categories of data that are sourced from the Trust’s systems and presented for use through the Surrey Care Record. SABP is going to flow data into the Surrey Care Records in three phases. The phases are listed below: Phase 1 Demographics and Referrals Phase 2 Diagnosis, CPA Episode and CPA Level Phase 3 Early Intervention In Psychosis (EIIP),Mental Health Act (MHA), Risk Assessment and Risk Scores The table below provides detailed definitions for each of the categories of data that are sourced contemporaneously from SABP’s SystmOne clinical system via Strategic Record Extract and presented for use through Surrey Care Record or that are sourced overnight from SABP’s SystmOne clinical system via secure file transfer and presented for use through Surrey Care Records. Data Set Category and Item (s) Data Item Category Person Details and Demographics Person Identifier NHS Number Given Date Of Birth Name 1 Family Name Birth Date Sex Code Sex Description Primary Address Line1 Primary Address Line2 Primary Address Line3 Primary Address Line4 Primary Address Line5 Primary Post Code Primary Email Address Primary Telephone Number Primary Mobile Telephone Number Interpreter Required Disabled Secondary Address Line 1 Secondary Address Line 2 Secondary Address Line 3 Secondary Address Line 4 Secondary Address Line 5 Secondary Post Code Deceased Deceased Date Language Code Restricted Person Consent Not Granted Given Name Alias Family Name Alias Person Purge Care Programme Approach (CPA) Episode Dates and Times Status (Y/N) Data Set Data Item Referrals Referral Identifier Referral Status Referral Requester Code Referral Requester Desc Referral Team Code Referral Team Description Referral Reason Referral Initial Status Date Referral Final Status Date Referral Purge Events Event Identifier Event Status Event Type Code Event Type Description Event Start Date Time Event End Date Time Referral Identifier Event Initial Status Date Event Final Status Date Event Purge Alerts Alert Identifier Alert Type Code Alert Type Description Alert Note Alert Status Alert Created By Code Alert Created By Description Alert Initial Status Date Alert Final Status Date Alert Purge Disability Disability Identifier Disability Type Code Disability Type Description Disability Note Disability Status Disability Initial Status Date Disability Final Status Date Disability Purge Data Set Data Item Related Person Person Identifier Person Relationship Code Person Relationship Description Person Relationship Flag Person Given Name Person Family Name Person Sex Code Person Sex Description Person Birth Date Primary Email Address Primary Telephone Number Primary Mobile Telephone Number Person AddressLine1 Person AddressLine2 Person AddressLine3 Person AddressLine4 Person AddressLine5 Person Post Code Person category NHS Number Person NHS Number Diagnoses Dates and Times ICD10 Code ICD10 Description Mental Health Act MH Section Status Person Identifier Person Referrals Dates and Times Service Team Risk Assessments Date Of Assessment Clinical setting Assessor & Role Risk Scores Description Status Person Initial Status Date Person Final Status Date Person Purge Practitioner Practitioner Identifier Practitioner Role Code Practitioner Role Description Practitioner Given Name Practitioner Family Name Practitioner Team Code Practitioner Team Desc Practitioner AddressLine1 Practitioner AddressLine2 Practitioner AddressLine3 Practitioner AddressLine4 Practitioner AddressLine5 Practitioner Post Code Practitioner Email Address Practitioner Telephone Number Practitioner Mobile Telephone Number Practitioner Status Practitioner Initial Status Date Practitioner Final Status Date Practitioner Purge Data Set Data Item Classification Classification Identifier Classification Type Code Classification Type Description Classification Details Classification Status Classification Start Date Classification End Date Classification Purge Annex D.4 – Sharing Dataset Definitions (all other sources) For information, the table below summarises the data available from other sources for viewing alongside data sourced from the general practice clinical systems in the Surrey Care Record. Organisation Data Category General Practice Person Details and Demographics Allergies Clinical Documentation Events Health Promotion Medications Preventative Procedures Problems Procedures Results Social / Family History Acute (data items may differ by organisation) Person Details and Demographics Allergies Diagnostic Tests Electronic Documents Emergency Attendance Inpatient Activity Inpatient Admission Waiting List Outpatient Activity Outpatient Referral Community and Mental Health Person Details and Demographics Alerts Allergies Care Plans Care Programme Approach (CPA) Data category Diagnoses XXXx Inpatient Admissions and History Mental Health Act Outpatient Appointments and History Referrals Risk Summary Safeguarding Service Planning Social Care Person Details and Demographics Alerting Assessment Associated People Carer Details XXXx Safeguarding Service Planning The table below shows additional data sets that may be available via the wider TVS Shared Care Record Programme: Data Field

