I Still Wonder Just How Appropriate A Sole PHN Is To Be Managing A National Patient Data Aggregation System.

This appeared a few days ago.

Governance of primary health care data on Primary Health Insights

6 Apr 2022

GP Connect News

In an age where data can be used to great benefit, it is helpful for GPs and general practices to understand how patients’ and practices’ sensitive data is kept safe and their privacy protected.

Data shared by practices holding Data Sharing Agreements with WA Primary Health Alliance is stored on Primary Health Insights, the data storage and analytics platform built by 27 of the 31 PHNs that provides leading edge data security and has robust data governance embedded within its processes and structures.

Primary Health Insights is characterised by its individually secured ‘lock boxes’ for each PHN, where data is stored, analysed and reports generated using tools from within the platform. Similarly secured ‘collaboration zones’ are where PHNs can choose to share specific data sets to generate insights into focused areas of health care, all under strict data governance rules.

Further information about Primary Health Insights and how it works can be found here.

Data Governance and Data Sharing Agreements

The National Data Governance Framework, developed and used by all 31 PHNs, provides structures, mechanisms and processes to deliver a high standard of data governance.

Key features of the Framework include comprehensive policy statements and processes focussing on data privacy and security. Importantly the Data Set Privacy Impact Assessment is mandated for every new data set uploaded to Primary Health Insights. Based on Office of the Australian Information Commissioner guidelines, this toolset provides PHNs’ data analysts with detailed instructions, tools and procedures around data sharing, managing risk of re-identification and management of data breach events.

Underlying the National Data Governance Framework are Data Sharing Agreements held between PHNs and general practices.  These specify that the shared data is contains no information that may identify patients or practitioners and will only be used for permitted purposes.

The vision for Primary Health Insights is, within strict governance rules formalised in contractual agreements, to expand its reach and capitalise on the expertise, data and resources of related organisations.  This could include research organisations and the like.  The structure of the platform with its individually secured lock boxes and collaboration zones provides a discrete, secure environment for external organisations to participate.

Further details regarding the security and governance of primary care health data is available from the Primary Health Insights web site, see Security and Governance & Privacy.  Questions may be directed to comms@phinsights.org.au or via the web site Contact page.

Here is the link:

https://news.wapha.org.au/governance-of-primary-health-care-data-on-primary-health-insights/

The entity that is managing this is as follows:

Primary Health Insights

This is a collaborative initiative of 27 of the 31 Primary Health Networks. Primary Health Insights is operated by WA Primary Health Alliance.
WA Primary Health Alliance
1 Hood Street, Subiaco, WA 6008
PO Box 883, Subiaco, WA 6904
T 08 6272 4900

What I am concerned about is that responsibility for data de-identification (which can’t really be done safely)  and  consent management are pushed down to the individual practices where it is most likely to be handled poorly amidst all the the pressures and stresses for busy general practice.

I also wonder, with the importance of having accurate GP usage and research data,  why this is all not undertaken by a fully  funded, governed  and managed entity which has this effort as its sole focus, and has all the skills to do it well.

This looks like the Health Department trying to get this data on the cheap with minimal responsibility.

How well do you think this is being implemented and run?

David.