<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns="http://www.w3.org/TR/REC-html40">

<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]-->
<style>
<!--
 /* Font Definitions */
 @font-face
        {font-family:Helvetica;
        panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
        {font-family:Tahoma;
        panose-1:2 11 6 4 3 5 4 4 2 4;}
 /* Style Definitions */
 p.MsoNormal, li.MsoNormal, div.MsoNormal
        {margin:0cm;
        margin-bottom:.0001pt;
        font-size:12.0pt;
        font-family:"Times New Roman";}
a:link, span.MsoHyperlink
        {color:blue;
        text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
        {color:blue;
        text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
        {margin:0cm;
        margin-bottom:.0001pt;
        font-size:10.0pt;
        font-family:"Courier New";}
p
        {mso-margin-top-alt:auto;
        margin-right:0cm;
        mso-margin-bottom-alt:auto;
        margin-left:0cm;
        font-size:12.0pt;
        font-family:"Times New Roman";}
span.EmailStyle19
        {mso-style-type:personal-reply;
        font-family:Arial;
        color:blue;
        font-weight:normal;
        font-style:normal;
        text-decoration:none none;}
@page Section1
        {size:595.3pt 841.9pt;
        margin:72.0pt 90.0pt 72.0pt 90.0pt;}
div.Section1
        {page:Section1;}
-->
</style>

</head>

<body lang=EN-GB link=blue vlink=blue style='word-wrap: break-word;-webkit-nbsp-mode: space;
-webkit-line-break: after-white-space'>

<div class=Section1>

<p class=MsoNormal><font size=3 color=blue face=Arial><span style='font-size:
12.0pt;font-family:Arial;color:blue'>HSCIC was established under the Health
& Social Care Act on 1.4.13: it included the previous NHS Information
Centre – with the addition of a lot of CfH staff and functions.<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=3 color=blue face=Arial><span style='font-size:
12.0pt;font-family:Arial;color:blue'>I can’t remember what happened in
2006: surely the NHSIA (NHS Information Authority) had been abolished before
then?<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=3 color=blue face=Arial><span style='font-size:
12.0pt;font-family:Arial;color:blue'>Does every reorganisation of the NHS
remove all responsibility for actions performed by the previous organisations?<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=3 color=blue face=Arial><span style='font-size:
12.0pt;font-family:Arial;color:blue'><o:p> </o:p></span></font></p>

<div>

<p><i><font size=3 color=blue face="Times New Roman"><span style='font-size:
12.0pt;color:blue;font-style:italic'>Mary Hawking<o:p></o:p></span></font></i></p>

<p><b><font size=1 color=blue face="Times New Roman"><span style='font-size:
9.0pt;color:blue;font-weight:bold'>Retired from NHS on 31.3.13 because of the
Health and Social Care Act 2012</span></font></b><b><font size=1 color=blue><span
style='font-size:9.0pt;color:blue;font-weight:bold'><o:p></o:p></span></font></b></p>

<p><font size=1 color=blue face=Arial><span style='font-size:7.5pt;font-family:
Arial;color:blue'>"thinking - independent thinking - is to humans as
swimming is to cats: we can do it if we really have to."  Mark Earles
on Radio 4</span></font><font color=blue><span style='color:blue'><o:p></o:p></span></font></p>

<p class=MsoPlainText><font size=1 color=blue face=Arial><span
style='font-size:7.5pt;font-family:Arial;color:blue'>blog </span></font><font
color=blue><span style='color:blue'><a href="http://maryhawking.wordpress.com/"><font
size=1 face=Arial><span style='font-size:7.5pt;font-family:Arial'>http://maryhawking.wordpress.com/</span></font></a></span></font><font
size=1 color=blue face=Arial><span style='font-size:7.5pt;font-family:Arial;
color:blue'> And</span></font><font size=1 color=black face=Arial><span
style='font-size:7.5pt;font-family:Arial;color:black'> Fred!</span></font><font
color=blue><span style='color:blue'> <br>
</span></font><font size=1 color=blue face=Arial><span style='font-size:7.5pt;
font-family:Arial;color:blue'>http://primaryhealthinfo.wordpress.com/2013/11/02/freds-saying-you-just-dont-get-it/ 
<o:p></o:p></span></font></p>

</div>

<p class=MsoNormal><font size=3 color=blue face=Arial><span style='font-size:
12.0pt;font-family:Arial;color:blue'><o:p> </o:p></span></font></p>

