NHS: Databases
The question
To ask the Secretary of State for Health and Social Care, with reference to the Answer of 1 July 2025 to Question 60619 on NHS: Databases, if he will implement an independent audit arrangement to monitor access to identifiable patient data by external contractors working on the Federated Data Platform.
Answered by Preet Kaur Gill
Access to the NHS Federated Data Platform (NHS FDP) is subject to comprehensive monitoring and governance, including full audit logging, regular assurance activity, and oversight by NHS England. The platform operates within established United Kingdom data protection frameworks, with activity monitored and independently reviewable to ensure access remains lawful, proportionate, and appropriate. An independent audit arrangement to monitor access to identifiable patient data by external contractors working on the NHS FDP is not planned, however regular audits are undertaken by NHS England.
Suppliers act solely as data processors under NHS England instruction and do not control or use National Health Service data for their own purposes. Access is contractually restricted, tightly governed, and fully auditable, with strict confidentiality obligations and compliance with UK General Data Protection Regulation and the Data Protection Act 2018.
Verbatim has judged this answer against the question that was actually asked — answered, partly answered, or evaded. Sign in to see the verdict →