An ICO spokesperson said:

“Following detailed discussions between the ICO, TPP, NHS Digital and NHS England, TPP has now identified some changes which are intended to address the ICO’s concerns about the fair and lawful processing of patient data on the system as well as concerns about the security measures in place to prevent inappropriate access to patient data.

“These changes, which will be implemented for GP practices using the system along with updated documentation, are welcome and represent significant progress in addressing the concerns raised by the ICO for GP data controllers using SystmOne.

“The ICO will continue to work with TPP and other stakeholders to address any remaining concerns.”