Notice
- Important: This guidance is under active development by NHS England and content may be added or updated on a regular basis.
- This Implementation Guide is currently in Draft and SHOULD NOT be used for development or active implementation without express direction from the NHS England Genomics Unit.
UGR Integration
Background
The Unified Genomic Record (UGR) is a key technological component designed to unify patient genomic data into a single, patient-centric record. The UGR is intended to standardise the collection, storage, and sharing of genomic data across the NHS, ensuring that genomic information is interoperable and accessible across all care settings.
The UGR architecture is structured into three key layers:
- End User Functionality – Integrating with existing NHS services to facilitate direct interaction with the UGR
- Interoperability – Serving as the primary gateway for accessing and sharing genomic data across different healthcare systems.
- Data Storage – Implementing a hybrid centralised and federated data storage model, leveraging the Patient Data Manager (PDM) as the central data entry point.
The key problems the UGR aims to address in support of delivering the Genomic Medicine Service are:
- Fragmented and Inconsistent Genomic Data Management, by bringing the genomic data into a single genomic record framework and enforcing UK Core FHIR interoperability standards. Access is centralised through APIM and MNS. Centralising genomic data access will help promote standards adoption by suppliers.
- Limited Reusability of Genomic Test Reports, by bringing the genomic data into a single genomic record framework and enforcing GA4GH and UK Core FHIR interoperability standards.
- Inefficient Data Use for Research and Population Health, by providing a centralised unified point of access for genomic data that is readily available for population health, management information and research, reducing the burden on GLHs and enabling more robust data analysis and insights.
- Limited Integration of Genomic Data with Clinical Pathways, by decoupling genomic data from the systems involved with the originating test request and making available for any other provider with other clinical data, enabling more comprehensive patient management and facilitating the use of precision medicine across the NHS.
- High Administrative Burden and Operational Inefficiencies, through use of the genomic order management service. Adoption of standards and a unified point of data access will significantly reduce administrative workloads and improving the overall efficiency of genomic services.
- Inadequate Data Linkage for Inherited and Rare Diseases, by providing a simple mechanism for securely linking genomic records, respecting patient preferences, and enabling the implementation of targeted, family-based care strategies.
- Lack of Centralised System for Identifying Clinical Trial Eligibility, by potentially serving as a centralised virtual repository that enables researchers to identify eligible patient cohorts, enhancing patient access to innovative therapies and supporting the growth of clinical research.
- Absence of a centralised access control, by providing an opportunity to streamline access control processes, allowing patient-based policies instead of organisation or system-based policies. With the data decoupled from end-user systems, enforcement of policies at source is assured and includes comprehensive audit and transparency for patients improving confidence and trust.
- Inconsistent Access to Pharmacogenomic (PGx) Data Across NHS, by providing the master PGx record for patients and making the data available nationally to any clinical decision support system involved in prescribing.
- Inability to Provide Comprehensive Patient Access and Transparency, by centralising access to the genomic record via the APIM. This significantly simplifies the integration of the UGR with the NHS App.
Genomic Data Reuse
One of the key aims of the UGR is to enable reuse of data across different health contexts: Direct Care; Population Health Management; Management Information; and Research. To support each context, slightly different data access approaches are needed.
Genomic data in direct care is mostly used as a diagnostic source. Data is shared using national standards and provider systems directly interact with the UGR via APIs. All direct care data is shared through legitimate access, managed by national RBAC, although data redaction and other minimisation approaches can be built into the API.
Population health management and management information requires access to groups of patient genomic records. This can be achieved in two ways:
- Separate API calls to the PDM via APIM per patient record.
- Bulk Query API calls to the PDM using GA4GH Beacon API requesting sets of data across multiple patients.
Purpose-Based Access Control (PBAC) is implemented for each patient, respecting their preferences for secondary data sharing. Data returned via the API is pseudonymised using NHS England's national pseudonymisation system or in the clear if used for commissioning purposes.
Using genomic data for research requires request-specific data processing. The UGR utilises Purpose-Based Access Control to ensure legitimacy of all data requests regardless of the clinical context. For research, the request must be supported by a PBAC policy within each patient’s UGR for the ability to query their data as part of a cohort search. The PBAC rules can be defined to be as explicit as required. For example, a patient may permit their data to be used for cancer research, but request to be asked for permission for other types of research. The rules are defined, and patient preferences managed via the NHS App.
