Protecting and safely using data in the new NHS England

In February 2023 NHS Digital merged with NHS England. NHS Digital had responsibility for designing and operating national data infrastructure and digital systems. It safely and securely collected, analysed, and disseminated data from health and adult social care services in England and in some cases, Wales, Scotland and Northern Ireland. NHS England also collects, analyses and disseminates data from health services.

The Government has used the powers in the Health and Care Act 2022 to make regulations to transfer the statutory functions of NHS Digital, to NHS England. 

NHS England has become the single executive non-departmental government body with responsibility for digital technology, data and health service delivery in the NHS.

NHS England has assumed responsibility for all activities previously undertaken by NHS Digital. This includes running the key national IT systems which support health and social care, as well as the collection, analysis, publication and dissemination of data generated by health and social care services, to improve outcomes. 

This is a guide explaining how NHS England will continue to be an effective and secure guardian of public data, when it assumes responsibility for these activities.

Data powers our NHS and is key to understanding and improving our services. It drives innovation and research, helps us to reduce inefficiencies and health inequalities and improves patient outcomes. 

The merger follows a recommendation in Laura Wade-Gery’s review, Putting data, digital and tech at the heart of transforming the NHS (November, 2021). 

This merger will reduce duplication, bringing the NHS’s national data and technology expertise together into one organisation. This will enable a closer link between the collection and analysis of data, and the delivery of service improvements as a result of that insight.

This document is organised around the following five promises:

1. NHS England will only use data to help deliver better services and outcomes for patients.

2. People can have confidence that their choices will be honoured and that their data is protected, secure, respected, and used appropriately.

3. NHS England will ensure its staff are trained and supported to maintain the highest standards of data protection, reinforced by robust data management processes and governance.

4. NHS England will operate with transparency and accountability. It will obtain independent, expert advice to oversee and assure its role as a data safe haven.

5. NHS England will use best-in-class technology and will continue to innovate to support data security.