New service to confirm GP registration status

We are developing a new national service, Notify a patient, which sends a message to a patient to confirm that their registration with a new GP has been accepted.

Notify a patient is currently being piloted in some integrated care boards (ICBs) for use with patients transferring between GP practices.

Later this summer, we will begin rolling out this centrally-funded service further and aim for it to be available to all GP practices by the end of the year.

If your ICB would like to join the current pilot, or if you have any questions, please contact our team.

/by
Additional information for GP practice managers – July 2023

We are developing a new national service, Notify a patient, which sends a message to a patient to confirm that their registration with a new GP has been accepted.

Notify a patient is currently being piloted in some integrated care boards for use with patients transferring between GP practices.

At the beginning of August, we will begin rolling out this centrally-funded service further and aim for it to be available to all GP practices by the end of the year.

If your practice would like to join the current pilot, or if you have any questions, please contact our team.

A new tool is available to help you quickly audit the usability of key patient journeys on GP websites and help determine if they meet the requirements set out in the GP contract. Audits usually take about 90 minutes.

The tool is designed to be used in conjunction with the creating a highly usable and accessible GP website for patients guidance.

Making online journeys easier for patients is a key priority of the delivery plan for recovering access to primary care. Read more on FutureNHS (login required).

We have expanded the range of settings supported by the former GP IT Futures programme and developed a new model to reflect this wider remit.

The Digital Services for Integrated Care model will continue to help primary care settings to choose and deploy assured tech solutions that meet their needs – but is extending its coverage beyond primary care.

The new model will support suppliers to develop digital solutions that connect together care settings across Integrated Care Systems.

You should continue to use the Buying Catalogue to  identify the products and services that best meet your needs.

As part of ongoing research, we would like to get feedback about the Electronic Prescription Service (EPS) to improve digital information available to patients and healthcare professionals in the future.  

Prescribers and dispensers interested in giving their experiences of using EPS can take part in research carried out through workshops, telephone interviews or short online surveys. 

Find out more and register your interest.

Having an NHS App ambassador in your practice ensures you are up to date with the latest information about the NHS App. Ambassadors join a community sharing tips on how best to promote the NHS App and have the chance to ask questions directly to the NHS App team at our quarterly webinar.

If you, or a member of your practice, would like to become an NHS App ambassador, please contact appambassadors@nhs.net.

/by
Additional information for digital leaders – July 2023

We have expanded the range of settings supported by the former GP IT Futures programme and developed a new model to reflect this wider remit.

The Digital Services for Integrated Care model will continue to help primary care settings choose and deploy assured tech solutions that meet their needs – but has extended its coverage beyond primary care.

We are setting out standards and capabilities for suppliers to develop systems that meet the needs of the workforce across integrated care systems and that help primary care to integrate more closely with other settings.

A new tool is available to help you quickly audit the usability of key patient journeys on GP websites and help determine if they meet the requirements set out in the GP contract. Audits usually take about 90 minutes.

The tool is designed to be used in conjunction with the creating a highly usable and accessible GP website for patients guidance.

Making online journeys easier for patients is a key priority of the delivery plan for recovering access to primary care. Read more on FutureNHS (login required).

Locum pharmacist Faraaz Hussain describes his experience of using the new National Care Records Service, the successor to the Summary Care Record application.

/by
For action: Next steps to update your NHS Public Key Infrastructure certificate

Current NHS Public Key Infrastructure (PKI) first-generation (G1) certificates are due to expire on 4 June 2024. Communication via the Spine will cease for any IT systems with invalid certificates, which could impact patient care.

Suppliers of healthcare technology must install second-generation (G2) certificates before this date. We recommend you complete these 5 steps as soon as possible and before 31 December 2023.

Please note: the certificates used for local Interoperability Toolkit (ITK) web service end points that send NHS 111 messages that flow direct between systems are not yet ready to be updated. Please do not renew these certificates until you receive further instructions.  

You can contact our team if you have any questions or need further support. 

/by
For action: Next steps to switch on access to online GP records

The updated GP contract requires all practices to provide their patients with online access to new (prospective) health information in their GP records (unless exceptions apply) by 31 October 2023. 

Once you have completed the GP readiness checklist, you will be able to have your clinical IT systems updated to automatically allow your patients access to their new records. 

EMIS practices should complete an opt-in form and select a date. We recommend booking early as slots are limited. 

TPP practices can now update their own systems easily and conveniently by following instructions in this user guide (FutureNHS login required). 

Find out more about switching on access to new GP records. 

/by
Change to Smartcard passcode requirements

We are changing the passcode requirements of NHS smartcards as part of a national update to the Care Identity Service for health and care staff. We are making this change as part of our preparation for rolling out a more advanced smartcard, the series 9.

The minimum security passcode length on all smartcards will change to 6-8 numbers only. We will no longer accept letters as part of your passcode.

Health and care professionals with a smartcard: your current passcode will continue to work. You do not need to change your passcode now.

You will only notice this change when the time comes to choose a new passcode, for example if your smartcard is locked.