The returned data may be modified depending on the PBAC policies and the context:
- Data minimisation – only return what is necessary for the functionality required.
- Data redaction – make requester aware of data existing but respond with ‘data redacted’ in fields as defined in the PBAC rules.
- Pseudonymisation – remove all patient identifiable information and provide an NHS England derived pseudonym for the patient ID.
- Anonymisation - remove all patient identifiable information and ensure patient identity is unable to be derived from the patient data returned.
Scope
- Order Management: The UGR will surface all test order requests and reports, and associated meta data provided by the order management services.
- Digital Genomics Test Directory Services: The UGR may reference this service for data validation of storing test order requests and reports.
- Specimen Data: The UGR will record sample metadata and reference any sample storage resources used as part of genomic diagnostics.
- Sequence Data: The UGR will record and provide access to all data created from the DNA sequencing process. This applies to all genomic diagnostic modalities, including whole genome sequencing (WGS).
- Family Linking: Linking UGR records is a key requirement and is within scope to support inherited disease diagnostics.
- Purpose Based Access Control (PBAC): The UGR implements purpose-based access control at the data layer. Storing the access control policies and enforcement via data sharing processes are in scope.
- Secondary uses: Storage and sharing of UGR data for population health management, management information and research.
- National Genomic Research Library: Providing the structured data and transport into the NGRL from the UGR is in scope. Specific implementations must honour appropriate information governance.
The data output formats in scope are:
- OMOP
- FHIR
- PLCM (TBC)
- GA4GH
The data transports used to share data, which are in scope, are:
- API Management (APIM)
- Multicast Notification Service (MNS)
- Genomic Order Management Service (GOMS) API
- Global Alliance for Genomic Health (GA4GH) Data Repository Service (DRS)
- GA4GH High-throughput sequencing GET (htsget)
Architecture
Each patient will have a self-contained Unified Genomic Record. A simplified logical model can be expressed as a folder tree. Each folder holds relevant data and metadata.
The data structure, storage type, and location within each folder may vary depending on the data requirements. The table below is an example of possible content of the UGR.
| Folder | Data Structure | Storage Type | Location |
|---|---|---|---|
| Demographics | JSON (FHIR) | FHIR Repository | NHS England |
| Genomic Test Request | JSON (FHIR) | FHIR Repository | NHS England |
| Genomic Test Reports | JSON (FHIR) | FHIR Repository | NHS England |
| Genomic Data | BAM, CRAM, VCF | Local/Cloud File Store | GLH or GEL |
| Family History | JSON (FHIR) | FHIR Repository | NHS England |
| Purpose Based Access Controls and Consent | JSON (CEDAR/FHIR) | FHIR Repository | NHS England |
| Audit | Logfile/FHIR | Cloud File Store/PARS | NHS England |
Genomic data is highly reusable, and it is possible to perform new genomic tests upon existing genomic data, e.g. through reanalysis and reinterpretation requests, negating the need to repeat a specimen collection and wet laboratory process. For this reason, test data can reference existing genomic data. The genomic data can be hosted in multiple places, and a FHIR document reference resource can refer to a GA4GH Data Repository Standard (DRS) location.
Data Storage Components
The UGR contains three primary classes of data, each necessitating a distinct approach to data management and storage:
- Structured data that captures the details of genomic test orders, sample processing, bioinformatics analyses, test reports and reporting etc. This data is characterised as being complex, highly structured based on HL7 FHIR standard, but low in volume compared to the primary genomic data.
- Unstructured data held in other general file formats such as CSV and PDF to support legacy systems incapable of consuming structured data.
- The large-scale data generated by DNA genotyping and sequencing technologies, such as the primary sequencing reads (in SAM, BAM or CRAM formats) and derived data such as variant calls (in VCF) and other data produced by bioinformatics analyses.
To accommodate this diversity and maximise functionality, multiple data repositories are utilised rather than a single physical repository. The Diagram below shows the separation components required to support the UGR.
