Changes to data controller responsibilities for risk stratification

The Confidentiality Advisory Group (CAG) approval CAG 7-04(a)/2013 for risk stratification which was previously managed by NHS England to provide support for the processing of confidential data for integrated care boards (ICBs) is no longer in place.  As ICBs undertake this processing as independent data controllers, it was agreed that they should apply to CAG directly to obtain their own approval, providing the necessary assurance on their processing activities to CAG as required. If you need any information regarding risk stratification activities which may include your data, please contact your local ICB or check their website.