Skip to main content
The Website Services team at NHS England are testing early designs to understand how you find information. Your views will help us check our ideas work. Sign up to take part in our user research.

Data sharing standard 11 - Territory of Use

This standard is part of a series of guidance documents to support the various stages of a DARS application. 

Page contents

Standard description

The territory of use describes the geographical area in which data processing is permitted under the data sharing agreement. 

1. All data sharing agreements must state the territory of use, which will be one of either:

  • England/Wales
  • UK
  • UK and EEA
  • worldwide

2. The territory of use must cover all processing locations (see standard on Data processing).

3. Adequate security assurance must be provided for all processing locations (see standard on Security).

4. Processing outside the EEA is only permitted where additional conditions have been met in relation to the proposed processing location.

Please note that this standard will be updated shortly for requirements where cloud storage/processing is occurring.

1 General Data Protection Regulation, Chapter 5, Art. 44-50

Last edited: 24 January 2025 12:41 pm