Central FHIR Store
It is expected that all FHIR resources will be stored in a national FHIR store, available through RESTful API Access via the national API platorm.
Federated Object Store
Not all genomics-related data is suitable for storage within FHIR repository. To accommodate different data classes, multiple Federated Object Stores can be utilised, leveraging cloud object stores. To ensure consistency, the GA4GH Data Repository Service (DRS) protocol will be adopted as the standard retrieval mechanism for all data accessible via the UGR. The use of DRS enables the UGR to support both centralised and federated storage models, or a combination thereof. DRS URIs stored within FHIR DocumentReference Resources for each patient will serve as the logical identifiers for all files hosted within the Federated Object Stores.
Bulk Query Interface
For population health management and research use cases, the UGR requires the ability to perform queries across larger sets of data. The APIs supporting these queries are typically read-only and may operate asynchronously to facilitate population-level analysis. The Bulk Query Interface component is designed to support these use cases, with the data made available potentially being transformed and reformatted to optimise bulk querying an RDMS source.
FHIR API
Composition
TODO: Add sequence diagram to demonstrate when Composition is created
The main resource type supporting implementation of the UGR will be the Genomics-Composition resource. This resource is used to align with existing Summary Care Record implementations and mirrors the EU Patient Summary guidance, whereby sections are defined for the data categories, which contain references to the data, e.g. Lab reports, Demographics etc.
It is expected the UGR could be represented as a section under a more general patient summary.
The sections included within the UGR are coded using https://fhir.hl7.org.uk/CodeSystem/UKCore-RecordStandardHeadings, as follows:
| Section Title | Code | Entry Resource Type |
|---|---|---|
| Patient demographics | patient-demographics | Patient (may be NHS Identifier if registered on PDS) |
| Investigations and procedures requested | investigations-and-procedures-requested | ServiceRequest |
| Investigation results | investigation-results | DiagnosticReport (this resource will link off to the various Genomic Data Files and Observations, Note: a separate section for genomic data and observations irrespective of the report/request which generated this is currently being investigated, e.g. for on demand CDS) |
| Consent for information sharing | consent-for-information-sharing | Consent |
| Family history | family-history | RelatedPerson/FamilyMemberHistory |
An example of a UGR record can be found at Composition-UGR-Example
Type and Category
To appropriately categorise the UGR alongside other Compositions and Documents, the type and category SHALL be fixed to the below.
"type": { "coding": [ { "system": "http://snomed.info/sct", "code": "824321000000109", "display": "Summary record" } ] }, "category": [ { "coding": [ { "system": "http://snomed.info/sct", "code": "321401000000106", "display": "Genomics" } ] } ],
Author and Custodian
As the UGR is created and managed by NHS England, the author and custodian elements will be fixed to the X26 ODS code.
"author": [ { "identifier": { "system": "https://fhir.nhs.uk/Id/ods-organization-code", "value": "X26" } } ], "custodian": { "identifier": { "system": "https://fhir.nhs.uk/Id/ods-organization-code", "value": "X26" } },
Section
To better conform to the EU Patient Summary (EPS) Implementation Guide, section.text has been added to provide a human readable/HTML representation of the UGR sections. an example is provided below.
"section": [ { "title": "Patient demographics", "code": { "coding": [ { "system": "https://fhir.hl7.org.uk/CodeSystem/UKCore-RecordStandardHeadings", "code": "patient-demographics", "display": "Patient demographics" } ] }, "text": { "status": "generated", "div": "<div xmlns=\"http://www.w3.org/1999/xhtml\">Pheobe Smitham, Female, DOB: 2013-09-27</div>" }, "entry": [ { "identifier": { "system": "https://fhir.nhs.uk/Id/nhs-number", "value": "9449307539" } } ] },
Other Fixed Elements
statusSHALL have a fixed value offinaltitleSHALL have a fixed value ofUnified Genomic Record SummaryconfidentialitySHALL have a fixed value ofRdue to the sensitivity of the data within the UGR
RelatedPerson
UGRs for family members are linked using Genomics-RelatedPerson resources, following the same profiling used by the Genomic Order Management Service. Note: The Order Management use case assumes family relationships are asserted/validated by the requesting clinician, however analysis is needed to determine whether UGR familial relationships can be asserted and approved by the patient/related person themselves
Family Members Without a UGR
FamilyMemberHistory resources MAY additionally be used to link clinical family history for individuals who do not have a UGR, such as deceased family members, those who live abroad, or individuals whose identity cannot be confirmed. When used FamilyMemberHistory resources SHALL conform to the Genomics-FamilyMemberHistory profile guidance.
