What does my practice need to sign?

Data Sharing Agreement Tiered Framework

There are three tiers to the Data Sharing Agreement Tiered Framework:

1. Tier Zero Memorandum of Understanding

Overarching Memorandum of Understanding which sets out an organisations agreement in principle to share information with the partner organisations in a responsible way. The tiered approach provides a governance framework to standardise procedures and processes when sharing confidential personal information between partners where there is a lawful basis to do so. The Tier Zero is signed by a Chief Executive (or equivalent) and commits to their organisation operating within the agreed framework of data sharing. Only one Tier Zero needs to be signed regardless of the number of Tier One and Tier Two documents beneath it. It is anticipated that CCGs will work with member practices to achieve sign up to this MOU.

2. Tier One Data Sharing Agreement - Standards

These are the overarching standards which outline the agreed procedures for sharing confidential information. The document recognises that not all organisations which are party to the agreement will have the same assurance requirements (such as the Data Security and Protection Toolkit) and therefore sets the minimum standard of each of the participating organisations. The document sets the standards for obtaining, recording, holding, using and sharing of information and outlines the supporting legislation, guidelines and documents which govern information sharing between partners. The Tier One is signed by the designated responsible officer for each partner organisation, for the whole C&M Health and Care Partnership. It is anticipated that CCGs will work with member practices to achieve sign up to this Data Sharing Agreement – Standards.

3. Tier Two Data Sharing Agreement

The Tier Two provides a template for the safe sharing of personal data. The template will show what information should be shared and how, under what circumstances and by whom, and should be tailored to individual partnerships/projects. Each Tier Two Data Sharing Agreement will need to be signed off by each participating organisation. Tier Two Data Sharing Agreements could be for all partners at Tier Zero, or a selected cohort of partners who are participating in a specific project. Each Tier Two is signed by the Senior Information Risk Owner (SIRO) and/or Caldicott Guardian (CG), alternatively the Chief Executive or equivalent if there is no SIRO/CG, for each of the partner organisations.

There will be a tier 2 for each project under the Share2Care umbrella.  So far you have been asked to sign the CIPHA tier 2 and now the Share2Care Tier 2.  There will be more to follow as the programme progresses. It is anticipated that CCGs will work with member practices to achieve sign up to this Data Sharing Agreement.

 

Below are the links to the full tier 0 and tier 1 documents for your reference. The full COVID tier 2 can be found at the www.cipha.nhs.uk Please note these documents are for your reference only and do not need to be signed and returned.

https://www.share2care.nhs.uk/media/1228/tier-zero-cm-partnership.pdf

https://www.share2care.nhs.uk/media/1227/tier-one-standards-cm-partnership.pdf