Under Article 35 of the UK GDPR, a Data Protection Impact Assessment (DPIA) must be conducted whenever processing activities are likely to result in high risks to individuals' rights and freedoms. While the UK GDPR mandates the completion of DPIAs to assess and mitigate these risks, it does not specifically require their publication.
However, the Trust has chosen to publish summarised and redacted versions of DPIAs, which aligns with the principles of transparency and accountability outlined in GDRP Principles Articles 5 (Lawfulness, Fairness, and Transparency) and 24 (Responsibility of the Controller).
December 2024
No DPIA’s signed off for December 2024.
November 2024
DPIA-074: NBT – Sirona Care & Health: Heart Failure Mortality Data Sharing
NBT will share relevant mortality data with Sirona Care & Health for BNSSG ICS patients who have died while on the Heart Failure diagnostic waiting list. This will support Sirona in assessing diagnostic waiting times, evaluating pathway changes, informing service development, and developing options for the Long-Term Conditions Board. The data shared will include mortality details, current diagnoses, and relevant care information not otherwise accessible to Sirona.
DPIA-077: Assess-meso
ASSESS-meso is a 10-year observational study of mesothelioma patients, collecting longitudinal data and biological samples (e.g., blood, pleural fluid) for future research. The study involves multiple centres, including North Bristol NHS Trust and Oxford Respiratory Trials Unit, with participant identification from several regional hospitals. Data will cover clinical, biochemical, biometric, and psychological aspects to support ongoing research and biobanking.
October 2024
DPIA-057: Trac Recruitment system - additional module: Microsoft Teams integration into our recruitment system Trac
The integration of Microsoft Teams with the Trac recruitment system will enable automatic scheduling of remote interview meetings for panel members. This is an additional function to the existing Trac system, which has been in use for several years.
DPIA-059: Acute Provider Collaborative - Maternity Dashboard
Maternity data from NBT and UHBW will be transferred to the CACI cloud tenant for transformation and integration with Power BI to create a dashboard. This involves using data from the NBT and UHBW data warehouses, including Badgernet data tables, for calculation of specified metrics. CACI will store data capture and transfer applications on virtual machines at each site, with access for support and maintenance. Transformed data will be accessible to authorised NBT and UHBW staff via Active Directory and used in Power BI to generate the maternity dashboard.
DPIA-06: Clera patient communication app pilot in Infectious Disease
This project will pilot the Clera communications app on the Infectious Disease ward to provide patients with updates on their hospital stay, which can be shared with selected family and friends. Patient consent is required for app use, and updates are input by clinical staff. The pilot aims to improve patient experience, enhance family engagement, and reduce communication burdens on ward teams. The app is under development, and the pilot will assess its effectiveness. There will be no financial cost to the Trust during the trial, which is expected to last for approximately 6 months.
DPIA-061: New contactless devices for Southmead Hospital Charity
The charity plans to replace old contactless donation devices with new models (CollecTin More with Stripe reader - Give a Little Premium), offering improved connectivity, battery life, offline functionality, and reporting capabilities. These devices will be used at community fundraising events by staff and volunteers. The new software, "Give a Little," will enhance data reporting and allow for better tracking of donations across campaigns. The income will be processed by the charity, with no personal data collection beyond transaction-related information.
DPIA-066BNSSG Cyber Security Governance Group
A group of nominated individuals from across the BNSSG ICS will meet monthly to discuss cybersecurity governance matters. No patient information will be shared, but organisational metrics and software details may be discussed, such as protection software deployed and infrastructure vulnerabilities. The group's work will adhere to approved terms of reference from the BNSSG Digital Delivery Board.
September 2024
DPIA-047: AWP (Avon and Wiltshire NHS Partnership) - Eating Disorder Unit: Access to NBT's Integrated Clinical Environment (ICE) systems
AWP's Eating Disorder Unit (EDU) is requesting additional permissions for 50-60 staff members to access NBT's ICE system. This includes granting both view and request access, streamlining the process for health assessments and test requests, which currently rely on paper/email submissions. The aim is to reduce delays and improve communication within the shared care protocol across BNSSG, UHBW, and NBT.
