# Healthcare Data Management: Beyond Individual Care

> Application-neutral research for England and applicable UK-wide law. UK GDPR and DPA 2018, as amended by DUAA 2025, are central. Sources checked 19 October 2026. This discovery file and the Markdown alternates are derived views; registered authorities and canonical project sources retain their status.

For record requests, the requester sends the request and receives information; the healthcare provider receives the request and sends information. Determine legal roles separately. Use the requester-readiness chapter for duties and evidence, and the mapped authoring policy for consistent future content.

Read the smallest relevant set. Distinguish general rules from service-specific applicability. No patient dataset, organisation or product has been assessed. Generated graph edges and agent text are not independent evidence. For repository maintenance, read AGENTS.md, .wiki-standard.yaml, AUTHORING.md and the LLM Wiki first.

## Subject entry points

- [Overview](index.md): Governing question, scope and reading routes.
- [DSPT: NHS data assurance](dspt/index.md): Early scope decision for NHS information or systems; current period, coverage, status, audit and continuing assurance.
- [Exam question and answer](exam-answer/index.md): Governing question, short answer and focused questions on legal authority, DSPT and service duties.
- [Applicability](applicability/index.md): Baseline duties and conditional triggers.
- [Before requesting identifiable records](requester-assurance/index.md): Requester readiness, recipient duties, DPIA trigger, role-specific agreements and proportionate evidence for the sending provider.
- [Recruitment: NHS GP records](recruitment-assurance/index.md): Mandatory DSPT contract recommendation; policy, statutory scope, actual contract and separate access permissions.
- [UK GDPR and DPA](legal-framework/index.md): Classification, lawful bases, safeguards and current law.
- [DUAA 2025](duaa-2025/index.md): Amendments and commencement.
- [Confidentiality](confidentiality/index.md): Disclosure authority, CAG, opt-outs and research.
- [Data lifecycle](data-lifecycle/index.md): Roles, contracts, security, rights, retention and transfers.
- [NHS standards](nhs-standards/index.md): Scoped standards and DTAC, linked to the dedicated DSPT assessment.
- [Conditional regimes](conditional-regimes/index.md): Product, employment, children and digital-service triggers.

## Evidence and maintenance

- [Sources](sources/index.md): Stable identities, authority, check dates and limits.
- [Evidence matrix](evidence-matrix/index.md): Bounded claims and support.
- [Validation queue](validation-queue/index.md): Unresolved factual and review questions.
- [LLM Wiki](llm-wiki/index.md): Read order and operating contract.
- [Context map](llm-wiki/context-map/index.md): Smallest reliable context for recurring tasks.
- [Status](project/status/index.md): Current goal, checks and limitations.