NHS: Databases
The question
To ask the Secretary of State for Health and Social Care, with reference to the Answer of 17 November 2025 to Question 88027 on NHS: Databases, how compliance with access controls for external contractors to NHS patient data is enforced and verified.
Answered by Preet Kaur Gill
Access to National Health Service data within the NHS Federated Data Platform (NHS FDP) is strictly controlled and only granted to authorised users for defined NHS purposes. Access to the NHS FDP is subject to comprehensive monitoring and governance, including full audit logging, regular assurance activity, and oversight by NHS England.
The NHS has strict policies in place for managing access to patient data and carries out regular audits to ensure compliance.
Access controls are enforced through layered technical and organisational safeguards, including purpose, time-limited, and role-based access control, encryption, comprehensive audit logging, and continuous monitoring. These controls are supported by governance processes and formal approvals to ensure access is restricted to authorised users and justified purposes only.
Verbatim has judged this answer against the question that was actually asked — answered, partly answered, or evaded. Sign in to see the verdict →