Information Governance controls applicable to the Foundations capability pack

Patient dissent to share flag

When Foundations APIs are used to support the Appointment Management capability, the above flag SHALL NOT be applied by provider systems.

PDS sensitive patients

Consumer systems SHALL NOT send GP Connect requests for PDS sensitive (S-flagged) patients.

Provider systems SHALL NOT return patient information in cases where a request for a PDS sensitive patient is sent to the Foundations API endpoint. For specific handling for each Foundation API endpoint, please follow the links below:

• Find a patient
• Read a patient
• Register a patient