DPIA-048: North Bristol NHS Trust Real World Evidence Project
NBT is collaborating with Solvetum to analyse Medicode coding data, focusing on leg ulcer and sacral osteomyelitis prevalence. This data will provide insights to inform service planning at NBT and across the BNSSG ICB. Solvetum, in partnership with the Tissue Viability team, will use its tools to deliver data analysis, pathway mapping, and health economics to improve clinical outcomes and address challenges within the health system.
DPIA-050: Early Pregnancy self-referral
This collaboration between Gynaecology services at UHBW and NBT aims to create a unified self-referral process for patients to access the early pregnancy clinic at both Trusts. The project will improve patient access, provide a seamless experience, reduce GP visits, and minimise ED attendances.
DPIA-051: Digital Procurement Transformation.
This project involves replacing the current procurement and contract management systems at BWPC, NBT, and UHBW with SAP Ariba. It will handle contract tender management, supplier and contract data, order management, and receipting processes. The system will interface with financial systems (Oracle and eFinancials), PRMS, and other relevant systems.
DPIA-054: Parasitic Acid Monitoring Device
A Parasitic Acid Monitoring Device has been installed in the Endoscopy Reprocessing Unit at NBT's Decontamination Facilities. The device serves two purposes: 1) alerting staff to dangerous fumes and 2) monitoring long-term exposure to fumes, sending data to the cloud for real-time reporting. Third-party access is required for ongoing monitoring as part of COSHH compliance.
DPIA-055: Install of Power BI Report Builder to 40 Power BI developers within NBT
Install of a Microsoft application from the Microsoft download centre. The software is Power BI Report Builder. This software will allow Power BI report Developers to build reports that can be distributed by email in different formats (PDF, Excel, Word, etc.)
August 2024
DPIA-041: Emergency Department Blood Borne Virus Opt-Out testing in Bristol and Weston Hospitals
This project will trial opt-out blood-borne virus (BBV) screening for HIV, Hepatitis B, and Hepatitis C in Bristol's emergency department (ED) for a 12-month period. Adults attending the ED for blood tests will be routinely tested for these viruses unless they opt out. The initiative follows a successful pilot in high-prevalence areas and aligns with NHSE’s Eliminating Hepatitis C programme. Information about the screening will be displayed in the ED, and Standard Operating Procedures (SOPs) are being developed for testing, result communication, and management of non-negative results
DPIA-042: Digital Outsourcing of Histopathology Reporting to LDPath Ltd.
This project will transition from sending physical glass slides and request forms to a digital transfer of images and patient information to the outsourced supplier, LDPath. Using Synapse Pathology’s 'Gateway' or a secure file transfer managed by IT, slide images, request form scans, macro images, and patient data will be securely transmitted. This digital process will expedite turnaround times for outsourced cases, providing faster results for patients and clinicians, while also reducing outsourcing costs, staff time, and postage expenses.
DPIA-043: Cardiac Rehab Project - Cardiology Single Managed Service Programme
The Single Managed Service Cardiology Programme aims to improve care quality and reduce inequities across BNSSG. As part of this, the Cardiac Rehab services are being reviewed and improved. The project involves hosting focus groups with patients who have experienced cardiac rehab to gather feedback and ensure patient input in service changes. The goal is to identify and address service inequalities, increase attendance, and ensure underrepresented populations feel comfortable participating in the program.
DPIA-044: NHS Cardio Vascular Disease (CVD) Work-based Health Checks
NBT has secured additional NHS England funding to deliver 4,300 work-based health checks by March 2025, initially for NBT staff, with plans to extend to local healthcare providers, public sector workers, and local service industries. The health checks will follow the NHS Over 40 health check guidelines, with results communicated to individuals' GP records. The service will be provided by OneCare, commissioned by Bristol City Council. The project aims to improve staff health and wellbeing without extending the offer to family or friends.
July 2024
DPIA-033: Repatriation Dashboard
A Power BI dashboard will be created using a database in NBT SharePoint to provide clinicians with better visibility and oversight of the repatriation process. This will improve communication with site management and help ward teams more accurately anticipate estimated discharge dates (EDDs) for patients.