The change will take affect from Wednesday 19 July 2023.

For health and care professionals with a smartcard, you will only notice this change when the time comes to change or reset your passcode.

Please ensure that the passcode you use is not easy to guess and contains 6-8 numbers only. Avoid using birthdays.

Remember that your passcode is the safety check that proves it is you using the card. All operations performed using that card are linked to you, so do not share the passcode with anyone.

If you have any queries about this change, please contact your local Registration Authority.

For registration authorities

You need to be aware of the new requirements to passcode in case staff approach you about the change.

If a user tries to set a passcode of fewer than 6 numbers, this will return an error message indicating that the passcode is too short.

Setting a new passcode with letters will also return an error.

Passcodes in Care Identity Management

The Care Identity Management smartcard passcode policy is still 4-8 characters.

This is out of step with the revised Care Identity Service application passcodes, which must be 6-8 numbers.

A future release of Care Identity Management will align the two services. This is expected by the end of September 2023.

/by
Event: Secure Data Environment webinar

Book your place on NHS England’s Secure Data Environment (SDE) webinar on Wednesday 19 July to see the SDE platform in action, understand the application process, the charging model and data availability. We will also update you on the continuous improvements planned for 2023/24, and there will be plenty of time for you to ask questions.

/by
Deprecation notice: IF-DLP Registration and IF-DLP Authentication

We plan to migrate all internal NHS England (previously NHS Digital) services to NHS CIS2 Authentication.

In line with this, IF-DLP Registration and IF-DLP Authentication will be deprecated on 31 January 2024.

Both services will then be retired on 31 March 2024.

On 31 January 2024: 

  • We will reduce the support level for the IF-DLP Authentication service from Bronze SLA to 'reasonable endeavours'.
  • Operational hours will remain 8am to 6pm, Monday to Friday with no guarantees around service uptime.

On 31 March 2024: 

  • Identity Management using IF-DLP Registration process will no longer be available.
  • Authentication will no longer be available via IF-DLP Authentication.

Benefits of moving to the full NHS CIS2 Authentication service include:

  • a higher level of security from the current DLP auth service
  • a common identity with other NHS and Health and Social Care applications
  • new features such as modern alternatives to smartcards, and supports access over the internet via devices other than Windows PCs
  • more secure and better optimised for high availability and for the addition of new capabilities wherever demand creates a need

Definitions

Deprecation notice

A decision has been taken to deprecate a service. The deprecation notice is issued with a deprecation and retirement date. 

The service remains available for use. However, no new integrations are allowed.

Deprecation date

The service level changes from "Bronze" to "reasonable endeavours". The service remains available for use. No new integrations are allowed.

Retirement date

The retirement date is the date at the end of this period at which the service will be taken out of service. 

The service is no longer available for use after this point.

Note: This change affects the IF-DLP registration and authentication using https://dsp-portal.digital.nhs.uk/ - not the HSCN based Smartcard authentication to DLP (https://dsp-portal.national.ncrs.nhs.uk/). However, the HSCN based access will also be changing due to CIS1 Auth deprecation.

If you use the IF-DLP Registration process

If you are a registered IF-DLP user: 

  • before 31 March 2024 you will need to re-register for a Care Identity profile

If you register other IF-DLP users: 

  • before 31 March 2024 you will need plan if/how you support users to re-register for a Care Identity

If you use IF-DLP Authentication 

If you are a registered IF-DLP user, before 31 March 2024 you will need to: 

  • re-register for a Care Identity profile
  • check that you are able to use one of the authenticators provided by NHS CIS2 Authentication

If you are responsible for managing the DSCRO / DLP service

You should plan to:

  • move the existing smartcard enabled authentication for DLP (https://dsp-portal.national.ncrs.nhs.uk/) to NHS CIS2 Authentication
  • identify all users who are currently registered with IF-DLP Registration and support them in re-registering for a Care Identity profile
  • support users in getting set up with authenticators provided by NHS CIS2 Authentication
  • determine the best way to apply and manage the correct level of authorisation, for example RBAC roles assigned by Registration Authorities

How to re-register for a Care Identity profile

Users can re-register by using either:

NHS CIS2 Authentication provides a modern, secure authentication platform with securely proven identities and a wide range of authenticators, coupled with the National RBAC data.

It means:

  • users can be enrolled either using a Registration Authority or via new Apply for Care Identity service.
  • Registration Authorities can apply organisation based national RBAC roles and assist users with registering authenticators.
  • users can securely access services over the internet using authentication options which suit their working environment.

Read more about CIS2 Authentication.

For questions, contact us by email on: nhscareidentityauthentication@nhs.net.

/by
Deprecation of support for IF-DLP Registration and IF-DLP Authentication

In line with plans to migrate all internal NHS England (previously NHS Digital) services to NHS CIS2 Authentication by 30 September 2023, we will reduce the support level for the IF-DLP Registration and IF-DLP Authentication service from Bronze SLA to 'Reasonable Endeavours' on this date.

