“The ICO has previously raised concerns around TPP’s SystmOne software and the ability of GP practice users, as data controllers, to comply with their obligations under data protection law to share personal data fairly, lawfully and appropriately.
We issued an interim statement in August 2017, which highlighted discussions between the ICO, TPP, NHS Digital, NHS England, the British Medical Association and the Royal College of GPs, and as a result, work being carried out by TPP to develop functionality to address those concerns.
As a conclusion to this work, new controls were implemented in 2018. The ICO welcomes this new functionality, which gives GP data controllers more control in how they share patient records for the purposes of patient care.
GP practices should ensure they have familiarised themselves with the new controls, and that they are satisfied that the controls they have applied at their practice allow patient records to be shared appropriately. Further advice from NHS Digital and NHS England can be found here: https://digital.nhs.uk/services/gp-systems-of-choice/changes-to-data-sharing-functionality-in-tpp-systmone.”
