HSCN - required by Third Party Applications?

Hi All,

My name is Josh and I am just starting upon my journey down the rabbit hole, which is health IT.

I am working alongside a company that has developed an AWS cloud-based application, which observes a patient’s possibility of cognitive impairment. They are looking to integrate it with secondary care EHRs at the moment, however we are not 100% sure they would require to get a connection to HSCN.

From what we have gleaned, ‘HSCN is necessary to access NHS services’, therefore we interpret that as national Spine services and not necessarily trusts at a local level.

Therefore the question I ask is: Based on your knowledge of NHS IT, would you think a HSCN connection for a third party application would be necessary to integrate with a trust’s EHR system, with patient demographics being pulled/pushed? (or possibly desirable, as we move into a ‘less secure’ internet environment, as a safety net)

I don’t think it is required.

I’m also working with a new EPR vendor also hosted on AWS. We believe we can receive updates to our system from a hospitals PAS - it would probably be configuration the trust could do connect externally to AWS and we would need to do some IG work.
official guidance is here Guidance on public cloud connectivity to HSCN - NHS Digital

Thank you for the input Kev.

I understand all the ‘First’ policies that are flying about, but I know that there can be a hesitance to new things, especially when moving from something which was engrained as ‘gold standard’ for security over the years. (e.g. I was still using a DOS-based LIMS until a few years ago)

Do you feel that the requirement for a HSCN connection, from a procurement aspect, is less major now?