Persona Description. All access support / maintenance A system admin function, logging access requests, general house keeping of the system, support, maintenance and training All access analyst - architecture / syste A system wide analytics function where analytics and bespoke data flows are created for system wide use Break Glass access Access that provides all access to data in case of an emergency (this role may not be used) Leadership Managerial/Exec level access for users who will see aggregated data only without the authority to see patient level data Analyst Users who will build analytics for local use. Whether they can see patient identifiabale data depends on the organisation they work xxxxxx data sharing agreements. Access to identifiable data is applied using row level security on an organisational basis Direct Care Users who have a direct care relationship with a patient. Access is defined by Row level security being defined on an organisation level Analyst/Researcher Typically de-identified access using the deidentified data mart Analyst / Developer Third party access to data for a defined use case (e.g. Bespoke report building / data visualisations) delivered by a non Cipha stakeholder) Data Repositories Dashboards/ Reports/ Suite* Org Persona PID (Patient Identifiable data) Repository Pseudonymised data Repository Anonymised data Repository Enhanced Case Finding (PID) Enhanced Case Finding (Non-PID) Health Inequalities – Wider Determinants (PID) Health Inequalities – Wider Determinants (Non-PID) Xxxxx Xxxxxxx ACG Reporting Suite* (PID) Xxxxx Xxxxxxx ACG Reporting Suite* (Non-PID) Multimorbidity (PID) Multimorbidity (Non-PID) Data depth report (PID) Data depth report (Non-PID) Acute Leadership (Managerial/Exec level) x x x x x Acute Analyst (BI/ Information Analysts) x x x x x x x Acute Direct Care x x x x x CCG Leadership x x x x x CCG Analyst x x x x x x x CCG Direct Care x x x x x GP Leadership x x x x x GP Analyst x x x x x x x GP Direct Care x x x x x Local Authority/ Surrey County Counci Leadership x x x x x Local Authority/ Surrey County Counci Analyst x x x x x x x Local Authority/ Surrey County Counci Direct Care x x x x x Community Leadership x x x x x Community Analyst x x x x x x x Community Direct Care x x x x x Mental Health Leadership x x x x x Mental Health Analyst x x x x x x x Mental Health Direct Care x x x x x Ambulance Leadership x x x x x Ambulance Analyst x x x x x x x Ambulance Direct Care x x x x x Research Analyst/Researcher x Third Party Analyst / Developer x Voluntary sector partners Leadership x x x x x The data access capabilities of each of the Surrey Care Record role profiles is presented in the table below: l l l Annex D.2 – Opt-in/opt-out and Consent Model Individuals whose data is not being shared for direct care purposes will not be available to be processed for secondary uses, such as Population Health Management. Patients can opt out of having their data processed for secondary uses, such as Population Health Management, by: • Registering a NHS National Data Opt-out with NHS Digital • Registering a Type 1 Opt-out with their GP Practice Patients cannot opt-out of having their data processed for secondary uses, such as Population Health Management, once this has been anonymised in accordance with the ICO Code of Practice. The processing of persona data for secondary uses including, such as Population Health Management, is done on the basis of Implied Consent as this is undertaken by organisations that have a lawful basis to do this and the data subject has been made aware of the processing via Privacy Notices and other transparency information. Annex D.3 – Sharing Dataset Definitions (SCC – Children’s RSFT extract only) The table below provides detailed definitions for each of the categories of data that are sourced from Surrey County Council’s LCS system practice clinical systems and presented for use through the Surrey and TVS Care Record. Dataset Data Set Data Item category Person Details and Demographics Person Identifier NHS Number MRN Number Date Of Birth Surname Given Name 1 Family Middle Name Birth Date Sex Code Sex Description Primary Address Line1 Primary Address Line2 Primary Address Line3 Primary Address Line4 Primary Address Line5 Primary Post Code Primary Email Address Primary Gender Telephone Number Primary Mobile Telephone Number Interpreter Required Disabled Secondary Address Line 1 Secondary Address Line 2 Secondary Address Line 3 Secondary Address Line 4 Secondary Address Line 5 Secondary Post Code Deceased Deceased Date Language Code Restricted Person Consent Not Granted Given Name Alias Family Name Alias Person Purge Data Set Data Item Referrals Referral Identifier Referral numbers Religion Marital Status Referral Requester Code Referral Requester Desc Referral Team Code Referral Team Description Referral Reason Referral Initial Status Date Referral Final Status Date Referral Purge Events Event Identifier Event Status Event Type Code Event Type Description Event Start Date Time Event End Date Time Referral Identifier Event Initial Status Date Event Final Status Date Event Purge Alerts Alert Identifier Alert Type Code Alert Type Description Alert Note Alert Status Alert Created By Code Alert Created By Description Alert Initial Status Date Alert Final Status Date Alert Purge Disability Disability Identifier Disability Type Code Disability Type Description Disability Note Disability Status Disability Initial Status Date Disability Final Status Date Disability Purge Data Set Data Item Related Person Person Identifier