The PersonalRelationship resource, introduced in FHIR R5, is simlar to the RelatedPerson resource as it provides a mechanism for expressing relationships between two individuals. However, unlike RelatedPerson, it does not represent an individual as a standalone clinical entity and instead models the relationship only. Although conceptually appealing for linking UGR records, the resource is of low maturity and not part of the normative content in R6. As such, PersonalRelationship SHALL NOT be used in the context of the UGR until further notice.
The GA4GH Pedigree standard provides a data model for representing family health history. This is equivalent to the Genomics use of the FamilyMemberHistory resource, with caveats around the FMH resource being limited to pairs of individuals rather than complete family units.
Consent and Permission
The Unified Genomic Record (UGR) uses FHIR R4 Consent resources to represent patient authorization relating to access, sharing, and use of genomic information.
Two primary consent use cases are supported within the UGR:
- Data Sharing — consent to support sharing of genomic information with clinicians for the purposes of testing, interpretation, or clinical management relating to family members.
- Data Use — consent governing secondary uses of genomic information, including research, population health management, and healthcare service improvement activities.
The expected sequence for adding a familial relationship asserted by a patient, and subsequent verification/consent from the family member is as below:
Data Use
Consent will also be used to capture patient consent for their UGR, and elements within their UGR to be used for particular purposes, e.g. research, population health management etc. This MAY specify which classes or specific instances of data are included in that consent (i.e. consent to Data Use).
UGR Consent instances SHALL conform to the IHE Privacy and Consent on FHIR guidance, specifically the Explicit Intermediate Consent model, supporting:
- Conformance to an overarching consent policy
- Limiting timeframes
- Permit/deny constraints for specific users/user types
- Permit/deny constraints for specific purposes of use
- Optionally, data scoping by id; class of data; author; relationship to other resources, such as ServiceRequest; or more granular purposes of use, e.g. for specific research projects
Sensitivity-based controls: Aligning to the Explicit Advanced consent could additionally limit access based on sensitivity of the data, though the need for this is currently being investigated.
An example of a Consent aligning to IHE PCF is provided at Consent-DataAccess-Example.
Roles and responsibilities (PCF actors)
In terms of IHE PCF Actors, the UGR will perform the role of the Consent Registry and Consent Authorisation Server (in conjuction with the NHS England API-M IAM platform) and will also likely perform the role of the Consent Enforcement Point as the data the consent applies to will also be hosted/referenced by the same system.
Note: As per PCF guidance elements filtered out at enforcement due to 'deny' provisions SHALL be omitted entirely from returned results, including references from resources included in the response
Scope and Category:
Scope SHALL be fixed to http://terminology.hl7.org/CodeSystem/consentscope|patient-privacy.
Category SHALL be one of
http://terminology.hl7.org/CodeSystem/v3-ActCode|RESEARCH (research information access)for Order Management Consent for NGRL/RoD.http://terminology.hl7.org/CodeSystem/v3-ActCode|INFA (information access)for providing access to the patient's UGR for specific purposes, as described by the UGR lenses below.http://terminology.hl7.org/CodeSystem/v3-ActCode|IDSCL (information disclosure)for providing access to a relative's healthcare professional, to inform their care, e.g. in the case of familial/cascade testing.
Consent in the context of the UGR is only consent to access data, e.g. for direct care, or research etc. Consenting to direct care activities is assumed though submission of information to the Genomic Order Management service.
Consent to research activities is implied through associated Consent resources with the scope of research, e.g. as used for RoD recording.
