Specific Projects

University Hospitals of North Midlands NHS Trust (UHNM) is working in partnership with regional health and care organisations to develop One Health and Care, a secure Integrated Care Record. 

This initiative brings together essential information from:

•    GP practices
•    Local authorities
•    Acute, community, and mental health hospital trusts
•    Commissioning groups

The integrated record provides a snapshot of key data about patients seen and treated at UHNM hospitals. It is not a full medical record, but it enables clinicians to access relevant information to support safer, more coordinated care.

Benefits of One Health and Care

•    Clinicians can view up-to-date information about your medications, diagnoses, test results, and care plans.

•    Reduces the need to repeat your health history across services.
•    Improves decision-making and continuity of care across settings.
•    Helps avoid unnecessary duplication of tests and procedures.

Access and Security

Only authorised staff directly involved in your care can access your information, and only for their own patients. All data is held securely and shared in accordance with data protection legislation and professional confidentiality standards.

Sensitive information such as sexual health, fertility treatment, and gender reassignment records are not included in the shared record.

National Record Locator

The National Record Locator (NRL) holds data which is used by health and social care workers to allow them to find and access patient information that has been shared by other health and social care organisations across England, to support the direct care of a patient.

For example, an ambulance service called to an accident in London can use the NRL to access information about a patient who is visiting from Preston.

The Trust is supporting this initiative and further information can be found by clicking on this link: National Record Locator (NRL) - NHS England Digital

Further Information

Further information about One Health & Care can be found here and by reviewing the information leaflet which can be accessed by clicking the link here.

Version Control – v4 – 16.09.25
Reworded and placed in a different run order within the privacy notice

The Patient Health Record (PHR) is a digital solution that allows patients to securely access a summary of their confidential health and social care information through a mobile app or website. It is part of the wider One Health & Care Integrated Care Record, which brings together data from multiple health and social care providers across regions such as Staffordshire, Stoke-on-Trent, Shropshire, Telford, and Wrekin.

Key Features:

• 24/7 Access: Patients can view their health and care records at any time, including information from GPs, hospitals, community services (including mental health), and social care providers.

• Self-Management: The app enables patients to record their own health information (e.g., blood pressure, blood sugar, weight, personal goals, over-the-counter medication) and link data from fitness wearables (e.g., Fitbit, Apple, Garmin).

• Appointments: Patients can view future and past appointments, A&E attendances, and hospital admissions. Some organisations are enabling electronic appointment letters to be viewed within the app.

• Medication & Health Data: Access to GP-prescribed medication, recent vaccinations, allergies, family history, medical problems, and lifestyle information (where available from GP records).

• Personal Health Diary: Patients can maintain a health diary and prepare notes for appointments.

• Secure Access: Access is managed via NHS login, ensuring data security and privacy.

• Data Privacy: Information added by patients is not visible to health and social care professionals and is not used for marketing or commercial purposes. Some data may be used for secondary analysis to improve services.

Integration with NHS App:

The PHR is designed to complement the NHS App, providing a blended experience for users. GP data available in the NHS App is enhanced with additional data from other health and care providers via the PHR.

Purpose:

The PHR empowers patients to take an active role in managing their health and wellbeing, improves communication, and supports more efficient care delivery by making key information easily accessible.

How to Access:

The app is free to download from the App Store (Apple) and Google Play (Android) and can also be accessed via a web browser.

This is part of the One Health & Care Integrated Care Record and allows the patient to access elements of their own record via an App https://www.twbstaffsandstoke.org.uk/about-us/our-work/one-health-and-care/personal-health-record-privacy-notice 

University Hospitals of North Midlands NHS Trust (UHNM) is pleased to offer patients access to Patients Know Best (PKB) – a secure, online patient information portal that allows you to view and manage your health information from any smartphone, tablet, or computer.

What You Can Do with PKB

Once registered, you can:

• View your hospital letters and appointment details online
  See your test results, including radiology and pathology (as they become available)
• Access notifications for outpatient and inpatient appointments
  Communicate securely with services such as PALS
• Record and track your own health information (e.g. allergies, medications, symptoms)
• Share your information with family, carers, and healthcare professionals – only if you choose to
• Access your health journal and resources added by your care team
• Use the portal 24/7, whether at home or abroad

How to Register

• You will receive an invitation to register via email, SMS, or letter. If you haven’t received an invitation but have recently been a patient, you can register using your NHS login.

• Once registered, you can access PKB via the NHS App or directly through the UHNM PKB Portal.

• You can find answers to some Common Questions, or learn more about the features of the PKB Patient System at Patients Know Best.

• Note: If you read your appointment letters in the portal before the appointment date, a paper copy may not be sent. For urgent appointments (within 7 days), UHNM will always send a paper letter.

Version Control – v2 – 16.09.25
Reworded and placed in a different run order within the privacy notice

Team Prevent, part of Optima Health, is UHNM’s dedicated occupational health provider. Their mission is to support the health, safety, and wellbeing of all UHNM staff, enabling a productive and safe working environment.