Person Relationship Code Person Relationship Description Person Relationship Flag Person Given Name Person Family Name Person Sex Code Person Sex Description Person Birth Date Primary Email Address Primary Telephone Number Primary Mobile Telephone Number Person AddressLine1 Person AddressLine2 Person AddressLine3 Person AddressLine4 Person AddressLine5 Person Post Code Person NHS Number Person NHS Number Status Person Identifier Person Status Person Initial Status Date Person Final Status Date Person Purge Practitioner Practitioner Identifier Practitioner Role Code Practitioner Role Description Practitioner Given Name Practitioner Family Name Practitioner Team Code Practitioner Team Desc Practitioner AddressLine1 Practitioner AddressLine2 Practitioner AddressLine3 Practitioner AddressLine4 Practitioner AddressLine5 Practitioner Post Code Practitioner Email Address Practitioner Telephone Number Practitioner Mobile Telephone Number Practitioner Status Practitioner Initial Status Date Practitioner Final Status Date Practitioner Purge Data Set Data Item Classification Classification Identifier Classification Type Code Classification Type Description Classification Details Classification Status Classification Start Date Classification End Date Classification Purge Ethnic Origin Diagnostic Tests Radiology and LAB Inpatient Activity Inpatient Activity Annex D.4 – Sharing Dataset Definitions (all other sources) For information, the table below summarises the data available from other sources for viewing alongside data sourced from the general practice clinical systems in the Surrey Care Record. Organisation Data Category General Practice Person Details and Demographics Allergies Clinical Documentation Events Health Promotion Medications Preventative Procedures Problems Procedures Results Social / Family History Acute (data items may differ by organisation) Person Details and Demographics Allergies Diagnostic Tests Electronic Documents Emergency Attendance Inpatient Activity Inpatient Admission Waiting List Outpatient Activity Outpatient Referral Community and Mental Health Person Details and Demographics Alerts Allergies Care Plans Care Programme Approach (CPA) Data category Diagnoses XXXx Inpatient Admissions and History Mental Health Act Outpatient Appointments and History Referrals Risk Summary Safeguarding Service Planning Social Care Person Details and Demographics Alerting Assessment Associated People Carer Details XXXx Safeguarding Service Planning The table below shows additional data sets that may be available via the wider TVS Shared Care Record Programme: Data Field

Persona Description. All access support / maintenance A system admin function, logging access requests, general house keeping of the system, support, maintenance and training All access analyst - architecture / syste A system wide analytics function where analytics and bespoke data flows are created for system wide use Break Glass access Access that provides all access to data in case of an emergency (this role may not be used) Leadership Managerial/Exec level access for users who will see aggregated data only without the authority to see patient level data Analyst Users who will build analytics for local use. Whether they can see patient identifiabale data depends on the organisation they work xxxxxx data sharing agreements. Access to identifiable data is applied using row level security on an organisational basis Direct Care Users who have a direct care relationship with a patient. Access is defined by Row level security being defined on an organisation level Analyst/Researcher Typically de-identified access using the deidentified data mart Analyst / Developer Third party access to data for a defined use case (e.g. Bespoke report building / data visualisations) delivered by a non Cipha stakeholder) Data Repositories Dashboards/ Reports/ Suite* Org Persona PID (Patient Identifiable data) Repository Pseudonymised data Repository Anonymised data Repository Enhanced Case Finding (PID) Enhanced Case Finding (Non-PID) Health Inequalities – Wider Determinants (PID) Health Inequalities – Wider Determinants (Non-PID) Xxxxx Xxxxxxx ACG Reporting Suite* (PID) Xxxxx Xxxxxxx ACG Reporting Suite* (Non-PID) Multimorbidity (PID) Multimorbidity (Non-PID) Data depth report (PID) Data depth report (Non-PID) Acute Leadership (Managerial/Exec level) x x x x x Acute Analyst (BI/ Information Analysts) x x x x x x x Acute Direct Care x x x x x CCG Leadership x x x x x CCG Analyst x x x x x x x CCG Direct Care x x x x x GP Leadership x x x x x GP Analyst x x x x x x x GP Direct Care x x x x x Local Authority/ Surrey County Counci Leadership x x x x x Local Authority/ Surrey County Counci Analyst x x x x x x x Local Authority/ Surrey County Counci Direct Care x x x x x Community Leadership x x x x x Community Analyst x x x x x x x Community Direct Care x x x x x Mental Health Leadership x x x x x Mental Health Analyst x x x x x x x Mental Health Direct Care x x x x x Ambulance Leadership x x x x x Ambulance Analyst x x x x x x x Ambulance Direct Care x x x x x Research Analyst/Researcher x Third Party Analyst / Developer x Voluntary sector partners Leadership x x x x x The RBAC model has general 'Personas' which are used to map to a users role. A user can have more than 1 persona as they may have the need to access patient identifiable data