<div>

<div class=MsoNormal align=center style='text-align:center'><font size=3
face="Times New Roman"><span lang=EN-US style='font-size:12.0pt'>

<hr size=3 width="100%" align=center tabindex=-1>

</span></font></div>

<p class=MsoNormal><b><font size=2 face=Tahoma><span lang=EN-US
style='font-size:10.0pt;font-family:Tahoma;font-weight:bold'>From:</span></font></b><font
size=2 face=Tahoma><span lang=EN-US style='font-size:10.0pt;font-family:Tahoma'>
Gmail [mailto:codepope@gmail.com] <br>
<b><span style='font-weight:bold'>Sent:</span></b> 24 February 2014 15:40<br>
<b><span style='font-weight:bold'>To:</span></b> UK Cryptography Policy
Discussion Group; Brian Morrison<br>
<b><span style='font-weight:bold'>Subject:</span></b> Re: Health Service Record
Confidentiality</span></font><span lang=EN-US><o:p></o:p></span></p>

</div>

<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>

<div style='color:rgba(0,0,0,1.0);line-height:auto' id="bloop_customfont">

<p class=MsoNormal><font size=1 face=Helvetica><span style='font-size:8.0pt;
font-family:Helvetica'>HSCIC have made a statement -<o:p></o:p></span></font></p>

</div>

<div style='color:rgba(0,0,0,1.0);line-height:auto' id="bloop_customfont">

<p class=MsoNormal><font size=1 face=Helvetica><span style='font-size:8.0pt;
font-family:Helvetica'><o:p> </o:p></span></font></p>

</div>

<div style='color:rgba(0,0,0,1.0);line-height:auto' id="bloop_customfont">

<p class=MsoNormal><font size=1 face=Helvetica><span style='font-size:8.0pt;
font-family:Helvetica'><a
href="http://www.hscic.gov.uk/article/3932/Statement-on-use-of-Hospital-Episode-Statistics-HES-data">http://www.hscic.gov.uk/article/3932/Statement-on-use-of-Hospital-Episode-Statistics-HES-data</a><o:p></o:p></span></font></p>

</div>

<div style='color:rgba(0,0,0,1.0);line-height:auto' id="bloop_customfont">

<p class=MsoNormal><font size=1 face=Helvetica><span style='font-size:8.0pt;
font-family:Helvetica'><o:p> </o:p></span></font></p>

</div>

<div style='color:rgba(0,0,0,1.0);line-height:auto' id="bloop_customfont">

<p class=MsoNormal><font size=1 face=Helvetica><span style='font-size:8.0pt;
font-family:Helvetica'>They appear to have been responsible for collection
since 2006 but only handling the processing since 2013.<o:p></o:p></span></font></p>

</div>

<div style='color:rgba(0,0,0,1.0);line-height:auto' id="bloop_customfont">

<p class=MsoNormal><font size=1 face=Helvetica><span style='font-size:8.0pt;
font-family:Helvetica'><o:p> </o:p></span></font></p>

</div>

<div style='color:rgba(0,0,0,1.0);line-height:auto' id="bloop_customfont">

<p class=MsoNormal><font size=1 face=Helvetica><span style='font-size:8.0pt;
font-family:Helvetica'>Dj<o:p></o:p></span></font></p>

</div>

<div id="bloop_sign_1393256324851408896">

<div>

<p class=MsoNormal><font size=1 face=Helvetica><span style='font-size:8.0pt;
font-family:Helvetica'><o:p> </o:p></span></font></p>

</div>

</div>

<p><font size=1 color="#a0a0a8" face=Helvetica><span style='font-size:8.0pt;
font-family:Helvetica;color:#A0A0A8'>On 24 February 2014 at 14:29:55, Gmail (<a
href="mailto://codepope@gmail.com">codepope@gmail.com</a>) wrote:<o:p></o:p></span></font></p>

<blockquote style='margin-top:5.0pt;margin-bottom:5.0pt' type=cite>

<div style='word-wrap: break-word;-webkit-nbsp-mode: space;-webkit-line-break: after-white-space'>

<div>

<div style='color:rgba(0,0,0,1.0);line-height:auto' id="bloop_customfont">

<p class=MsoNormal><font size=1 face=Helvetica><span style='font-size:8.0pt;
font-family:Helvetica'><o:p> </o:p></span></font></p>

