Skip to content

Glossary

Term Working meaning in this wiki
Anonymous information Information that is not personal data because no person is identifiable by reasonably likely means. Context and recipient capability matter.
Confidential patient information (CPI) Patient information subject to the common-law duty of confidentiality; the statutory definition for section 251/COPI and opt-out purposes must be checked for the flow.
Controller The person or organisation determining purposes and means of processing. Joint controllers decide these together; a processor acts on documented instructions.
Direct / individual care Care, diagnosis, treatment or support of a particular person. The precise operational-policy definition must be checked where an exemption depends on it.
DCB / DAPB standard An NHS information standard or collection bearing an identifier. Its notice, scope, status and dates determine applicability.
DPIA Data protection impact assessment. Required before likely high-risk processing and useful as a structured design record for significant sharing.
ISN Information Standards Notice: the authoritative notice that states scope, status, implementation and conformance details for an NHS information standard.
PHC Primary health care; this wiki focuses principally on general practice but includes connected primary-care services.
Pseudonymised data Personal data processed so it cannot be attributed without additional information kept separately. It is normally still personal data for a party able to re-identify.
Section 251 The NHS Act 2006 route implemented through COPI regulations for certain processing of confidential patient information without consent, subject to approval and conditions.
Section 251B A qualified duty on relevant health and adult-social-care bodies to share information likely to facilitate an individual’s care when in their best interests, subject to statutory limits.
Standards Directory NHS England’s discovery service for published and future standards. It signposts authoritative notices/specifications; the listing alone is not proof of universal mandate.
Type 1 opt-out A GP-system-level choice preventing identifiable GP record data leaving the practice/system for purposes beyond direct care. It is distinct from the national data opt-out.