access capabilities of each of the Surrey Care Record role profiles is presented in the table below: as well as high level aggregated data l l l Annex D.2 – Opt-in/opt-out and Consent Model Individuals whose data is not being shared for direct care purposes will not be available to be processed for secondary uses, such as Population Health Management. Patients can opt out of having their data processed for secondary uses, such as Population Health Management, by: • Registering a NHS National Data Opt-out with NHS Digital • Registering a Type 1 Opt-out with their GP Practice Patients cannot opt-out of having their data processed for secondary uses, such as Population Health Management, once this has been anonymised in accordance with the ICO Code of Practice. The processing of persona data for secondary uses including, such as Population Health Management, is done on the basis of Implied Consent as this is undertaken by organisations that have a lawful basis to do this and the data subject has been made aware of the processing via Privacy Notices and other transparency information. Annex D.3 – Sharing Dataset Definitions (SCC – Children’s CSH extract only) The table below provides detailed definitions for each of the categories of data that are sourced from Surrey County Council’s LCS system practice clinical systems and presented for use through the Surrey and TVS Care Record. Data Set Dataset Data Item Demographics Person Identifier Patient No Tenancy ID Updated Date NHS Number Given Name 1 Family Name Birth Date No NHS Trace Status Code Title Surname Forenames Marital Status Sex Code Sex Description Primary Address Line1 Primary Address Line2 Primary Address Line3 Primary Address Line4 Primary Address Line5 Primary DOB Address1 Address2 Address3 Address4 Address5 Post Code Primary Email Address Primary Home Telephone Number Primary Work Telephone Mobile Telephone Number Interpreter Required Disabled Secondary Address Line 1 Secondary Address Line 2 Secondary Address Line 3 Secondary Address Line 4 Secondary Address Line 5 Secondary Post Email Death Date Deceased GP Practice Code Deceased Deceased Date Language Code Restricted Person Consent Not Granted Given Name Alias Family Name Alias Person Purge Data Set Religion Ethnic Origin Dataset Data Item Referrals Referral Identifier ID Patient ID Tenancy ID Updated Date Referral Status Referral Requester Source Ref Org Code Referral Requester Desc Referral Team Code Referral Team Description Date Urgency Referral Reason Referral Initial Status Team Referred To HCP Referred To Specialty Date Referral Final Status Received Care Setting Date Referral Purge Events Event Identifier Event Status Event Accepted Discharge Date Discharge HCP Discharge Reason Deleted Contacts Contact ID Patient ID Tenancy ID Updated Date Rank Contact Type Relation Title Surname Given Name Address Line 1 Address Line 2 Address Line 3 Address Line 4 Address Line 5 Post Code Event Type Description Event Start Date Time Event End Date Time Referral Identifier Event Initial Status Date Event Final Status Date Event Purge Alerts Alert Identifier Alert Type Code Alert Type Description Alert Note Alert Status Alert Created By Code Alert Created By Description Alert Initial Status Date Alert Final Status Date Alert Purge Disability Disability Identifier Disability Type Code Disability Type Description Disability Note Disability Status Disability Initial Status Date Disability Final Status Date Disability Purge Data Set Country Main Phone Other Phone Mobile Phone Deleted Dataset Data Item Related Person Person Identifier Person Relationship Code Person Relationship Encounters/Appointments Encounter ID Patient ID Referral ID Tenancy ID Updated Date Type Attendance Date Admission Date Discharge Date Location Outcome Description Person Relationship Flag Person Given Clinician Name Person Family Role Consent To View Clinic Name Person Sex Code Person Sex Description Person Birth Deleted Medication Medication ID Patient ID Tenancy ID Updated Date Primary Email Address Primary Telephone Number Primary Mobile Telephone Number Person AddressLine1 Person AddressLine2 Person AddressLine3 Person AddressLine4 Person AddressLine5 Person Post Code Person NHS Number Person NHS Number Status Person Identifier Person Status Person Initial Status Name Dosage Last Issue Date Person Final Status Date Person Purge Practitioner Practitioner Identifier Practitioner Role Code Practitioner Role Description Practitioner Given Name Practitioner Family Name Practitioner Team Code Practitioner Team Desc Practitioner AddressLine1 Practitioner AddressLine2 Practitioner AddressLine3 Practitioner AddressLine4 Practitioner AddressLine5 Practitioner Post Code Practitioner Email Address Practitioner Telephone Number Practitioner Mobile Telephone Number Practitioner Status Practitioner Initial Status Date Practitioner Final Status Date Practitioner Purge Data Set Data Item Classification Classification Identifier Classification Type Code Classification Type Description Classification Details Classification Status Classification Start Date Classification End Date Classification Purge Issued By Deleted Annex D.4 – Sharing Dataset Definitions (all other sources) For information, the table below summarises the data available from other sources for viewing alongside data sourced from the general practice clinical