Subsequently, we will disable IF-DLP Registration and IF-DLP Authentication on 31 January 2024.

Currently the IF-DLP Authentication service provided by NHS CIS2 Authentication is supported to a Bronze SLA. Supported hours are 8am to 6pm, Monday to Friday with 98% target availability.

Note: This change affects the IF-DLP registration and authentication using https://dsp-portal.digital.nhs.uk/ - not the HSCN based Smartcard authentication to DLP (https://dsp-portal.national.ncrs.nhs.uk/). However, the HSCN based access will also be changing due to CIS1 Auth deprecation.

On 30 September 2024: 

  • we will reduce the support level for the IF-DLP Authentication service from Bronze SLA to 'Reasonable Endeavours'
  • operational hours will remain 8am to 6pm, Monday to Friday with no guarantees around service uptime

On 30 September 2025: 

  • Identity Management using IF-DLP Registration process will no longer be available
  • Authentication will no longer be available via IF-DLP Authentication

If you use the IF-DLP Registration process

If you are a registered IF-DLP user: 

If you register other IF-DLP users: 

If you use IF-DLP Authentication 

If you are a registered IF-DLP user, before 31 January 2024 you will need to: 

If you are responsible for managing the DSCRO / DLP service

You should plan to:

NHS CIS2 Authentication provides a modern, secure authentication platform with securely proven identities and a wide range of authenticators, coupled with the National RBAC data.

It means:

  • users can be enrolled either using a Registration Authority, or via the new Apply for Care Identity service.
  • Registration Authorities can apply organisation based national RBAC roles and assist users with registering authenticators
  • users can securely access services over the internet using authentication options which suit their working environment

Benefits of moving to the full NHS CIS2 Authentication service include:

  • a higher level of security from the current DLP auth service
  • a common identity with other NHS and Health and Social Care applications
  • new features such as modern alternatives to smartcards, and supports access over the internet via devices other than Windows PCs
  • more secure and better optimised for high availability and for the addition of new capabilities wherever demand creates a need

For questions, contact us by email on: nhscareidentityauthentication@nhs.net.

/by
Money-saving deal gives NHS staff access to latest digital tools

All NHS staff in England will have access to the latest digital tools as part of ongoing efforts to increase efficiency and boost productivity in the health service.

A deal negotiated by NHS England will mean all NHS workers, including doctors, nurses, clinicians and support staff, can benefit from the full suite of Microsoft 365 workplace productivity apps, making collaboration easier and maximising time for care.

In the past, each local organisation would be responsible for purchasing their own licences for software. By using a single national contract, the NHS is taking advantage of its collective purchasing power to save millions of pounds, as well as ensuring organisations are all working on the same systems.

The new five-year agreement, which has been awarded to Bytes, includes access to Microsoft products and will also provide the opportunity to introduce further innovative tools from other suppliers in the future.

Since the first national deal in March 2020 made the Microsoft Teams app available to all NHS staff, users have saved more than 17 million hours of time by using it for virtual meetings, where meeting in person is not necessary.

John Quinn, Chief Information Officer at NHS England, said:

“This new five-year agreement will mean we can create a platform for innovation so that NHS workers always have the latest digital tools to help them focus on frontline care.

“We’ve seen huge benefits following our original agreement with Microsoft in 2020, whether using Microsoft Teams to make it quicker and easier to arrange meetings or other digital tools that mean more time can be spent supporting patients.

“As the NHS turns 75, this deal is part of a long history of the health service adapting to make use of the latest and greatest innovations available to deliver more productive and joined up services for patients, and gives us a strong platform to build on for the future.

“This is a further great example of the NHS using our collective buying power to secure market-leading products at a reduced cost for taxpayers, and our contract with Bytes means we can also explore opportunities to introduce new innovative technology over the coming years.”

The five-year agreement will mean NHS organisations can benefit from a comprehensive suite of Microsoft security solutions. This includes capabilities around threat protection, data governance and compliance that will strengthen the cyber resilience of the NHS.

Clare Barclay, Chief Executive Officer, Microsoft UK, said:

“As the NHS marks its 75th anniversary, Microsoft is delighted to provide technology that will enable clinicians and support staff to focus on what matters most – caring for patients.

“This agreement will ensure that NHS organisations can deliver efficiency, reform ways of working through collaboration tools and build resilience through a modern, secure cloud-based infrastructure.”

Jack Watson, Managing Director, Bytes, said:

“Bytes are delighted to strengthen our longstanding relationship with the NHS by accelerating their secure adoption of Microsoft cloud services that provide a platform for future innovation in healthcare. This five-year contract highlights the breadth and depth of skills Bytes bring in managing, advising, and supporting the NHS to utilise secure cloud platforms, analytics, and apps.

“This award reflects our remarkable heritage in connecting people with technology. It is fitting, and a great privilege, to be selected as the partner of choice on the 75th anniversary of the NHS. We are committed to putting customer service and patient outcomes at the forefront of our daily activity.”

/by