New NHS guidance on AI scribes: What it means for you

Quick background

“Through its Plan for Change the government is getting the NHS back on its feet and slashing waiting lists. Guidance published today will encourage the use of these products [i.e. ambient AI medical scribes] - which use speech technologies and generative AI to convert spoken words into structured medical notes and letters - across a range of primary and secondary care settings, including hospitals and GP surgeries.”

Guidance breakdown

Clinical Safety and Risk Management (DCB0160 Compliance)

1. What you need to do: Assign a Clinical Safety Officer and complete your own DCB0160 clinical safety assessment, documenting potential risks and outlining clear mitigations.
   
   
2. How Heidi helps: Heidi has thoroughly completed our DCB0129 clinical safety assessments, and our detailed documentation can support you in preparing your own DCB0160. Our team collaborates closely with your clinical safety officers, providing guidance and support every step of the way.
   
   

Data Protection Impact Assessment (DPIA)

1. What you need to do: Conduct your own DPIA to clearly identify and mitigate any privacy risks, ensuring patient data is handled securely and transparently.
   
   
2. How Heidi helps: Our team has compiled all necessary documentation, examples, and resources that can assist you in completing your DPIA. Reach out to us anytime for expert advice and practical support - we're here to simplify and clarify the process, ensuring you have all the tools needed for successful compliance.
   
   

Transparency and Patient Engagement

1. What you need to do: Clearly communicate to your patients about how their data is being captured, processed, and protected. Ensure they’re fully informed and comfortable with the technology used during their visits.
   
   
2. How Heidi helps: Transparency is integral to Heidi. We provide patient-friendly resources such as easy-to-understand leaflets and digital consent tools, helping your patients understand exactly how their data is used and providing reassurance during their interactions.
   
   

Information Governance and Security Assurance

1. What you need to do: Validate robust data governance and security measures, thoroughly vetting third-party providers and regularly reviewing your security practices.
   
   
2. How Heidi helps: At Heidi, security is foundational. Our platform holds ISO27001, Cyber Essentials, SOC 2 certifications, and our rigorous vendor assessments are fully aligned with NHS requirements. Rest assured, your data - and your patients' data - is protected to the highest standards.
   
   

Staff Training and Competence

1. What you need to do: Ensure your team is trained, confident, and skilled in using ambient AI tools, clearly understanding the strengths and limitations of the technology.
   
   
2. How Heidi helps: Our training programs are designed to empower your clinical teams through practical workshops and continuous, accessible support. Our dedicated support team is always available to assist, ensuring everyone feels confident and skilled in using Heidi effectively.