Team Prevent works closely with the People Directorate, line managers, and staff to ensure timely and effective interventions. They provide centralised clinical and administrative support, ensuring consistency and quality across the Trust.

Occupational Health is embedded in UHNM’s Sickness Absence Management Policy, ensuring:

• Fair and consistent handling of health-related absences.
• Compliance with equality and disability legislation.
• Supportive return-to-work processes and reasonable adjustments

https://www.teamprevent.co.uk/storage/user/Privacy_Statement_TEAM_PREVENT.pdf

Keele University and UHNM share a long-standing and highly successful partnership that plays a vital role in shaping healthcare education, research, and clinical practice across Staffordshire and beyond.

Education and Clinical Training

The Royal Stoke University Hospital serves as the main teaching hospital for Keele’s Medical School. Around 130 medical students are admitted annually, with two-thirds of their clinical training taking place at UHNM. Training is delivered through a blend of problem-based learning, bedside teaching, seminars, and lectures, exposing students to a wide range of clinical conditions.

UHNM hosts Keele’s Clinical Education Centre and Postgraduate Medical Centre, offering advanced training environments for medical, nursing, and allied health students.

The Health Libraries at both Royal Stoke and County Hospital support Keele students and NHS staff with access to specialist resources.

Research Collaboration

Keele and UHNM have a rich history of joint research, particularly in areas like regenerative medicine, primary and secondary care, and clinical trials.

The partnership has led to the creation of a third health-related research institute and the appointment of clinical professorial roles to strengthen research capacity

https://www.keele.ac.uk/privacynotices/privacynotice-students/

The NHS Secure Boundary is a nationally managed cybersecurity solution designed to protect NHS organisations—including UHNM—from digital threats. It acts as a perimeter security layer, safeguarding internet-facing systems and sensitive data across the Trust.

This is a  national firewall and internet gateway, centrally managed by NHS England which was introduced after the 2017 WannaCry attack to enhance NHS-wide cyber defences. It uses next-generation firewall (NGFW) and web application firewall (WAF) technologies to monitor, filter, and block malicious traffic.

UHNM is among the 190+ NHS organisations onboarded to the Secure Boundary service. This provides:

• Advanced threat protection for clinical and business systems.
• Centralised logging and inspection of internet traffic.
• Improved visibility of encrypted traffic and malicious content.
• Compliance support for DSPT, Cyber Essentials Plus, and NCSC standards.

https://digital.nhs.uk/about-nhs-digital/our-work/keeping-patient-data-safe/gdpr/gdpr-register/nhs-secure-boundary

Version Control – v8 – 16.09.25

A separate section. Removed the privacy notices for children, research and staff to their own section under ‘other privacy notices’

During the COVID-19 pandemic, University Hospitals of North Midlands NHS Trust (UHNM) has been required to collect and process personal information to support public health efforts, deliver care, and comply with national guidance.

Why We Collect COVID-19 Related Data

UHNM may collect information related to COVID-19 for purposes including:

• Monitoring and managing the spread of the virus
• Supporting NHS Test and Trace
• Delivering appropriate clinical care
• Participating in public health surveillance and research
• Meeting legal obligations under public health legislation

Legal Basis for Processing

The collection and use of COVID-19 related data is lawful under:

• UK GDPR and the Data Protection Act 2018, specifically:
• Article 6(1)(e) – processing is necessary for the performance of a task carried out in the public interest
• Article 9(2)(i) – processing is necessary for reasons of public interest in the area of public health
• Common Law Duty of Confidentiality, which may be set aside under:
• Section 251 of the NHS Act 2006, with approval from the Confidentiality Advisory Group (CAG)
• Health Service (Control of Patient Information) Regulations 2002
• Overriding public interest, where the benefit of sharing data outweighs the duty of confidentiality

UHNM ensures that all data processing is fair, lawful, and transparent, and only the minimum necessary information is used.

Transparency and Your Rights

We are committed to keeping you informed about how your data is used. You have the right to:

• Be informed about the purpose and lawful basis for processing
• Access your data
• Object to certain types of processing
• Opt out of your data being used for research or planning via the National Data Opt-Out

COVID-19 Research and Public Health

For research and auditing related to COVID-19, UHNM may process data under:

• Article 9(2)(i) – Processing is necessary for reasons of public interest in the area of public health, including protecting against serious cross-border health threats and ensuring high standards of healthcare and medical products.

UHNM ensures that all data processing is proportionate, secure, and aligned with your rights under data protection law.

Version Control – v6 – 16.09.25

Reworded and all reference to covid-19 added into this section. Placed in a different run order

On 3 June 2024, Synnovis, a pathology partnership between Guy’s and St Thomas’ NHS Foundation Trust, King’s College Hospitals NHS Trust and SYNLAB, was the victim of a ransomware cyberattack, along with other NHS Trusts.

Our investigations have shown that no patient medical data was breached.

The Trust would like to reassure its patients that their data is safe and that steps have been taken to ensure this continues.

If you would like further information on the event and the immediate investigations, please visit Synnovis Group LLP

Version Control – V1 March 2026