DPIA-034: Mortality Review Process and Dashboard Optimisation
This project aims to improve mortality review processes at NBT, with plans to scale it across the NBT UHBW hospital group. It involves migrating the legacy Access mortality review database to a new digital system, ensuring integration with existing infrastructure, and automating data flow while adhering to data security and privacy standards. The project will enhance efficiency, data accuracy, and analysis for quality improvement. It will be delivered in two sub-projects: one for implementing a digital solution and dashboards, and another for integrating Medical Examiner scrutiny forms into the Radar system.
DPIA-037: T&O data matching for patients on waiting lists
This one-off project involves data matching between UHBW and NBT to identify patients who have already undergone T&O surgery at NBT. UHBW will provide patient information, including NHS numbers, referral dates, and treatment function, to NBT. NBT will check the NHS numbers in its data warehouse to determine if the patient has had surgery. The outcome will be shared with UHBW to update patient records. This process ensures that only necessary identifiable data is used, and appropriate checks are in place to protect patient privacy.
DPIA-038Aiosyn - NBT AI Quality Control Tool development Collaboration
This project involves developing an AI tool to assess the quality of digital histology slide scans, with the aim of automating rescans and recuts. The initial development will use fully anonymised patient sample images from routine workflow. No identifiable patient data is shared with the third-party provider, Aiosyn.
DPIA-040: Protected Characteristics Project (PCP)
This project aims to establish a process for collecting data on protected characteristics, caring responsibilities, and Indices of Multiple Deprivation (IMD) from research participants across BNSSG ICB, including NBT. The goal is to address the growing inequality in research participation, particularly for under-represented groups, including those with protected characteristics, caring responsibilities, and from areas of high deprivation. Collecting this data will identify excluded groups and enable targeted initiatives to improve research participation and outcomes, ultimately reducing health disparities.
June 2024
DPIA-029: National Poisons Information Service (NPIS): Review of guidance provided in cases of ethylene glycol toxicity
This project involves the retrospective extraction of data from Laboratory Information Management Systems (LIMS) and NPIS databases for patients with suspected toxic alcohol poisoning. Laboratory data will be matched with NPIS case files to create a complete dataset for each patient.
DPIA-030: R&D Flexigrant Implementation
Implementation of Flexigrant, a cloud-based Grant Management System, to manage the full lifecycle of research grants awarded by NBT Research and Development, including Southmead Hospital Charity Springboard Research Fund grants, departmental funding, training, and equipment requests.
DPIA-031: Service Improvement Project - Evaluation of Hologic Genius AI-assisted Digital Diagnostics System for Cervical Screening
Evaluation at NBT as part of a multi-centre study on the Hologic Genius™ Digital Cytology System, which uses AI technology and digital slide scanning to assist in cervical cancer screening. The system aims to improve workflow efficiency and patient care by enhancing the detection of pre-cancerous lesions and cervical cancer in ThinPrep Pap Test slides. The evaluation will be conducted at NHS Cervical Screening Programme laboratories.
May 2024
DPIA-024: Caesarean birth videos saved on Teams
Women electing to have a caesarean birth at Southmead maternity unit are offered participation in a study (the Time-to-Transition Caesarean Birth Study) which has ethical approval and is Sponsored by NBT. Women are consented to the study and in addition consent to their birth being filmed using a GoPro camera and iPad - consent to filming is documented on Trust Level 4 Medical Photography consent form. Films need to be reviewed by members of the research team so that we can document the sequence and timing of the caesarean birth.
DPIA-025: Zotero basic / Zotero Connector
Zotero reference management software will be used by the research team for the Perinatal Pelvic Health Self-Assessment Tool project. The software will manage references, store PDF documents, and support citation and bibliography creation for two anticipated publications. Zotero Connector will facilitate uploading published documents during online research.
DPIA-028: Twilio
Twilio, a USA-based communication platform, will be used in conjunction with REDCap by the Exeter Clinical Trials Unit for the DEXACELL clinical trial sponsored by North Bristol Trust. Participants who provide informed consent will receive SMS reminders and survey links to support data collection. Twilio may also be used for direct data collection via SMS, such as numeric ratings on wellbeing or pain.
