Record of Processing Activities

Record of Processing Activities

The creation and maintenance of a pseudonymised GP dataset (only coded patient data), held within Optum/TPP [delete as appropriate], made available to NHS England–approved studies via the OpenSAFELY platform

The GP data remains under practice control and is retained for the duration of the DPN, with only study-specific cohorts and results transferring to NHS England control

The DPN establishes a legal obligation (UK GDPR Article 6(1)(c)) on practices, with purposes and safeguards set out in the DPN

Page last reviewed: 15 December 2025
Page created: 15 December 2025