PIN - Patient Privacy Monitoring Solution

The Royal Devon University Hospitals Trust is issuing this Prior Information Notice in pursuit of a software solution for monitoring, recording and managing of access to patient records held electronically within existing Trust systems. The Trust intends to engage with economic operators to understand potential solutions and to then execute a procurement exercise through the most effective route to enter into contract. We are currently in the process of evaluating various solutions to enhance our privacy monitoring capabilities. In the first instance we are looking for a solution to help us monitor Patient Privacy by being able to report on user access from our systems. Our primary objectives are proactive and reactive reporting, this needs to include real-time monitoring of access to patient records, detection of unauthorised access or breaches, and timely response to mitigate any potential risks to patient privacy, along with being able to simply report against set parameters. The provider will need to evidence where they have gathered, reported on and provided alerts against data from both the Audit data from Epic’s Electronic Patient Record (EPR) system, and data from the NHS’s Electronic Staff Record (ESR). Evidence of the ability to be able to scale up the solution to include the Trusts staff rostering system, and audit logs from other Trust systems are welcomed. Could you please provide detailed information about your Patient Privacy Monitoring Tool, including its features, functionalities, implementation process, and pricing structure? Additionally, any case studies or testimonials demonstrating its effectiveness in similar healthcare settings would be greatly appreciated. We are looking forward to exploring how your solution can support our efforts in maintaining patient confidentiality and safeguarding sensitive health information.