Skip Navigation

Registration Authorities and smartcards

Smartcards and access control are secure measures by which clinical and personal information is accessed by only those that have a valid reason to do so.

icon National Registration Authority Policy [216.63KB] and  icon Operations and Process Guidance [1.14MB]

Registration Authority training

Care Identity Service guidance leaflets and forms

Ordering a supply of smartcards and readers - RA support teams with an account on the Oberthur portal can order a supply of smartcards, and readers can be ordered directly from NHS Digital. Individual card users should contact their local RA team. If you're a primary care provider, find out who to contact. Find out more about ordering smartcards and smartcard readers.

To be issued with an NHS smartcard, health professionals and NHS staff must have their identity verified to NHS Employers' identity check standards.

Registration Authorities

A Registration Authority (RA) is a function, usually within a NHS organisation, that carries out the identity checks of prospective smartcard users and assigns an appropriate access profile to the health professional's role as approved by the employing organisation. 

Smartcards are required to access NHS Spine information systems and Registration Authorities roles and responsibilities are defined by NHS policy.


NHS smartcards are similar to chip and PIN bank cards and enable healthcare professionals to access clinical and personal information appropriate to their role.

A smartcard used in conjunction with a passcode, known only to the smartcard holder, gives secure and auditable access to national and local Spine enabled health record systems.

How are records protected?

The icon NHS Care Record Guarantee for England [128.24KB]  sets out the rules that govern how patient information is used in the NHS and what controls patients can have over this. It covers:

  • people's access to their own records
  • controls on others' access (such as carers)
  • how access will be monitored and policed
  • options people have to further limit access
  • access in an emergency
  • what happens when someone cannot make decisions for themselves

Everyone who works for the NHS or for organisations delivering services under contract to the NHS has to comply with this Guarantee. It was first published in 2005 and is subject to regular review, ensuring it remains clear and continues to reflect the law and best practice.

Find out more about Registration Authorities and smartcards

Registration Authority software downloads page 
Service provider contact details
Smartcard printers
icon ​​​​​​​Download our national Role Based Access Code (RBAC) table. [5.32MB]

Can't find what you're looking for? Visit our archive.


Have a question? Call us on 0300 303 5678 or contact

Tell us what you think of the new website beta.

We use cookies to provide you with a better service. Carry on browsing if you're happy with this, or find out how to manage cookies. Find out more