Data protection and where Nexus data comes from

Data protection and where Nexus data comes from

Two kinds of data, kept apart

Published NHS data powers the benchmark dashboards, Funding & equity, Find a GP and AI Insights. It is public, aggregate data — QOF results, GP Patient Survey, workforce and payments publications, CQC ratings and so on — with no patient-identifiable information. This is why the benchmark dashboards can be free for all NHS staff. The Benchmarks → Data sources page lists every dataset and when it was last refreshed.

Your organisation's clinical data powers the Performance and Actions dashboards (QOF — live, Multi-KPI patients, Data quality, CQC performance, CQC actions, Childhood immunisations) and the monitoring and recall features. It is ingested from your own clinical system, held in UK-based infrastructure, protected by row-level security so it is visible only to your organisation's approved users, and access-audited.

AI Insights queries only the published data warehouse — your questions are never answered from patient records.

Anonymous by design: FFT

Friends & Family Test responses are collected anonymously — the response is not linked back to the patient or their medical record, and patient contact details used for sending invitations are handled separately from responses. The contact opt-out list is always honoured.

Security measures you'll notice

  • NHS-only accounts — self-serve sign-up requires an NHS email address.
  • Two-factor authentication — mandatory on organisation accounts.
  • Admin approval — nobody joins your organisation without an admin's say-so.
  • Audit trails — clinically significant actions (recall decisions, pack changes, preference changes) are recorded append-only: who, what, when.

Questions or requests

For data protection queries, subject access or deletion requests, or a copy of governance documentation for your DPO, contact support@primarycareit.co.uk.

Related articles