For the integrated care activities selected, the care system now needs to identify the types of data needed to support them. Following identification of the data types required (e.g. acute and urgent care data), there will need to be some local work to confirm the specific datasets within these groupings. These may contain a combination of national flows (e.g. Secondary Use Services) and local flows as shown in this data flow diagram.

The SUDGT helps to identify the data categories, data types and potential datasets that may support your integrated care activities. In assessing their local data requirements, care systems will need to take into account:

  • the scope of data available locally
  • the types of organisations in the care system
  • the scope of services within your care system

The SUDGT provides a data requirements tool (opens in a new window) to help care systems assess their data requirements, based around typical types of data. Care systems will need to consider if the types of data they require are collected and available in their local area. They will also need to ensure that data is only flowed to cover the specific service functions identified in their integrated care services and are not excessive.

Data flow maps can then be created to illustrate where the data will come from and where it will be stored for onward use across the care system (covered in Step 3 of SUDGT).


It is important to understand the data requirements for activities and from where it can be sourced, in order to then map data flows and identify the contracts and agreements that will need to be put in place. It is a critical part of compliance with the GDPR to maintain records of processing activities, which includes data flows into and out of organisations. Data flow maps will be needed for any Data Protection Privacy Impact Assessments (DPIAs) and/or Data Access Request Service (DARS) applications.


You should now determine and record:

  • the types of data needed to undertake your integrated care activities, taking particular care when justifying access to wider determinants data (see below)
  • what the data sets are and where they will be sourced from, noting the additional fair processing requirements if sourcing and de-identifying data from a source used for individual care (see below)
  • where and how the data will undergo pseudonymisation
  • where the data will be stored

This information can be recorded in the SUDGT input tool and/or data flow diagram (powerpoint) and data flow table (excel).


  • Consider linking with your local DSCRO (Data Services for Commissioners Regional Office) as they have significant experience in national and local flows, and may be able to provide advice
  • When accessing the data requirements mappings in SUDGT, the symbols should be interpreted as follows:
    • GREEN DIAMOND symbol: This data is reasonable to use for the selected combination of activity, service scope and organisation type
    • RED SQUARE symbol: This data is not generally suggested for the selected combination of activity, service scope and organisation type. Please check this combination and if correct, provide further justification
  • If you need to access wider determinants information (i.e. non-health data such as education or welfare) for integrated care purposes, you must be able to demonstrate that the lawful basis under which such data was collected is consistent with health and care purposes - this means that the statutes or vires under which the data was collected must allow usage for health and care
  • If you intend to extract data from a source that supports individual care (e.g. LCHR), you must ensure that local fair processing and transparency information clearly describes to data subjects that the data may be de-identified and used for secondary purposes