"scope" : { "coding" : [ { "system" : "http://terminology.hl7.org/CodeSystem/consentscope", "code" : "patient-privacy", "display" : "Privacy Consent" } ] }, "category" : [ { "coding" : [ { "system" : "http://terminology.hl7.org/CodeSystem/v3-ActCode", "code" : "INFA", "display" : "information access" } ] } ],
patient
SHALL reference the patient for whom the consent is for.
"patient": { "reference": "Patient/Patient-AnitaLamberts-Example", "identifier": { "system": "https://fhir.nhs.uk/Id/nhs-number" "value": "8449303649" } },
dateTime
SHALL be the time the Consent record was created, likely populated by the UGR system.
"dateTime": "2026-05-07T09:08:30",
performer
MAY reference a RelatedPerson/Patient or potentially PractitionerRole if consent is being provided via another individual e.g. a proxy, otherwise SHOULD reference the patient themself Note: this may change to a backported element for the R5 Consent.grantee based on National Proxy guidance.
"performer": [ { "reference": "Patient/Patient-AnitaLamberts-Example", "identifier": { "system": "https://fhir.nhs.uk/Id/nhs-number" "value": "8449303649" } } ],
organization
SHALL be fixed to the ODS code for NHS England (X26) as this is the managing organisation for the UGR consents.
"organization": [ { "identifier": { "system": "https://fhir.nhs.uk/Id/ods-organization-code" "value": "X26" } } ],
source[x]
TBC. Not relevant for UGR consent resources as this is generated automatically on creation of a UGR, though IHE PCF requires a reference or attachment. This MAY be a reference to a QuestionnaireResponse representing the patients consent selections, e.g. via the NHS App.
"sourceReference" : { "reference" : "QuestionnaireResponse/QuestionnaireResponse-ConsentQuestionnaire-Example" },
policy
MAY be used to reference the NHS England Privacy Policy, e.g.
"policy" : [ { "uri" : "https://www.england.nhs.uk/wp-content/uploads/2018/05/nhs-england-privacy-notice-v1.77.pdf" } ],
provision
The main element that determines who has access to the UGR, what aspects of the UGR they have access to, and for what purposes they are allowed the use the data for. Note: granularity of rules to be supported within the UGR are still pending business analysis.
The top level type SHOULD represent the patient's overall consent to use of their data e.g. as indicated via their National Data Opt-Out selection. Sub-level provision elements SHOULD be used to represent exceptions to the higher level provision, though MAY be used to explicitly permit usage of data for specific purposes, where the higher-level provision is of type 'permit'. The guidance below relates to sub-level provisions only.
period is not expected to be used as the consent is expected to be actively managed by the patient during their lifetime. Equally, action, securityLabel, code and dataPeriod are not expected to be used for consent within the context of the UGR.
actor MAY be used to specify a class of individuals included within the consent statement, e.g. access for direct care by healthcare professionals, or for individuals, e.g. access to patient proxy. The level of granularity is pending business analysis.
For sharing of genomic data for care of family members, the actor SHALL reference the RelatedPerson resource for the family member.
purpose SHALL be used for encoding the four lenses of data access described above, using the following codes:
| Lens | System | Code | Display |
|---|---|---|---|
| Direct Care | http://terminology.hl7.org/CodeSystem/v3-ActReason | TREAT | treatment |
| Research | http://terminology.hl7.org/CodeSystem/v3-ActReason | HRESCH | healthcare research |
| Population Health | http://terminology.hl7.org/CodeSystem/v3-ActReason | POPHLTH | population health |
| Management Information/Intelligence | http://terminology.hl7.org/CodeSystem/v3-ActReason | HOPERAT | healthcare operations |
For sharing of genomic data for care of family members, the purpose SHALL be fixed to http://terminology.hl7.org/CodeSystem/v3-ActReason|FAMRQT (Family member request).
class MAY be used to indicate the classes of data the provision applies to, where whole classes of data, e.g. DiagnosticReports, are consented to, rather than specific instances.
data SHOULD be used where the consent applies to specific instances of data, such as a single report or sequence.
data.meaning MAY use any of the codes specified in the consent-data-meaning ValueSet, as data may not be useful in isolation, e.g. a report without the referenced observations. However, the authoredBy code is not expected to be used for the UGR.
