'/%3e%3cpath%20d='M92%2044a34%2034%200%201%200%204%2033H66'%20fill='none'%20stroke='%23fff'%20stroke-width='12'%20stroke-linecap='round'%20stroke-linejoin='round'/%3e%3ccircle%20cx='96'%20cy='32'%20r='9'%20fill='%23FF6A2B'/%3e%3c/svg%3e)
Validate before reveal
The design rule behind every cross-organisation lookup: confirm an identity exists and is active, disclose nothing else.
Resources
Policy & compliance
How GSHS handles patient data, and the governance material your compliance team will ask for.
Consent, scope and expiry
What a patient is actually agreeing to when they issue a code, and how expiry is enforced.
Emergency access governance
The break-glass dataset, the review SLA, and what an oversight body should expect to see.
Audit retention and residency
Where patient data is held, how long audit events are kept, and who can read them.
Want the long version?
Our team will walk your clinical, IT and governance leads through any of this in detail.