VerbatimParliament, as it happens

NHS: Databases

Asked by Ian ByrneLabourDepartment of Health and Social CareTabled Answered 16 April 2026UIN 123741

The question

To ask the Secretary of State for Health and Social Care, what role Senior Information Risk Owners and Caldicott Guardians play in overseeing data governance for the Federated Data Platform (FDP) within Integrated Care Boards and NHS trusts; and whether those roles are held by executive board members.

Answered by Dr Zubir Ahmed

Every integrated care board and National Health Service trust board, who are data controllers for data held within their own individual instance of the NHS Federated Data Platform, has responsibility for data governance and managing risk.

Integrated care boards in the NHS are mandated to appoint both a senior information risk officer and a Caldicott Guardian. These roles are essential for ensuring compliance with patient data confidentiality, information governance, and the secure handling of information within the organisation.

Information on whether or not Caldicott Guardians are Executive Board members is not held centrally.

Verbatim has judged this answer against the question that was actually asked — answered, partly answered, or evaded. Sign in to see the verdict →

Open this question in Verbatim →

Every written question, searchable

155,000 questions tabled since the election, with the answer each department gave — and the ones still unanswered, with the clock running. Free to search.

Search written questions →Read on Verbatim