How your data is used

Health data is information about you and your health or care. This includes things like your age, test results, medicines, and visits to your GP or hospital.

NHS staff use this information to understand your needs and give you safe, effective care.

The NHS collects health data to care for you and to improve services for everyone. Using health data helps us understand local health needs, plan services, and make sure care is fair and effective.

This information supports better care now and better planning for the future.

Healthcare professionals use your health data to provide and manage your care. For example, it helps doctors and nurses diagnose conditions, prescribe treatment, and share important information between NHS services.

This helps your care be safer, quicker, and more joined up.

Yes, the NHS may use your health data to help plan services and improve care. This type of use helps the NHS understand health trends, reduce inequalities, and support research into new treatments.

These uses follow strict legal and security rules and are separate from your direct care.

Yes. In most cases, when the NHS uses data for planning or research, it removes or replaces details that identify you, such as your name or address, with a code.

Only authorised people can access your health data. This usually includes NHS staff involved in your care and trusted organisations working with the NHS for approved purposes.

The NHS limits and monitors access, and only allows it when there is a clear legal reason.

No, the NHS does not sell your data or use it for marketing. Your health information is protected by law, and is never shared for advertising or commercial promotion.

The NHS keeps your data safe using strong security measures. The NHS stores information securely, limits access to authorised staff, and regularly checks and protects its systems.

These safeguards help prevent misuse or unauthorised access.

No, the NHS does not share your health data outside the UK unless the destination has legislation that protects your privacy. Any sharing must meet legal, security, and confidentiality standards. Most data is used only within the NHS.

This is called the National Data Opt-out.

You can choose how the NHS uses your data beyond your own care. You can opt out of the NHS using your data for planning and research, and this will not affect your NHS care. Opt out here.

This is called a Type 1 Opt-out.

A Type 1 Opt-out will stop your data being shared by your GP practice. To do this you need to fill in an opt-out form and return it to your GP practice.

Only your GP practice can process your opt-out form. They will be able to tell you if you have been opted out, and when.

If you choose a Type 1 Opt-out, your GP will not share your data for research and planning. However, NHS England will still be able to collect and share data from other healthcare providers, such as hospitals.

The NHS may still use your data in some situations, even if you opt out. This includes when the law requires it, when you give consent, or during emergencies to protect public safety, such as during the COVID-19 pandemic.

My Care Record helps NHS services share information for your direct care. It allows healthcare professionals to see important health information so they can make safer and quicker decisions.

NHS services only use My Care Record for direct care and follow strict privacy rules.

National decision and procurement

The NHS Federated Data Platform (FDP) is a nationally commissioned system that NHS England procured and approved through established and regulated procurement processes. NHS England made this decision following a formal and robust procurement exercise, and local organisations do not determine the outcome.

As an Integrated Care Board, we do not select national suppliers and do not seek to revisit the results of the procurement process.

Data security and governance

Strong information governance, legal and security controls support the FDP. These controls define how organisations can access, use and protect data.

NHS organisations remain the data controllers for their information. Authorised users can only access data for approved purposes. In addition, the supplier operates solely under NHS instruction. The supplier does not control NHS data and cannot access, use or share that information for its own purposes.

Local implementation and oversight

Locally, we focus on implementing and governing the FDP across our system. By doing so, we can use data more effectively to improve population health, tackle health inequalities and enhance services.

We also work closely with partner organisations, including general practice. This collaboration helps us provide clear information about the platform, explain how data flows operate and demonstrate the safeguards that protect patient information.

Engaging with partners and stakeholders

We recognise that people hold different views about the FDP and its supplier. However, our responsibility is to support informed, evidence-based engagement across the system.

When concerns arise, we address them openly. At the same time, we ensure that discussions remain grounded in the established governance framework and the legal obligations that apply to NHS data.

Working within the national framework

The FDP forms part of a national NHS programme, and NHS organisations are expected to work within that framework. In practice, choosing not to engage with nationally commissioned infrastructure would create significant operational and system-wide challenges. For example, it could affect population health management, service planning and direct care activities.

Therefore, our approach focuses on using the FDP safely, transparently and proportionately in line with national requirements. At the same time, we will continue to engage openly with partners and stakeholders as we implement the platform across our system.

Yes, you have the right to see your personal data. This is called a Subject Access Request, and you can ask for a copy of the information we hold about you.

Contact us to make a request and tell us what information you would like.

You can contact us if you have questions or concerns about how the NHS uses your data. We can explain your rights, your choices, and how the NHS protects your information.