Note: Whether consent resources covering data access permissions should be created for each data instance, simplifying access enforcement workflows, or Consent provisions should be amalgamated per individual, reducing the amount of resources in the consent store is still pending investigation, the example below illustrates the latter approach. Additionally, further analysis is required to determine whether provisions should be split by data, actor, purpose etc. or amalgamated where criteria are the same, e.g. sharing with proxy and provider (identified through actor entries) under the same provision where purpose=TREAT and class=DiagnosticReport.
However, it is expected consent for data sharing for the care of relatives SHALL be represented through separate Consent resources per relationship following the Consent-DataSharing-Example example.
"provision": { "type": "deny", "provision": [ { "type": "permit", "actor": [ { "role": { "coding": [ { "code": "PAT", "system": "http://terminology.hl7.org/CodeSystem/v3-RoleClass" } ] }, "reference": { "identifier": { "system": "https://fhir.nhs.uk/Id/nhs-number", "value": "9999999999" } } } ], "purpose": [ { "code": "TREAT", "system": "http://terminology.hl7.org/CodeSystem/v3-ActReason" } ], "data": [ { "meaning": "instance", "reference": { "reference": "Observation/FullBloodCount" } } ] }, { "type": "permit", "actor": [ { "role": { "coding": [ { "code": "PROV", "system": "http://terminology.hl7.org/CodeSystem/v3-RoleClass" } ] }, "reference": { "reference": "Group/PDMPractitioners" } } ], "purpose": [ { "code": "HRESCH", "system": "http://terminology.hl7.org/CodeSystem/v3-ActReason" } ], "data": [ { "meaning": "related", "reference": { "reference": "DiagnosticReport/CancerReport" } } ] }, { "type": "permit", "actor": [ { "role": { "coding": [ { "code": "PROV", "system": "http://terminology.hl7.org/CodeSystem/v3-RoleClass" } ] }, "reference": { "reference": "Group/PDMPractitioners" } } ], "purpose": [ { "code": "TREAT", "system": "http://terminology.hl7.org/CodeSystem/v3-ActReason" } ], "class": [ { "code": "DiagnosticReport", "system": "http://hl7.org/fhir/resource-types" } ] } ] }
Data Access Policies and Security
If FHIR R5 is adopted, Permission resources MAY be used to capture system determined permission to access resources, e.g. by role/relationship to patient, in line with the Data Access Policies IG. As this is a resource introduced in FHIR R5, an alternative to using Permission resources is to use the Consent resource in R4, with the scope=rbac and category=allowable-actions as per representation of directly assigned activities being developed by the Healthcare Worker API. Allowed activities attributed to National RBAC roles are expected to be inspected through interrogation of the National RBAC based on the user's SDS JobRoleCode. Usage of the Consent resource for representing allowed activities is documented in the Directory of Service Implementation Guide England-Consent-Healthcare-Worker profile, with an example available in the Examples section of the Implementation Guide
{
"resourceType": "Consent",
"id": "Healthcare-Worker-Consent-AllowableActions-Example",
"status": "active",
"scope": {
"coding": [
{
"system": "https://fhir.nhs.uk/England/CodeSystem/England-ConsentScope",
"code": "rbac",
"display": "RBAC"
}
]
},
"category": [
{
"coding": [
{
"system": "https://fhir.nhs.uk/England/CodeSystem/England-ConsentCategory",
"code": "allowable-actions",
"display": "Allowable Actions"
}
]
}
],
"policy": [
{
"uri": "https://digital.nhs.uk/services/care-identity-service/registration-authority-users/registration-authority-help/registration-authority-key-documents-and-forms"
}
],
"provision": {
"type": "permit",
"actor": [
{
"role": {
"coding": [
{
"system": "http://terminology.hl7.org/CodeSystem/v3-RoleClass",
"code": "EMP",
"display": "employee"
}
]
},
"reference": {
"reference": "https://directoryservice.example.nhs.uk/FHIR/R4/PractitionerRole/454567759542",
"identifier": {
"system": "https://fhir.nhs.uk/Id/sds-role-profile-id",
"value": "454567759542"
}
}
}
],
"action": [
{
"coding": [
{
"system": "https://fhir.nhs.uk/England/CodeSystem/England-SDSActivityCode",
"code": "D8001:C8004:B0820",
"display": "View Patient Demographics"
}
]
}
]
}
}
User claims regarding purpose of use SHALL be made in the authentication token, e.g. within the JWT access token, using the purpose_of_use parameter, as described in the IHE IUA Technical Framework. This SHALL use the same CodeSystem used within Consent.provision.provision.purpose. As user authentication lies outside the FHIR model, examples/guidance will not be elaborated within this Implementation Guide. Questions regarding authentication mechanisms can be directed to the NHS England Genomics Unit.
