Five Safes Framework

Ensuring the security and responsible use of health and care data is a top priority for the Lancashire and South Cumbria Secure Data Environment (SDE). Previous unsuccessful attempts to join up data and improve access have highlighted the need for strong public involvement from the outset to build systems that generate trust. This has led to the adoption of the Five Safes framework, a recognised approach to safeguarding data while enabling valuable research.

Understanding Public Perspectives

Before fully implementing this framework, it is crucial to understand what use of health data is socially acceptable. Key public concerns include:

  • How comfortable people are with their health data being used for research and planning.
  • Whether removing personal identifiers (like names, addresses, and dates of birth) changes public opinion.
  • How people feel about research being conducted without individual consent.

By addressing these concerns and maintaining strict security measures, the Five Safes framework ensures that data access is ethical, transparent, and trusted—ultimately leading to better healthcare outcomes for all.

  • Well-trained trusted individuals
  • Only those with appropriate training and clearance will be allowed access to the data.
  • People who behave dishonestly would be banned from accessing data.
  • A Data Access Committee will judge projects on whether they are in the public interest and for the public good.
  • The committee will be open about which projects are being given access or denied.
  • Only the data that researchers require for their projects will be accessible – known as ‘data minimisation’
  • Personal identifiable information like names and dates of birth will be removed. This is called ‘de-identification’
  • All research will be conducted within the SDE, which acts like a virtual laboratory.
  • All data processing and actions taken in the environment will be recorded – providing an audit trail.
  • This step is designed to ensure no personal data is accidentally released when publishing research results.
  • This involves automatic and human-led checks.

Related links

Patient Engagement in Data Research Initiative (PEDRI)