NHSX Identity and Profile - patient-facing account wrapper and associated proxy service

Tender description

Summary of the work This is the development of an NHS 'account' for people to access everything from one place. It will incorporate a number of services including a way for people to allow individuals [proxies] to manage services on their behalf and functionality to support the proactive tailored provision of wellness services. Expected Contract Length The contract is anticipated to last five (5) months. Latest start date Tuesday 3 August 2021 Budget Range £875,000 Why the Work is Being Done Users of the NHS system today have an increasing range of services that they can access through digital means. This programme aims to create a standard approach through personalisation to relevant services, owned and controlled by the user. This holistic access would support a number of new services, including a standard way for people to allow trusted individuals [known as proxies] to manage health and care services on another person's behalf, and proactive messaging and management of tailored healthcare services. This work aims to provide: making services available through an NHS 'account' that enables people to access everything from one place; a store of key information for individual patients, including demographics, communication contact preferences, and long-term conditions, which individuals can access and manage for themselves; an ability for individuals to nominate proxies to act on their behalf; functionality to support the provision of a programme of wellness and prevention services tailored to individuals and offered on a proactive basis. Full engagement with relevant platforms will be provided to the awarded supplier. https://drive.google.com/file/d/1FWJi9xmoHDOW6977vcGehjJIbeWmCnnS/view?usp=sharing Problem to Be Solved Currently services are not connected and each time a user accesses a service they have to repeat their story, nothing is captured centrally and often they are referred to different areas. We would like to make it easier for people to transact with the NHS and also to reduce this diversity, which leads to errors in the data held for individuals. A manual process for individuals to nominate proxies through their GPs does exist but this access is confined to GP records, is not offered by all GP practices across the country and is offered inconsistency by GP practices. No consistent, nationwide platform currently exists to support the proactive messaging and management of Wellness and Prevention services https://drive.google.com/file/d/1FWJi9xmoHDOW6977vcGehjJIbeWmCnnS/view?usp=sharing Who Are the Users Potential users are all NHS patients across England who wish to access health services through digital means. As a user of digital NHS services I want to be able to access all the services I use through one login and for the services to be consistent in the way they are presented and for activities I undertake in one service (e.g. change my address) be recognised by the other services. As an organisation I want to be able to proactively send messages to appropriate patients to help them improve their health and I'd like the information that we hold on patients to be correct Early Market Engagement No early market engagement has been undertaken Work Already Done Discovery user research has been conducted on developing proxy services for parents and adults. This will be shared with the awarded supplier. Existing Team The existing team consists of two enterprise architects, and a programme manager from NHSX. We are working closely with colleagues from NHS Digital who are developing the platforms which will support this service, The App, NHS.UK and NHS Login. We are also working closely with the team on an allied programme, the Wellness and Prevention (W&P) programme. There are no other suppliers currently, although we anticipate a supplier join to support the W&P team Current Phase Not started Skills & Experience • Demonstrable expertise in user research and business analysis with expertise in stakeholder engagement, sourcing networks, conducting workshops, interviews, surveys, desktop research and use case modelling, as-is and to-be • Demonstrable expertise in defining data models/standards which underpin business requirements. Capability in successfully documenting user requirements using popular formats such as user stories, acceptance criteria using behaviour-driven development format • Demonstrable subject matter expertise in decentralised identity, verifiable credentials, microservices, cloud native technology, network and application security and event streaming and an understanding of the Trust over IP architecture stack. • Demonstrable experience in defining and documenting design patterns and technical and data architecture and production of reference architectures • Demonstrable specialist capability and expertise in information governance and policy analysis. Capability to investigate and define information flows between government, ALBs and other associated organisations and to inform policy. • Demonstrable specialist capability and expertise in developing prototypes to validate and demonstrate design patterns and technical designs by producing functional prototypes. Nice to Haves Demonstrable experience of working in, and an understanding of, the challenges of digital transformation in the health and care sector. Work Location The work can be performed from any location, but it will be coordinated by staff in NHSX Leeds office, Quarry House, LS2 7UE Working Arrangments In order to maximise knowledge transfer and to integrated with the team the supplier staff will work to NHSX standard hours, that is 7.5 hours a day during 9.00-17.30 Monday to Friday. Meetings will be by video conferencing using G-Suite technology. There are no expenses expected for this work as travel will not be required. If a need arise this will be in line with NHS E/I travel and expense policy. Security Clearance All must have BPSS as a minimum Additional T&Cs No additional terms and conditions will be used No. of Suppliers to Evaluate 5 Proposal Criteria • Expertise, innovative approach and methodology (40%) • Value add (5%) • How risks and dependencies are identified and approaches (5%) to manage them • How the Offeror plans to communicate to stakeholders, including progress (10%) Cultural Fit Criteria Work as a team and share knowledge with our organisation, other organisations and other suppliers, and demonstrate the approach for working with a wide range of service users Payment Approach Capped time and materials Assessment Method • Case study • Work history • Reference • Presentation Evaluation Weighting Technical competence 60% Cultural fit 20% Price 20% Questions from Suppliers 1. Are you able