systems in the Surrey Care Record. Organisation Data Category General Practice Person Details and Demographics Allergies Clinical Documentation Events Health Promotion Medications Preventative Procedures Problems Procedures Results Social / Family History Acute (data items may differ by organisation) Person Details and Demographics Allergies Diagnostic Tests Electronic Documents Emergency Attendance Inpatient Activity Inpatient Admission Waiting List Outpatient Activity Outpatient Referral Community and Mental Health Person Details and Demographics Alerts Allergies Care Plans Care Programme Approach (CPA) Data category Diagnoses XXXx Inpatient Admissions and History Mental Health Act Outpatient Appointments and History Referrals Risk Summary Safeguarding Service Planning Social Care Person Details and Demographics Alerting Assessment Associated People Carer Details XXXx Safeguarding Service Planning The table below shows additional data sets that may be available via the wider TVS Shared Care Record Programme: Data Field

Persona Description. All access support / maintenance A system admin function, logging access requests, general house keeping of the system, support, maintenance and training All access analyst - architecture / syste A system wide analytics function where analytics and bespoke data flows are created for system wide use Break Glass access Access that provides all access to data in case of an emergency (this role may not be used) Leadership Managerial/Exec level access for users who will see aggregated data only without the authority to see patient level data Analyst Users who will build analytics for local use. Whether they can see patient identifiabale data depends on the organisation they work xxxxxx data sharing agreements. Access to identifiable data is applied using row level security on an organisational basis Direct Care Users who have a direct care relationship with a patient. Access is defined by Row level security being defined on an organisation level Analyst/Researcher Typically de-identified access using the deidentified data mart Analyst / Developer Third party access to data for a defined use case (e.g. Bespoke report building / data visualisations) delivered by a non Cipha stakeholder) Data Repositories Dashboards/ Reports/ Suite* Org Persona PID (Patient Identifiable data) Repository Pseudonymised data Repository Anonymised data Repository Enhanced Case Finding (PID) Enhanced Case Finding (Non-PID) Health Inequalities – Wider Determinants (PID) Health Inequalities – Wider Determinants (Non-PID) Xxxxx Xxxxxxx ACG Reporting Suite* (PID) Xxxxx Xxxxxxx ACG Reporting Suite* (Non-PID) Multimorbidity (PID) Multimorbidity (Non-PID) Data depth report (PID) Data depth report (Non-PID) Acute Leadership (Managerial/Exec level) x x x x x Acute Analyst (BI/ Information Analysts) x x x x x x x Acute Direct Care x x x x x CCG Leadership x x x x x CCG Analyst x x x x x x x CCG Direct Care x x x x x GP Leadership x x x x x GP Analyst x x x x x x x GP Direct Care x x x x x Local Authority/ Surrey County Counci Leadership x x x x x Local Authority/ Surrey County Counci Analyst x x x x x x x Local Authority/ Surrey County Counci Direct Care x x x x x Community Leadership x x x x x Community Analyst x x x x x x x Community Direct Care x x x x x Mental Health Leadership x x x x x Mental Health Analyst x x x x x x x Mental Health Direct Care x x x x x Ambulance Leadership x x x x x Ambulance Analyst x x x x x x x Ambulance Direct Care x x x x x Research Analyst/Researcher x Third Party Analyst / Developer x Voluntary sector partners Leadership x x x x x The data access capabilities of each of the Surrey Care Record role profiles is presented in the table below: l l l Annex D.2 – Opt-in/opt-out and Consent Model Individuals whose data is not being shared for direct care purposes will not be available to be processed for secondary uses, such as Population Health Management. Patients can opt out of having their data processed for secondary uses, such as Population Health Management, by: • Registering a NHS National Data Opt-out with NHS Digital • Registering a Type 1 Opt-out with their GP Practice Patients cannot opt-out of having their data processed for secondary uses, such as Population Health Management, once this has been anonymised in accordance with the ICO Code of Practice. The processing of persona data for secondary uses including, such as Population Health Management, is done on the basis of Implied Consent as this is undertaken by organisations that have a lawful basis to do this and the data subject has been made aware of the processing via Privacy Notices and other transparency information. Annex D.3 – Sharing Dataset Definitions (SCC – Children’s FCH extract only) The table below provides detailed definitions for each of the categories of data that are sourced from Surrey County Council’s LCS system practice clinical systems and presented for use through the Surrey and TVS Care Record. Data Set presented for use through the Surrey Care Record. Dataset Data Item FCHC Provide Demographics Person Identifier PatientNumber Yes Tenancy ID Yes Updated Date yes NHS No Yes NHS Trace Status Code No Title Yes Surname Yes Forenames Yes MaritalStatus Yes Sex Yes DOB Yes Address1 No Address2 No Address3 No Address4 No Address5 No Post Code Yes Home Telephone No Mobile Telephone