</div>

<p><font size=1 color="#a0a0a8" face=Helvetica><span style='font-size:8.0pt;
font-family:Helvetica;color:#A0A0A8'>On 24 February 2014 at 14:16:18, Brian
Morrison (<a href="mailto://bdm@fenrir.org.uk">bdm@fenrir.org.uk</a>) wrote:<o:p></o:p></span></font></p>

<div>

<blockquote style='margin-top:5.0pt;margin-bottom:5.0pt;orphans: auto;
text-align:start;widows: auto;-webkit-text-stroke-width: 0px;word-spacing:0px'
type=cite>

<div>

<div>

<p class=MsoNormal style='margin-bottom:12.0pt;background:white'><font size=1
face=Helvetica><span style='font-size:8.0pt;font-family:Helvetica'>On Mon, 24
Feb 2014 13:42:36 +0000<span class=apple-converted-space> </span><br>
Ian Batten wrote:<span class=apple-converted-space> </span><br>
<br>
> HSCIS's rather unconvincing excuse is that the data was provided by a<span
class=apple-converted-space> </span><br>
> previous organisation and they wouldn't do it now. Hardly reassuring.<span
class=apple-converted-space> </span><br>
<br>
No, that certainly isn't reassuring. It indicates that some lax<span
class=apple-converted-space> </span><br>
thinking must have gone on before.<span class=apple-converted-space> </span><o:p></o:p></span></font></p>

</div>

</div>

</blockquote>

</div>

<p><font size=1 face=Helvetica><span style='font-size:8.0pt;font-family:Helvetica'>Oddly
though, its also a statement that doesn’t stand up to scrutiny.<o:p></o:p></span></font></p>

<p><font size=1 face=Helvetica><span style='font-size:8.0pt;font-family:Helvetica'>From <a
href="http://www.hscic.gov.uk/hes">http://www.hscic.gov.uk/hes</a><o:p></o:p></span></font></p>

<p><font size=1 face=Arial><span style='font-size:7.0pt;font-family:Arial'>"In
1996 these bodies were abolished and the NHS-Wide Clearing Service (NWCS) was
set up to provide a means of transmitting the records. In 2006 this work was
taken over by the Secondary Uses Service, which is run by the Health and Social
Care Information Centre and the National Programme for IT.”</span></font><font
size=1 face=Helvetica><span style='font-size:8.0pt;font-family:Helvetica'><o:p></o:p></span></font></p>

<p><font size=1 face=Arial><span style='font-size:7.0pt;font-family:Arial'>So
it came under HSCIS’s remit in 2006. The data set was from
2000-2010. </span></font><font size=1 face=Helvetica><span
style='font-size:8.0pt;font-family:Helvetica'><o:p></o:p></span></font></p>

<p><font size=1 face=Arial><span style='font-size:7.0pt;font-family:Arial'>For
tracking though, there is the HESID - </span></font><font size=1
face=Helvetica><span style='font-size:8.0pt;font-family:Helvetica'><a
href="http://www.hscic.gov.uk/media/1370/HES-Hospital-Episode-Statistics-Replacement-of-the-HES-patient-ID/pdf/HESID_Replacement_Nov09.pdf">http://www.hscic.gov.uk/media/1370/HES-Hospital-Episode-Statistics-Replacement-of-the-HES-patient-ID/pdf/HESID_Replacement_Nov09.pdf</a><o:p></o:p></span></font></p>

<p><font size=1 face=Helvetica><span style='font-size:8.0pt;font-family:Helvetica'>Which
appears to include per-client pseudonym-ids. Data cleaning on release appears
to be documented here - <a
href="http://www.datadictionary.nhs.uk/web_site_content/cds_supporting_information/security_issues_and_patient_confidentiality.asp?shownav=1">http://www.datadictionary.nhs.uk/web_site_content/cds_supporting_information/security_issues_and_patient_confidentiality.asp?shownav=1</a><o:p></o:p></span></font></p>

<p><font size=1 face=Helvetica><span style='font-size:8.0pt;font-family:Helvetica'><o:p> </o:p></span></font></p>

<p><font size=1 face=Helvetica><span style='font-size:8.0pt;font-family:Helvetica'>Dj<o:p></o:p></span></font></p>

</div>

</div>

</blockquote>

</div>

</body>

</html>