National Data Opt-Out Compliance Statement

Use Jump Limited trading as Jump EHR ("Jump", "we", "us", or "our") provides an electronic health record and clinical workflow system to health and care organisations. This statement applies to Jump EHR's role as a supplier and processor to health and care organisations. It explains our position on the National Data Opt-out in relation to confidential patient information processed in Jump EHR.

Company Details

Use Jump Limited trading as Jump EHR

Company Number: 17100877

Registered Office: 256 Banbury Road, 3rd Floor Mayfield House, Oxford, Oxon, United Kingdom, OX2 7DE

Data protection contact: hello@usejump.co.uk

1. What the National Data Opt-out Is

The National Data Opt-out allows patients to choose that their confidential patient information is not used or disclosed for purposes beyond their individual care, such as research and planning. It was introduced on 25 May 2018. The policy applies to relevant uses and disclosures of confidential patient information originating in the health and adult social care system in England.

Health and adult social care organisations in England must assess whether the National Data Opt-out applies to their uses or disclosures of confidential patient information, and apply it where required. This requirement is set out in Information Standard DCB3058 (Compliance with the National Data Opt-out), and organisations have been required to honour the National Data Opt-out since 31 July 2022.

2. Our Role and Responsibilities

2.1 Jump as a Data Processor

For clinical and patient data held in Jump EHR, the customer organisation is the data controller and Jump is the data processor. The controller determines the purposes and means of processing. Jump processes that data only on the controller's documented instructions and under our Data Processing Agreement.

Jump does not use or disclose confidential patient information held in Jump EHR for research, planning, population analytics, commercial analytics, model training, or other secondary purposes. Our processing is limited to providing, securing, supporting, and maintaining the Jump EHR service on the controller's documented instructions. Because Jump does not make secondary uses or disclosures of this information, the duty to apply the National Data Opt-out before such uses rests with the controller organisation rather than with Jump.

2.2 Our Commitment

Where Jump is ever asked to process confidential patient information in a way that would fall within the scope of the National Data Opt-out, we will only do so on the documented instructions of the controller and after the controller has confirmed that opt-outs have been applied. We will support our customers in meeting their obligations under DCB3058.

Where a controller instructs Jump to assist with an in-scope disclosure, the controller remains responsible for determining whether the National Data Opt-out applies and for ensuring that any required opt-outs are applied before the disclosure.

3. Scope and Exemptions

3.1 When the Opt-out Applies

The opt-out applies to the use or disclosure of confidential patient information for purposes beyond an individual's direct care, for example:

Research into the causes and treatment of illness
Planning and improving health and care services
Uses or disclosures of confidential patient information beyond individual care where the common law duty of confidentiality is set aside under section 251 support, unless a specific exemption applies

3.2 When the Opt-out Does Not Apply

The National Data Opt-out does not apply in a number of defined situations set out in the operational policy guidance, including:

Individual care and treatment of the patient
Information that has been anonymised in line with the ICO Code of Practice
Where there is a legal requirement or court order to share information
Where there is an overriding public interest, such as a serious public health risk
Where the patient has provided explicit consent for a specific use

4. How Jump Supports Compliance

Jump EHR is built to help controller organisations meet their National Data Opt-out obligations. We support compliance by:

Limiting our processing of clinical and patient data to the provision of individual care and the operation of the service, on the controller’s instructions
Not performing secondary uses or onward disclosures of confidential patient information for research or planning
Maintaining role-based access controls, audit logging, and data minimisation so that data is only used for its intended clinical purpose
Providing controllers with export and reporting functionality to identify NHS numbers where held, so the controller can screen relevant extracts against the Check for National Data Opt-outs service before any in-scope use or disclosure
Providing information reasonably required by controllers for their Data Security and Protection Toolkit submissions, DPIAs, and information governance assessments, where applicable

5. Your Responsibilities as Controller

As the data controller, your organisation remains responsible for compliance with the National Data Opt-out. This includes:

Assessing your current and planned data uses against the National Data Opt-out operational policy guidance
Using the Check for National Data Opt-outs service to screen NHS numbers, and removing the records of opted-out patients before any in-scope use or disclosure
Publishing a privacy notice that explains how patients can opt out and how their information is used
Completing an annual Data Security and Protection Toolkit assessment, where applicable
Establishing procedures to ensure opt-outs are applied before any in-scope use or disclosure takes place

6. Review and Updates

We review this statement at least annually and whenever there is a material change to the National Data Opt-out policy, Information Standard DCB3058, or our processing activities. We will publish any updates on this page with a revised date.

7. Contact

If you have questions about this statement or about how Jump EHR supports National Data Opt-out compliance, please contact us.

Contact Us

Use Jump Limited trading as Jump EHR

Email: hello@usejump.co.uk

For more information about the National Data Opt-out, including how patients can set their preference, visit nhs.uk/your-nhs-data-matters.