No Email No Death Date Yes Deceased Yes GP Code Yes GP Practice Code No Religion Yes Ethnic Origin Yes Spoken Language Yes Dataset Data Item FCHC Provide Referrals Referral Id Yes Patient Number Yes Tenancy ID Yes Updated Date Yes Referral Source Yes Referrer No Ref Org Code No Contact Number No Referral Date Yes Urgency Yes Referral Reason No Team Referred To Yes HCP Referred To No Specialty Yes Date Received Yes Care Setting No Date Accepted No Discharge Date Yes Discharge HCP No Discharge Location Yes Deleted No Dataset Data Item FCHC Provide Contacts Contact ID Yes Patient ID Yes Tenancy ID Yes Updated Date Yes Rank No Contact Type Yes Relation No Title Yes Surname Yes Given Name 1 Family Name Birth Date Sex Code Sex Description Primary Address Line1 Primary Address Line2 Primary Address Line3 Primary Address Line4 Primary Address Line5 Primary Post Code Primary Email Address Primary Telephone Number Primary Mobile Telephone Number Interpreter Required Disabled Secondary Yes Address Line 1 Secondary No Address Line 2 Secondary No Address Line 3 Secondary No Address Line 4 Secondary No Address Line 5 Secondary No Post Code Deceased Deceased Yes Country No Main Phone No Other Phone No Mobile Phone No Email No Preferred Contact Method No Deleted No Dataset Data Fields FCHC Provide Encounters/Appointments Encounter ID Yes Patient ID Yes Tenancy ID Yes Updated Date Language Yes Type Yes Attendance Date Yes Admission Date No Discharge Date Yes Location No Speciality No Specialty Description No Outcome No Outcome Description No Clinician Name No Role No Telephone Number No Consent To View Yes Clinic Name Yes Additional HCPs No Outcome Date / time No Deleted No Datasets and data items that may be shared in subsequent phases is detailed below Dataset Data Fields FCHC Provide Alerts Patient No Yes Tenancy ID Yes Alert Order Yes Alert Category TBC Alert Type Yes Alert Type Description Yes Alert Sub-Type TBC Alert Sub-Type Description TBC Severity Yes Comments TBC Start Date TBC End Date TBC Dataset Data Fields FCHC Provide Allergies Patient No Yes Tenancy ID Yes Allergy Order Yes Allergen Type Code Restricted Person Consent Not Granted Given Yes Allergen Description Yes Allergen Reference Yes Allergen Code System Yes Allergen Severity Yes Allergen Reaction Code / Description TBC Allergen Recorded Date Yes Last Updated Date Yes Source System Yes Dataset Data Fields FCHC Provide Immunisations Immunisation ID Yes Patient ID Yes Tenancy ID Yes Updated Date Yes Immunisation Yes Part Yes Administered Date Yes Outcome Yes Location TBC Body Site TBC Admin Method TBC Administered By TBC Contact Number TBC Deleted TBC Dataset Data Fields FCHC Provide Care Plan Care Plan ID Yes Patient ID Yes Tenancy ID Yes Updated Date Yes Care plan Description Yes Care plan type Yes Start Date Yes Started By TBC Contact Number TBC Updated By TBC End User TBC End Reason TBC End Date TBC Dataset Data Fields FCHC Provide Problems Problem ID Yes Patient ID Yes Tenancy ID Yes Updated Date Yes Care plan ID Yes Problem Type TBC Start Date Yes End Date TBC Problem Text TBC Outcome TBC Logged By TBC Contact Number TBC Outcome Comment TBC Deleted TBC Dataset Data Fields FCHC Provide Interventions Intervention ID Yes Patient ID Yes Tenancy ID Yes Updated Date Yes Problem ID Yes Intervention Type TBC Start Date Yes End Date TBC Outcome TBC Logged By TBC Contact Number TBC Goal TBC Date of Review TBC Deleted TBC Dataset Data Fields FCHC Provide Diagnosis Diagnosis ID Yes Patient ID Yes Tenancy ID Yes Updated Date Yes Link ID Yes Diagnosis Date Yes ICD10Code TBC SnomedCT Code TBC Diagnosis Description Yes Confirmed By TBC Comments TBC Deleted TBC Dataset Data Fields FCHC Provide Medication Medication ID Yes Patient ID Yes Tenancy ID Yes Updated Date Yes Name Alias Family Name Alias Person Purge Data Set Yes Formulation TBC Route TBC Dosage TBC Frequency TBC Comments TBC Last Issue Date Yes Issued By TBC Deleted TBC Dataset Data Item Referrals Referral Identifier ID Patient ID Tenancy ID Updated Date Referral Status Referral Requester Source Ref Org Code Referral Requester Desc Referral Team Code Referral Team Description Date Urgency Referral Reason Referral Initial Status Team Referred To HCP Referred To Specialty Date Referral Final Status Received Care Setting Date Referral Purge Events Event Identifier Event Status Event Accepted Discharge Date Discharge HCP Discharge Reason Deleted Contacts Contact ID Patient ID Tenancy ID Updated Date Rank Contact Type Code Event Type Description Event Start Date Time Event End Date Time Referral Identifier Event Initial Status Date Event Final Status Date Event Purge Alerts Alert Identifier Alert Type Code Alert Type Description Alert Note Alert Status Alert Created By Code Alert Created By Description Alert Initial Status Date Alert Final Status Date Alert Purge Disability Disability Identifier Disability Type Code Disability Type Description Disability Note Disability Status Disability Initial Status Date Disability Final Status Date Disability Purge Data Set Data Item Related Person Person Identifier Person Relationship Code Person Relationship Description Person Relationship Flag Person Relation Title Surname Given Name Person Family Name Person Sex Code Person Sex Description Person Birth Date Primary Email Address Primary Telephone Number Primary Mobile Telephone Number Person