Data anonymisation at HIC

Project-specific anonymisation procedure

Step 1: Project dataset

Every project dataset will be uniquely anonymised before being made available to an Approved Data User, unless identifiable data is required and is specifically approved by the Data Controller.

Step 2: Pro-CHI

The Pro-CHI is generated by HIC to uniquely anonymise a typical NHS dataset Community Health Index (CHI) number. This capability is located on a secure server, accessible only by HIC.

Step 3: Anonymisation process

The anonymisation process removes all names and addresses from the dataset.

As standard it also anonymises:

• The CHI into a project-specific pseudo-CHI (Pro-CHI)
• The date of birth – standard anonymisation is to within 3 months of the original date
• The postcode is restricted to postcode district by removing the last 3 digits
• The GP code, the GMC number (General Medical Council registration number), the GP Practice code and the Pharmacy code are all replaced by anonymous versions
• If data is being provided via HIC Services that has already been effectively anonymised elsewhere, this procedure may not need to be repeated by HIC Services
• Where there is no CHI a unique pseudo-anonymised identifier will be allocated to each individual
• Aggregated data provided for study feasibility will not show values lower than five

These steps will help ensure that identification of individual patients is not possible, while retaining the ability to link patient data across multiple data sets for a particular project.

Step 4: Data request

Any request to HIC for more detail about any of the Anonymised Data items listed above will be treated as a request for identifiable data, which may require permission from the data controller.

Step 5: Project specific

The Pro-CHI is project-specific ensuring that data provided to any one project remains within the bounds of linkage as approved for that project.

Step 6: Traceability

The Pro-CHI allows traceability of any HIC Services Project Dataset to the source of the data and the subsequent Approved Data User for that data.