Risk alert: Digital solution to sending third-party reports

Several practices have recently contacted us for advice on a new software program called iGPR (or Intelligent GP Reporting). It is a tool that works with all clinical providers to produce and send third-party reports, such as those requested by insurance companies. It aims to minimise the potential for reports to go missing, accidental breaches of confidentiality or administrative errors. 

While this tool could prove useful to practices, we believe there are several issues practices should consider if they choose to use it.

Key points for GPs

• The report iGPR produces is a redacted extract of a patient’s clinical record. It provides GPs with control over the redactions and members should make sure they are fully familiar with how this feature works.
• If a patient has requested to see a copy of the report, the doctor must ensure they print off a copy for patient review, before submitting the electronic report.
• The system relies on detailed medical records, and so the practice must ensure accurate and detailed summarising in order to rely on iGPR. If a subject access request for medical records is made, and some of the records are on paper, it would be necessary for the doctor to copy and send these separately and highlight this within the attachment.
• It is imperative that GPs check the final submission in order to ensure no third party or sensitive information is included. This must not be carried out by an administrative team as the doctor remains the data controller.

iGPR utilises encrypted software to transfer information back to the insurer. For more information on this, please see the Information Governance and Security statement provided.