Infrastructure operations and support

NHS Digital’s preference is that all personal data is processed within the UK.  

If you do need to process personal data outside the UK, it is acceptable in countries recognised by the UK as providing an adequate level of data protection. Countries currently deemed adequate are listed on the ICO website and include the EU member states. 

Where it's necessary to process personal data outside of the UK, the EU or an adequate country, you must contact the Privacy, Transparency and Ethics (PTE) team by emailing [email protected]. You will need to complete a Global Data Transfer Assessment. 

A copy of the NHS Digital Cloud hosting policy is available for internal users on request. 

Contact us by emailing [email protected].