to clarify what level of engagement the existing team will have on this project? The existing team are fully engaged on this project, some working full time and others 0.5 full time equivalent. We would expect to have almost daily contact with the appointed supplier 2. Are you able to clarify whether the 5 month timeline for this project is fixed and, if so, how you came to arrive at this decision? The 5 month timeline is fixed due to the need to move onto the next stage in January 2021 3. Can you clarify – off the back of the “discovery user research has been conducted on developing proxy services for parents and adults” – whether you believe more discovery work will be needed at any time during the 5 month timeline? Yes we believe that more discovery work (desk research and user research) will be required in this area 4. Who from your team will be scoring applications for this opportunity and what positions do they hold at NHSX? The Panel is made up by: Lead Enterprise Architect, Enterprise Architect, and Assistant Programme Director. Supported by a Strategic Commercial lead 5. In the procurement brief it references an appendix on business capability requirements which is not included in the document. Please can you share this appendix or direct us where to find it? Apologies for the confusion, the appendix is actually referring to the bullet points in the procurement brief.We will be working up detailed definitions of the capabilities with the awarded supplier. 6. In the procurement brief it references an appendix on business capability requirements which is not included in the document. Please can you share this appendix or direct us where to find it? Apologies for the confusion, the appendix is actually referring to the bullet points in the procurement brief.We will be working up detailed definitions of the capabilities with the awarded supplier. 7. We notice that reference is made in Outcome 2 to an “Alpha Release”, whereas Outcome 4 refers to a profit of concept/working prototype and “…one or two proposed solution architectures…” Could you please clarify the desired development state of the deliverables? Outcome 2 is describing how we require the NHS Account features to be delivered iteratively towards an Alpha Release. Outcome 4 is describing the need to do a discovery for Proxy Access which will be integrated into the NHS Account at a later stage - this discovery would include a proof of concept/prototype. 8. Can we assume that the development work and all working documents will require to be in NHS environments and that appropriate (adequate) access will be provided to enable development work to take place? Yes, and guidance and full briefing will be given to the appointed supplier 9. Should we be mindful of existing software available to NHS that would be preferred for the MVP/Alpha? Yes, and this will be briefed at the start of the assignment 10. Should the development be an Alpha, what level of productisation do you envisage for the landing pages for users and will there be a candidate set of users to work with? We require an Alpha release . The scope is to be determined before the supplier is appointed. We expect a level of productisation that is consistent with an Alpha release. We will provide contact with end users for the appointed supplier 11. Will obfuscated data be provided or what assumption should be made around data and the classification assumptions required? No obfuscated data will not be provided. We expect suppliers to define a candidate data model, including classification choices and to produce test data based on this model 12. In the question; Demonstrable subject matter expertise in decentralised identity, verifiable credentials, microservices, cloud native technology, network and application security and event streaming and an understanding of the Trust over IP architecture stack. Could you please clarify what is meant by Trust over IP architecture stack? The Trust over IP Foundation can be found at https://trustoverip.org/ and introduces the concept of a dual governance and technology stack 13. Is this inside or outside of IR35? This is a requirement for an organisation to provide the services, not an individual. IR35 regulations do not therefore apply 14. Is there an incumbent supplier? If so who? No, there is no current supplier for this work 15. Roughly what proportion of the work will require user research resource as opposed to the other skills mentioned? It is anticipated that the user research will be in the region of 25-30% of the overall work 16. Is there an incumbent and if so, whom? No, there is no current supplier for this work 17. What will the alpha phase consist of? A working prototype with the full features that is agreed with the NHSX project team 18. There is differing information as to the timelines for the project, please can you confirm the estimated start date and length of the engagement? We would like the supplier to start the first week in August and the work can run to December. 19. Does the allocated budget for this ITT relate to the alpha phase or the entire project? The allocated budget is for the work as described. The entire project is larger than this piece of work 20. For the references, is there a preference for NHS/Health or would you accept other sectors too? NHS/Health references would be preferable, but references from other sectors are also acceptable. 21. What is the expected format for the following outcomes: · PoC; · Architecture; · Design Patterns; and · Working Prototype. Working and testable product/code, architecture documents and reports including reference implementations, building blocks, diagrams, matrices, lists 22. For the working prototype, do you anticipate the need for APIs and/or other connections or will this be completed within a standalone production environment? Yes, APIs and connections will be required as part of the working prototype 23. Have you done any technology prototyping on the Trust over IP stack with Aries or other frameworks? No. However, some features of verifiable credentials have been developed for digital staff passport with limited functionality to support staff movement during COVID response in 2019. 24. What types of resources are required? Please share number of resources are required per resource type.We assume that resources can work from outside UK (offshore) also. The type / number of resource are to be determined by the supplier according to the requirements of the brief. We are working remotely so outside of the UK is feasible but must work within UK office hours as stipulated. Our preference is for personal data to be processed within the UK / EEA country or any other country the EU judges to have data protection legislation that matches the General Data Protection Regulation (GDPR)