Secure email standard (DCB1596) guidance

Organisations that prefer to accredit rather than joining NHSmail can do so either by the Office 365 or self-management routes. To be considered secure, you must provide evidence to be accredit to the standards requirements. All accreditations are valid for one year only and must be renewed every year. 

The standard is valid only for organisations that provide health and social care, have an active Organisation Data Service (ODS) code and need to exchange sensitive information.

This standard is for organisations based in England only as Scotland and Wales have their own approach to secure email.   We have asked Scotland and Wales to provide details of their schemes to see if it is possible to agree a level of equivalence to support cross border flows.