{
"iss": "urn:vendor:sts",
"sub": "https://fhir.nhs.uk/Id/sds-user-id|9999999998",
"aud": "https://int.api.service.nhs.uk/genomic-order-management-service/FHIR/R4/DiagnosticReport",
"exp": 1778679127,
"nbf": 1778675527,
"iat": 1778675527,
"scope": "ITI-68",
"extensions" : {
"ihe_iua" : {
"subject_name": "Dr. Eugene Smith",
"subject_organization": "MEDWAY MARITIME HOSPITAL",
"subject_organization_id": "https://fhir.nhs.uk/Id/ods-organization-code|RPA02",
"person_id": "https://fhir.nhs.uk/Id/nhs-number|7449306524",
"subject_role": [{
"system": "https://fhir.nhs.uk/England/CodeSystem/England-SDSJobRoleCode",
"code": "S8000:G8001:R8005",
"display": "Biomedical Scientist Access Role"
}],
"purpose_of_use": [{
"system": "http://terminology.hl7.org/CodeSystem/v3-ActReason",
"code": "TREAT",
"display": "treatment"
}]
}
}
}
Categorisation of data based on sensitivity or health domain SHALL use security/privacy sensitivity labels. The types of sensitivity labels supported, and inspected, by the Unified Genomic Record are still under investigation.
"meta" : { "security" : [ { "system" : "http://terminology.hl7.org/CodeSystem/v3-Confidentiality", "code" : "R", "display": "Restricted" } ] },
Enforcement of user access will be applied by inspecting the following, to ensure appropriate access to resources for clinicians is provided:
- Consent provided by the patient (Consent)
- Sensitivity of the data itself (Security Tags)
- Permissions associated with the user (Healthcare Worker Consent/National RBAC)
- Purposes claimed by the user (IHE IUA JWT Access Token)
Data Access and Search Guidance
The Unified Genomic Record (UGR) is exposed as a FHIR Composition-based summary, structured into sections (e.g., demographics, investigations requested, results, consent, family history).
Direct care
For direct care, the UGR supports record retrieval only for a known patient. Patient discovery is out of scope and MUST be performed externally via PDS. API clients MUST supply an NHS Number or a local identifier (non-NHS Patient) previously registered via the Central Genomic Order Management System.
Supported search pattern:
Option A Clients SHALL retrieve the UGR via the Composition resource and then resolve each section.entry reference as needed. Required SearchParameters
- Composition.subject:identifier (NHS Number or local identifier)
- Composition.status=final
- Composition.type=824321000000109 (Summary record)
- Composition.category=321401000000106 (Genomics)
Example:
GET /Composition?subject:identifier=https://fhir.nhs.uk/Id/nhs-number|9449307539&type=http://snomed.info/sct|824321000000109&category=http://snomed.info/sct|321401000000106&status=final&_sort=-date&_count=1
Option B
Generate a complete UGR Document Bundle via Composition/$document operation.
Cohort / Population Search
For population health, management information, and research, cohort access SHALL use bulk query APIs, separate from the direct care endpoints. Searches MAY be performed using cohort-level criteria (e.g. genomic variants, conditions), and results SHALL be pseudonymised or anonymised and meet minimum cohort size thresholds to prevent re-identification. The minimum threshold is under review, TBC.
To protect confidentiality,, queries that risk identifying individuals (e.g. highly specific rare disease searches scoped to small geographic areas) SHALL be rejected. E.g. You cannot search for a patient in a single post-code with a rare disease.
All queries MUST operate under Purpose-Based Access Control (PBAC), with explicit declaration of purpose (e.g. research, population health).