- • other use of NHSS originated data which you consider to be complex, contentious, having wider • other use of NHSS originated data which you consider to be complex, contentious, having wider national implications, or requiring the scrutiny of the panel (including use of data from a single NHSS board).
- • of data originating from primary care providers, and from beyond NHSS, but with a relevant • of data originating from primary care providers, and from beyond NHSS, but with a relevant implication for the service (for example social care information use).
- The following factors do not remove the requirement to complete an application (and should be fully explained at the relevant point in the application form):
- • of data subjects, even where consent has been obtained for access to clinical records as • of data subjects, even where consent has been obtained for access to clinical records as part of a clinical study.
- • of data subjects as patients / non-patients. • of data subjects as patients / non-patients.
- • data subjects are alive or deceased. • data subjects are alive or deceased.
- • of the proposed work: audit, management, performance, research or other. • of the proposed work: audit, management, performance, research or other.
- • or regulatory requirement for the proposed work. • or regulatory requirement for the proposed work.

## Application Process

You are strongly advised to seek the input of your eDRIS coordinator before completing your application form. Contact the eDRIS Team: phs.edris@phs.scot.

You must submit your application via your eDRIS coordinator, who will be your single point of contact throughout the application process.

Once submitted, your application will be passed to Tier 1 information governance (IG) colleagues who will conduct a proportionate IG review of your application. They may approve your application (with or without conditions), seek further information or clarification from you, ask for a resubmission, or refer your application for review by Tier 2 panel members.

If your application is approved (with or without conditions), then you will be issued with an approval letter. The normal expectation is that the application process will be concluded within 30 working days of submission, not including any time that has elapsed while waiting for a response from you. Please note that you should submit evidence that is requested to satisfy any conditions that have been applied to your approval in order to receive a final approval letter from the Panel. If further information or clarification is requested, this will be communicated to you by your eDRIS coordinator, along with a recommended deadline. Your response will be considered by IG colleagues and an outcome determined. Again, if your application is approved, you will be issued with an approval letter. The timescale for the conclusion of an application is dependent upon the timeliness of your response.

If your application is referred for Tier 2 review, it will be passed to a small group of panel members (comprised of public representatives and NHSS Caldicott Guardians) for their opinion. This group may also approve your application (with or without conditions), seek further information or clarification from you, or refer your application for review by the Full Committee. If your application is approved at this stage, you will be issued with an approval letter. It is the normal expectation that the application process will be concluded within 90 working days of submission, not including any time elapsed whilst awaiting a response from you.