AddressLine1 Person AddressLine2 Person AddressLine3 Person AddressLine4 Person AddressLine5 Person Line 1 Address Line 2 Address Line 3 Address Line 4 Address Line 5 Post Code Person NHS Number Person NHS Number Status Person Identifier Person Status Person Initial Status Date Person Final Status Date Person Purge Practitioner Practitioner Identifier Practitioner Role Code Practitioner Role Description Practitioner Given Name Practitioner Family Name Practitioner Team Code Practitioner Team Desc Practitioner AddressLine1 Practitioner AddressLine2 Practitioner AddressLine3 Practitioner AddressLine4 Practitioner AddressLine5 Practitioner Post Code Practitioner Email Address Practitioner Telephone Number Practitioner Country Main Phone Other Phone Mobile Telephone Number Practitioner Status Practitioner Initial Status Date Practitioner Final Status Date Practitioner Purge Data Set Data Item Classification Classification Identifier Classification Type Code Classification Type Description Classification Details Classification Status Classification Start Date Classification End Date Classification Purge Phone Deleted Annex D.4 – Sharing Dataset Definitions (all other sources) For information, the table below summarises the data available from other sources for viewing alongside data sourced from the general practice clinical systems in the Surrey Care Record. Organisation Data Category General Practice Person Details and Demographics Allergies Clinical Documentation Events Health Promotion Medications Preventative Procedures Problems Procedures Results Social / Family History Acute (data items may differ by organisation) Person Details and Demographics Allergies Diagnostic Tests Electronic Documents Emergency Attendance Inpatient Activity Inpatient Admission Waiting List Outpatient Activity Outpatient Referral Community and Mental Health Person Details and Demographics Alerts Allergies Care Plans Care Programme Approach (CPA) Data category Diagnoses XXXx Inpatient Admissions and History Mental Health Act Outpatient Appointments and History Referrals Risk Summary Safeguarding Service Planning Social Care Person Details and Demographics Alerting Assessment Associated People Carer Details XXXx Safeguarding Service Planning The table below shows additional data sets that may be available via the wider TVS Shared Care Record Programme: Data Field

Persona Description. All access support / maintenance A system admin function, logging access requests, general house keeping of the system, support, maintenance and training All access analyst - architecture / syste A system wide analytics function where analytics and bespoke data flows are created for system wide use Break Glass access Access that provides all access to data in case of an emergency (this role may not be used) Leadership Managerial/Exec level access for users who will see aggregated data only without the authority to see patient level data Analyst Users who will build analytics for local use. Whether they can see patient identifiabale data depends on the organisation they work xxxxxx data sharing agreements. Access to identifiable data is applied using row level security on an organisational basis Direct Care Users who have a direct care relationship with a patient. Access is defined by Row level security being defined on an organisation level Analyst/Researcher Typically de-identified access using the deidentified data mart Analyst / Developer Third party access to data for a defined use case (e.g. Bespoke report building / data visualisations) delivered by a non Cipha stakeholder) Data Repositories Dashboards/ Reports/ Suite* Org Persona PID (Patient Identifiable data) Repository Pseudonymised data Repository Anonymised data Repository Enhanced Case Finding (PID) Enhanced Case Finding (Non-PID) Health Inequalities – Wider Determinants (PID) Health Inequalities – Wider Determinants (Non-PID) Xxxxx Xxxxxxx ACG Reporting Suite* (PID) Xxxxx Xxxxxxx ACG Reporting Suite* (Non-PID) Multimorbidity (PID) Multimorbidity (Non-PID) Data depth report (PID) Data depth report (Non-PID) Acute Leadership (Managerial/Exec level) x x x x x Acute Analyst (BI/ Information Analysts) x x x x x x x Acute Direct Care x x x x x CCG Leadership x x x x x CCG Analyst x x x x x x x CCG Direct Care x x x x x GP Leadership x x x x x GP Analyst x x x x x x x GP Direct Care x x x x x Local Authority/ Surrey County Counci Leadership x x x x x Local Authority/ Surrey County Counci Analyst x x x x x x x Local Authority/ Surrey County Counci Direct Care x x x x x Community Leadership x x x x x Community Analyst x x x x x x x Community Direct Care x x x x x Mental Health Leadership x x x x x Mental Health Analyst x x x x x x x Mental Health Direct Care x x x x x Ambulance Leadership x x x x x Ambulance Analyst x x x x x x x Ambulance Direct Care x x x x x Research Analyst/Researcher x Third Party Analyst / Developer x Voluntary sector partners Leadership x x x x x The data access capabilities of each of the Surrey Care Record role profiles is presented in the table below: l l l Annex D.2 – Opt-in/opt-out and Consent Model Individuals whose data is not being shared for direct care purposes will not be available to be processed for secondary uses, such as Population Health Management. Patients can opt out of having their data processed for secondary uses, such as Population