April 2024
DPIA-022: Power BI dashboard displays in the Transfer of Care Hub (ToCH) at NBT, and Power BI access for partner organisations in the NBT ToCH
A new Power BI dashboard displays patient-level data for individuals managed through the Transfer of Care Hub (ToCH) at NBT, focusing on patients without a hospital criterion to reside. The dashboard supports operational priorities and collaboration among ToCH teams, which include NBT staff, local authority representatives, voluntary sector teams, and Sirona staff, all operating undersigned agreements.
DPIA-023: Integration of SQL Server-Integration Services into Trust cloud-hosted Office 365 resources – SharePoint and Outlook
Integration and Automation Focus: This project aims to automate the extraction, transformation, and loading of data between SQL Server Integration Services (SSIS) and Microsoft cloud services (SharePoint and Outlook 365) using Azure Active Directory (Azure AD) for authentication. Its core is to streamline operations, enhancing efficiency and reducing errors through automation.
March 2024
DPIA-14: Delegate Booking Payments
Implement the utilisation of Gov.uk Pay. The process of taking bookings and processing payments automatically will not only reduce the administrative process but provide applicants the reassurance that their financial and personal data is managed correctly, securely, and safely.
DPIA-015: Gov.Delivery email platform
A new email marketing system allows the Trust to move away from a ‘one size fits all’ approach to email communications in which our large, complex, and diverse workforce and external stakeholders are treated, to a much more two-way, personalised, targeted and insight-driven engagement. It provides the Trust with actionable insight and benchmarking on who is accessing corporate information and where the gaps are. There is an unsubscribe option on every email communication sent.
DPIA-016: Vital Hub: Sending OPEL Metrics via API
Non-person identifiable data to be shared for key performance indicators (KPIs) with local partners. Change in submission to more secure recommended method, API.
DPIA-017: Development of Southmead Hospital Charity’s Impact Measurement, Evaluation & Reporting
The project is a consultant-led piece of work to develop a theory, process, IT tooling and framework for effectively measuring, evaluating, and reporting the Charity’s impact across the Trust.
DPIA-019: Appointment cancellation/rescheduling form for patients on NBT website
A web form on the Trust's patient website enables patients to cancel or reschedule outpatient appointments. The form collects necessary information to process requests securely and in compliance with GDPR. Completed forms automatically generate emails to the appropriate team for action. This form is limited to centralised outpatient services managed by COPS and does not affect existing channels for other patient inquiries.
February 2024
DPIA-010: Kallidus Perform – Digital Appraisal
A new system for Digital Appraisals to replace the current paper process.
DPIA-011: Automatic notification of significant infectious diseases in pregnancy.
Searching for and sending significant IDPS results automatically ensures that all results are picked up by the Antenatal Screening Teams and therefore significantly reduces the risk of antenatal screening incidents where positive and indeterminate IDPS results are not acted upon. It is also a requirement of the IDPS handbook.
DPIA-012: Iuvo SUS XML Data Submission Service
Replacement of the current CDS submission service. To ensure the continuation of the service to supply CDS and ECDS submission from the present provider to the new provider.
DPIA-013: Robotic Gait Trainer
The project involves the use of a robotic rehabilitation device to provide gait training for neuroscience patients. It aims to deliver intensive rehabilitative therapy for adults with moderate to severe walking impairments caused by conditions such as neurological diseases, brain injury, or spinal cord injury. This initiative supports enhanced patient outcomes through high-intensity rehabilitation.
January 2024
DPIA-007: NBSS Extraction Tool
The project involves deploying a bespoke program to interrogate the NBSS database, routinely used by the Avon Breast Screening Service and breast care research team with authorised access. Developed by Royal Surrey NHS Trust’s scientific computing department, the software supports the DYAMOND study, sponsored by NBT. It screens the NBSS database to identify women potentially eligible for the study, encrypts the data, and assists researchers in determining participant eligibility based on specific criteria (attendance, age, and clear mammogram).
DPIA-008: Biomerieux VILINK - Fireworks
The analyser supports the diagnosis of respiratory infections. Its remote connection enables detailed result interpretation, enhancing patient care and improving the accuracy of both negative and positive results. This forms part of NBT's strategic response to winter pressures, with remote diagnostics improving issue response times.