Health Management, by: • Registering a NHS National Data Opt-out with NHS Digital • Registering a Type 1 Opt-out with their GP Practice Patients cannot opt-out of having their data processed for secondary uses, such as Population Health Management, once this has been anonymised in accordance with the ICO Code of Practice. The processing of persona data for secondary uses including, such as Population Health Management, is done on the basis of Implied Consent as this is undertaken by organisations that have a lawful basis to do this and the data subject has been made aware of the processing via Privacy Notices and other transparency information. Annex D.3 – Sharing Dataset Definitions (SCC – Children’s SASH extract only) The table below provides detailed definitions for each of the categories of data that are sourced from Surrey County Council’s LCS system practice clinical systems and presented for use through the Surrey and TVS Care Record. Dataset Data Set Data Item category Person Details and Demographics Person Identifier NHS Number MRN Number Date Of Birth Surname Given Name 1 Family Middle Name Birth Date Sex Code Sex Description Primary Address Line1 Primary Address Line2 Primary Address Line3 Primary Address Line4 Primary Address Line5 Primary Post Code Primary Email Address Primary Gender Telephone Number Primary Mobile Telephone Number Interpreter Required Disabled Secondary Address Line 1 Secondary Address Line 2 Secondary Address Line 3 Secondary Address Line 4 Secondary Address Line 5 Secondary Post Code Deceased Deceased Date Language Code Restricted Person Consent Not Granted Given Name Alias Family Name Alias Person Purge Data Set Data Item Referrals Referral Identifier Referral numbers Religion Marital Status Referral Requester Code Referral Requester Desc Referral Team Code Referral Team Description Referral Reason Referral Initial Status Date Referral Final Status Date Referral Purge Events Event Identifier Event Status Event Type Code Event Type Description Event Start Date Time Event End Date Time Referral Identifier Event Initial Status Date Event Final Status Date Event Purge Alerts Alert Identifier Alert Type Code Alert Type Description Alert Note Alert Status Alert Created By Code Alert Created By Description Alert Initial Status Date Alert Final Status Date Alert Purge Disability Disability Identifier Disability Type Code Disability Type Description Disability Note Disability Status Disability Initial Status Date Disability Final Status Date Disability Purge Data Set Data Item Related Person Person Identifier Person Relationship Code Person Relationship Description Person Relationship Flag Person Given Name Person Family Name Person Sex Code Person Sex Description Person Birth Date Primary Email Address Primary Telephone Number Primary Mobile Telephone Number Person AddressLine1 Person AddressLine2 Person AddressLine3 Person AddressLine4 Person AddressLine5 Person Post Code Person NHS Number Person NHS Number Status Person Identifier Person Status Person Initial Status Date Person Final Status Date Person Purge Practitioner Practitioner Identifier Practitioner Role Code Practitioner Role Description Practitioner Given Name Practitioner Family Name Practitioner Team Code Practitioner Team Desc Practitioner AddressLine1 Practitioner AddressLine2 Practitioner AddressLine3 Practitioner AddressLine4 Practitioner AddressLine5 Practitioner Post Code Practitioner Email Address Practitioner Telephone Number Practitioner Mobile Telephone Number Practitioner Status Practitioner Initial Status Date Practitioner Final Status Date Practitioner Purge Data Set Data Item Classification Classification Identifier Classification Type Code Classification Type Description Classification Details Classification Status Classification Start Date Classification End Date Classification Purge Ethnic Origin Diagnostic Tests Radiology and LAB Electronic Documents Electronic Documents Emergency Attendance Emergency Attendance Inpatient Admission Waiting List Inpatient Admission Waiting List Inpatient Activity Inpatient Activity Outpatient Activity Outpatient Activity Annex D.4 – Sharing Dataset Definitions (all other sources) For information, the table below summarises the data available from other sources for viewing alongside data sourced from the general practice clinical systems in the Surrey Care Record. Organisation Data Category General Practice Person Details and Demographics Allergies Clinical Documentation Events Health Promotion Medications Preventative Procedures Problems Procedures Results Social / Family History Acute (data items may differ by organisation) Person Details and Demographics Allergies Diagnostic Tests Electronic Documents Emergency Attendance Inpatient Activity Inpatient Admission Waiting List Outpatient Activity Outpatient Referral Community and Mental Health Person Details and Demographics Alerts Allergies Care Plans Care Programme Approach (CPA) Data category Diagnoses XXXx Inpatient Admissions and History Mental Health Act Outpatient Appointments and History Referrals Risk Summary Safeguarding Service Planning Social Care Person Details and Demographics Alerting Assessment Associated People Carer Details XXXx Safeguarding Service Planning The table below shows additional data sets that may be available via the wider TVS Shared Care Record Programme: Data Field